Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa
File:                     323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa (raw, json)
Hash identifier:          I9DlxIwLXhiVcbUsWoneEx/1H41Pf9dTuygyhwRnOXs=
Subject key identifier:   29:71:58:BE:8D:74:A8:85:CC:0D:BF:DC:C4:23:5F:1F:8A:93:4F:9A
Certificate issuer:       /CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
Certificate serial:       4736E1FE82FA999438133FFB4343C78064129B22
Authority key identifier: 7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa
Signing time:             Thu 17 Apr 2025 20:15:09 +0000
ROA not before:           Thu 17 Apr 2025 20:10:09 +0000
ROA not after:            Thu 16 Apr 2026 20:15:09 +0000
asID:                     273828
IP address blocks:        2803:b150:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:36:e1:fe:82:fa:99:94:38:13:3f:fb:43:43:c7:80:64:12:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
        Validity
            Not Before: Apr 17 20:10:09 2025 GMT
            Not After : Apr 16 20:15:09 2026 GMT
        Subject: CN=297158BE8D74A885CC0DBFDCC4235F1F8A934F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:47:05:90:37:6b:2b:f2:ba:d0:b2:41:62:
                    9c:da:8c:22:e3:05:3f:9d:22:cd:37:7a:4b:ab:44:
                    b2:4f:c2:2b:bf:79:79:e1:e4:ad:c7:62:07:6a:5c:
                    b0:af:b1:82:2e:af:42:79:4f:2a:c3:f7:62:ea:3b:
                    f0:fb:c6:e8:4b:b3:16:5f:bd:89:58:7b:76:bb:17:
                    a7:8e:70:36:3b:84:88:10:8f:56:8c:82:f9:7a:2f:
                    42:f5:c1:10:65:5a:1a:78:ab:21:8a:cf:8c:43:cc:
                    12:d7:46:a3:3a:1c:c6:c2:42:66:89:c6:ff:c1:4e:
                    98:e5:0e:ef:a2:83:ac:eb:b9:6d:83:99:e8:22:87:
                    f3:dc:7e:6f:67:82:c8:ad:2f:01:68:d8:05:65:6e:
                    d9:06:52:7b:42:e1:ae:fd:c2:c1:83:7f:d1:f2:3d:
                    a4:27:11:1e:7f:0b:44:87:77:95:a6:a9:1a:8c:82:
                    8c:7d:f6:b8:b7:e6:79:5c:87:dd:f4:85:dd:9d:86:
                    e4:96:ee:70:84:c2:f3:bc:c3:c7:83:2e:97:a3:6e:
                    e6:74:8e:87:70:cc:6f:43:0d:5e:a6:f0:ba:aa:06:
                    be:b2:f0:ad:ce:1e:99:62:40:72:98:9e:6a:98:45:
                    a5:e8:f9:13:c9:38:a8:24:4a:c6:8a:46:71:9d:34:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:71:58:BE:8D:74:A8:85:CC:0D:BF:DC:C4:23:5F:1F:8A:93:4F:9A
            X509v3 Authority Key Identifier:
                keyid:7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b150:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:49:c3:de:8a:4b:78:05:55:5e:5f:62:6e:57:a1:db:0c:
         12:c8:7f:ee:70:52:74:51:58:97:44:9c:b7:27:40:ff:ed:1e:
         c1:08:dc:60:d2:fc:e1:b8:55:9e:ef:af:a8:ac:f9:54:d0:a0:
         ba:74:fa:3f:e4:d7:4d:4f:ad:cd:a4:68:bb:1e:fc:b5:ff:15:
         91:39:3f:93:00:db:4f:da:23:91:0c:a0:aa:70:ed:60:a5:05:
         3c:8b:2c:e8:66:8b:15:88:a5:6d:43:66:1c:e6:b6:c8:1e:1e:
         5f:ef:1d:25:fa:0f:5e:52:57:16:fb:bc:95:ac:99:8d:df:ef:
         f7:27:4d:94:bf:a8:1c:b3:5a:f7:32:70:a8:2d:1c:1a:cc:74:
         9e:cf:74:a6:21:40:11:4b:43:52:38:ab:e4:ef:ae:64:d8:39:
         44:d6:4e:de:c6:9b:3e:72:d9:c4:bd:42:59:62:f3:d4:09:1e:
         18:07:4d:13:df:97:76:48:76:58:04:6b:1d:0c:f8:9b:24:56:
         41:9a:05:b7:72:c2:e1:c7:2f:fd:ec:e5:8b:b6:9d:8e:d7:de:
         af:2b:c3:8b:6c:11:2e:90:e0:08:4d:7d:3b:e9:ce:2f:e8:38:
         d3:bc:f1:1f:6b:68:41:8c:bf:6b:7c:50:f6:9d:ad:09:c8:da:
         cb:8b:94:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:04:03 2025 by rpki-client