Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa
File:                     323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa (raw, json)
Hash identifier:          RDq7pWHVjESrRYgMBu1iLPUieo3ZLdKtrxYPTq5/Wwo=
Subject key identifier:   F3:57:8C:85:74:44:6E:97:63:2A:68:F6:44:A0:8D:E4:1E:32:5C:87
Certificate issuer:       /CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
Certificate serial:       1C84D3CAB010C55E1A76D9057F9A9260C5BA4107
Authority key identifier: 7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa
Signing time:             Thu 19 Mar 2026 20:35:12 +0000
ROA not before:           Thu 19 Mar 2026 20:30:12 +0000
ROA not after:            Thu 18 Mar 2027 20:35:12 +0000
asID:                     273828
IP address blocks:        2803:b150:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 03:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:84:d3:ca:b0:10:c5:5e:1a:76:d9:05:7f:9a:92:60:c5:ba:41:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
        Validity
            Not Before: Mar 19 20:30:12 2026 GMT
            Not After : Mar 18 20:35:12 2027 GMT
        Subject: CN=F3578C8574446E97632A68F644A08DE41E325C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:91:53:e0:77:67:bf:14:1c:4c:d6:2c:29:
                    a5:3f:40:0c:dd:89:1c:88:65:ef:21:ab:ac:0b:b1:
                    68:a5:4b:d2:31:51:1b:ff:32:bc:0f:34:a6:ea:e9:
                    a1:83:d0:ee:c0:26:ea:a0:0e:73:f6:60:7a:5d:ad:
                    a2:87:e5:8b:7b:0e:70:d0:96:55:01:a0:2f:9f:26:
                    34:98:df:ed:bd:9e:c5:80:af:6d:5c:2a:f8:3c:b9:
                    6b:32:31:52:1c:9a:f8:ec:94:00:5e:9b:56:e4:a3:
                    ae:36:2b:e1:81:54:93:66:71:01:f1:63:49:36:b3:
                    fb:4b:de:5c:65:fd:be:02:9a:13:f1:0f:1e:2d:00:
                    43:96:93:0e:12:8d:7a:35:71:8d:c7:cb:af:db:3b:
                    90:82:a1:0b:f5:fa:74:d4:66:84:00:d5:47:72:cb:
                    92:e3:a1:aa:8e:a6:23:51:8f:5c:81:79:91:89:05:
                    91:29:84:f3:81:12:ca:00:39:fa:a0:76:11:f5:e9:
                    1f:2a:05:d4:a7:90:df:37:5a:e5:b1:44:13:ca:de:
                    72:13:e7:3c:70:f5:d7:ba:0d:19:21:b9:bc:58:ae:
                    dc:9b:42:42:47:24:34:3a:53:43:83:57:fc:43:15:
                    57:05:f5:72:59:37:2c:9e:a7:02:a7:95:48:09:c0:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:8C:85:74:44:6E:97:63:2A:68:F6:44:A0:8D:E4:1E:32:5C:87
            X509v3 Authority Key Identifier:
                keyid:7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a383030303a3a2f33332d3333203d3e20323733383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b150:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:a1:17:c5:5a:f2:29:ee:c8:ec:b3:66:20:df:c9:d2:7a:
         c8:f9:e3:0f:0c:a8:b4:8f:0c:58:e2:de:7d:e7:13:4f:57:75:
         4d:d9:9a:7c:2b:7b:e0:5e:b5:b9:fc:19:94:37:5f:7a:71:12:
         9c:86:f1:0b:27:30:e6:05:56:b6:3e:16:9b:19:ee:e9:76:8f:
         05:6a:33:51:a1:da:4a:f6:b7:41:7c:1c:9b:bd:06:f8:37:94:
         a4:87:60:b9:48:9a:f6:80:3f:df:4c:f7:38:f0:61:3a:b3:c3:
         fb:70:69:14:50:41:b9:41:94:a8:16:58:a8:a9:56:88:3d:4d:
         dc:57:7b:54:bc:d6:4f:d6:0d:22:ef:09:dd:6d:e4:53:d1:c0:
         58:83:37:68:5e:14:2e:0a:4d:32:9c:34:5c:ff:e4:fe:59:98:
         27:76:6a:66:98:38:16:19:63:c1:65:ed:d1:59:93:94:d2:ba:
         7a:91:58:55:9b:70:95:f9:3c:5b:aa:f9:1d:50:15:ed:f6:76:
         15:d0:ec:e7:d4:05:46:b6:e6:60:2e:29:fd:17:bb:5a:88:fb:
         d1:f1:5c:05:a6:93:ab:ad:9e:ee:45:0e:d7:1e:54:d6:63:76:
         02:7a:e6:3f:64:d5:73:6f:f0:37:e3:a5:c5:ec:c7:d3:50:6e:
         b2:c1:4a:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:16:12 2026 by rpki-client