Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa
File:                     323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa (raw, json)
Hash identifier:          eHObMat3+Sw5eWcLcnZ566ts9W9KT6HuH1iHAfBlu60=
Subject key identifier:   83:8F:16:BB:38:C5:5F:EE:FD:8C:90:8B:12:DA:7D:6B:F1:C4:F1:50
Certificate issuer:       /CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
Certificate serial:       67BC02BB9DA0A7983E9E0E416D1B912B64A395AE
Authority key identifier: 7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa
Signing time:             Thu 16 May 2024 20:15:00 +0000
ROA not before:           Thu 16 May 2024 20:10:00 +0000
ROA not after:            Thu 15 May 2025 20:15:00 +0000
asID:                     273828
IP address blocks:        2803:b150:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bc:02:bb:9d:a0:a7:98:3e:9e:0e:41:6d:1b:91:2b:64:a3:95:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
        Validity
            Not Before: May 16 20:10:00 2024 GMT
            Not After : May 15 20:15:00 2025 GMT
        Subject: CN=838F16BB38C55FEEFD8C908B12DA7D6BF1C4F150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:66:c4:2b:2c:33:87:91:f9:aa:53:cc:a3:
                    01:40:a1:60:64:28:b6:90:10:ee:a1:3e:d1:03:75:
                    85:44:29:54:cf:a3:8c:41:32:0c:50:69:d8:93:bc:
                    22:6f:40:e6:2a:3a:c8:da:14:b2:c8:95:1a:63:c9:
                    bd:94:1f:f7:d6:b8:8e:33:75:7c:eb:30:d9:09:8a:
                    67:e9:7c:16:b8:6c:dd:00:19:f2:11:22:8e:f2:54:
                    dc:bf:ef:93:b7:bc:10:12:4f:c0:a1:2c:c0:30:36:
                    d4:5b:34:d6:f2:64:83:26:12:a3:a0:01:e3:31:db:
                    56:a1:e8:06:05:8e:b4:fc:78:91:fe:9b:09:25:2f:
                    c5:51:ee:84:08:04:e7:26:e0:ce:f3:18:95:72:e0:
                    c1:1b:76:bf:7c:11:b0:2d:75:6d:de:74:27:62:11:
                    50:19:c3:d8:bd:3c:b4:e1:d0:f3:ac:d1:c7:eb:b5:
                    29:7d:7c:f3:74:47:5a:39:2c:75:0d:ed:7b:a5:4a:
                    ce:41:e6:57:6d:35:5f:5d:4d:7d:b3:64:bf:08:a2:
                    91:af:9e:f6:6a:4e:3c:d4:db:38:e7:74:28:7a:d2:
                    02:68:8d:93:d2:a1:0f:67:63:f9:d3:23:00:87:4d:
                    a5:e4:36:21:d7:26:0b:9d:4a:1d:4d:5d:d1:5a:1d:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:16:BB:38:C5:5F:EE:FD:8C:90:8B:12:DA:7D:6B:F1:C4:F1:50
            X509v3 Authority Key Identifier:
                keyid:7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b150:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:96:1d:ee:e7:32:0c:f9:33:d1:99:cc:34:93:be:6d:82:
         cb:2b:b4:41:d4:46:97:6a:08:f5:18:82:89:38:b3:14:eb:ba:
         46:d3:b3:fb:ee:72:be:3a:0c:2d:17:ec:21:d5:08:ff:38:bd:
         d4:f4:25:5d:e9:77:d0:ab:a9:b3:46:66:88:fc:42:82:6b:01:
         dd:67:0a:7a:d5:45:7a:c3:a1:7a:6c:4b:60:ad:9c:d5:bd:2b:
         2c:4c:bf:e4:e7:ef:2f:32:7f:9b:05:58:a3:a9:24:65:03:99:
         63:13:4a:ec:00:06:ad:61:2a:f5:68:15:c0:f1:88:16:e3:fb:
         4b:4b:94:82:94:f1:da:c1:5c:7b:ec:17:9a:95:a8:7c:5e:bd:
         3b:44:2d:13:76:cf:9d:ba:7b:41:65:e5:f4:ab:57:62:8d:6c:
         cc:aa:b0:63:2e:34:ee:c0:3c:cb:7f:71:52:dd:4a:0b:e1:86:
         20:ad:38:2f:7c:75:89:3d:0b:b0:03:a5:b9:e7:c9:b5:e2:8e:
         28:9f:c2:e4:2f:88:2b:42:7e:37:ee:ae:9c:4c:c4:a0:b7:fd:
         83:64:c1:e9:f2:c3:e9:7f:fc:4c:ec:19:fb:84:e8:11:29:c2:
         e5:5f:6b:9a:b2:ab:d6:c0:ca:99:c7:d8:51:3d:1e:c4:59:0b:
         55:74:5f:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 18 10:23:11 2024 by rpki-client on console-ams.rpki-client.org