Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a3a2f33332d3333203d3e20323733383238.roa
File:                     323830333a623135303a3a2f33332d3333203d3e20323733383238.roa (raw, json)
Hash identifier:          PWCJr0C45ePgzskoOdRYWoaba7+AJVqxbxp3o762J/k=
Subject key identifier:   FB:ED:17:F8:06:EC:2C:ED:13:73:4C:B2:CE:E7:89:41:DD:B6:47:91
Certificate issuer:       /CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
Certificate serial:       23987B980040A3DCD48FBFFC163452D39E87A1C8
Authority key identifier: 7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a3a2f33332d3333203d3e20323733383238.roa
Signing time:             Thu 17 Apr 2025 20:15:09 +0000
ROA not before:           Thu 17 Apr 2025 20:10:09 +0000
ROA not after:            Thu 16 Apr 2026 20:15:09 +0000
asID:                     273828
IP address blocks:        2803:b150::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:98:7b:98:00:40:a3:dc:d4:8f:bf:fc:16:34:52:d3:9e:87:a1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
        Validity
            Not Before: Apr 17 20:10:09 2025 GMT
            Not After : Apr 16 20:15:09 2026 GMT
        Subject: CN=FBED17F806EC2CED13734CB2CEE78941DDB64791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:89:95:17:2f:47:77:38:71:0b:a1:df:85:
                    08:7f:98:ba:b6:74:93:26:41:ff:0d:c2:6d:38:d6:
                    b4:ae:18:72:a4:40:f8:72:d2:04:e1:07:05:44:95:
                    6f:2c:d8:29:5c:3d:eb:31:bf:08:aa:1d:70:5a:a8:
                    97:91:d3:be:3f:33:66:fa:c5:f7:66:d4:d7:6b:5d:
                    6f:92:59:99:af:19:7b:ca:a1:60:32:16:5a:eb:b9:
                    ff:f4:47:1c:e1:a0:31:f3:37:f8:b2:a3:2d:ad:aa:
                    92:22:49:be:1e:4f:a7:7b:51:af:d6:a4:e3:40:6f:
                    84:8a:7d:7a:d1:5e:96:95:4f:ff:51:bf:34:24:2a:
                    32:9e:ca:be:ed:ab:7f:36:33:87:74:47:02:cb:36:
                    55:fa:ac:f4:7b:39:ae:45:b1:23:94:4e:e3:e5:1f:
                    65:25:aa:7a:a3:5b:bb:6f:b2:6e:66:e3:4f:f2:45:
                    15:8e:ed:76:71:bd:be:8a:61:34:e8:95:0e:3c:d7:
                    9c:b0:86:8e:d0:32:65:26:80:e2:7c:7f:66:40:ef:
                    ac:67:37:0a:e5:65:32:59:51:c3:e6:d6:d2:37:c6:
                    81:b4:07:a4:86:87:ec:1b:c5:f9:ff:3f:50:bf:44:
                    e5:46:e3:db:86:6e:19:5b:47:1e:10:87:4d:70:48:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:ED:17:F8:06:EC:2C:ED:13:73:4C:B2:CE:E7:89:41:DD:B6:47:91
            X509v3 Authority Key Identifier:
                keyid:7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a3a2f33332d3333203d3e20323733383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b150::/33

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:22:1b:2b:c7:79:ec:ae:89:42:29:b7:73:d1:89:c2:58:
         e4:cd:86:36:0d:e8:49:90:6a:ec:66:cc:50:ea:79:b8:f3:96:
         47:a4:7d:6b:c9:92:d4:e1:2f:d1:6c:70:40:60:96:08:cb:ff:
         1d:2b:2a:5d:e1:51:81:95:ba:f9:ee:b3:78:c0:f4:ab:5b:84:
         16:af:49:4c:07:de:48:35:4e:a5:db:61:20:87:a1:a0:1c:bb:
         eb:a6:b3:b1:c1:bd:5c:84:ab:1e:7d:ad:73:c8:fc:c5:d2:0f:
         1e:30:b5:8d:f0:16:76:26:39:5e:c3:3b:1f:75:f8:a8:ca:b4:
         19:43:a8:b1:c8:86:15:59:1e:e5:c9:90:ef:67:da:c4:0c:dc:
         eb:4a:52:f9:83:40:0b:69:b3:f8:38:e9:86:02:47:f0:b3:e6:
         4c:7c:6b:5a:9f:3c:30:d2:94:cf:58:98:b3:41:df:13:fc:4c:
         a5:fb:57:e4:8d:fe:53:f2:9f:0b:10:91:71:13:04:3b:2b:cf:
         65:22:af:9f:01:23:ac:84:8a:dc:a1:b4:10:45:85:7c:48:1f:
         ed:13:b0:6e:d1:81:bd:03:44:14:89:0a:91:2c:ec:73:1a:31:
         7e:1f:08:3f:a5:95:05:a9:86:22:cf:a7:4d:86:72:be:de:4d:
         cc:04:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:13 2025 by rpki-client