Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa
File:                     323830333a646539303a3a2f33322d3438203d3e20323634373733.roa (raw, json)
Hash identifier:          Rk0NMNc3ALVFGEgPNslwaYkQ8NBdiniXNZM6P4HmWB8=
Subject key identifier:   C0:A2:30:17:CD:DC:62:72:62:1C:2F:69:61:4D:52:18:2A:3C:4E:8D
Certificate issuer:       /CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
Certificate serial:       5B37B98753655B41538B2F062DE8B922AF830E35
Authority key identifier: 18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa
Signing time:             Wed 25 Jun 2025 22:23:40 +0000
ROA not before:           Wed 25 Jun 2025 22:18:40 +0000
ROA not after:            Wed 24 Jun 2026 22:23:40 +0000
asID:                     264773
IP address blocks:        2803:de90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 09:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:37:b9:87:53:65:5b:41:53:8b:2f:06:2d:e8:b9:22:af:83:0e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
        Validity
            Not Before: Jun 25 22:18:40 2025 GMT
            Not After : Jun 24 22:23:40 2026 GMT
        Subject: CN=C0A23017CDDC6272621C2F69614D52182A3C4E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:5f:4b:97:87:76:d0:9c:7c:84:91:6b:1a:
                    c2:52:85:6a:54:04:0d:40:1e:65:f5:fd:b4:ee:64:
                    8e:d8:18:c9:76:cf:b6:cf:c7:52:2d:bb:cc:25:50:
                    59:4f:29:3d:6b:ca:73:1d:43:97:01:b8:11:9e:b6:
                    34:ac:7d:32:75:60:6d:72:b3:59:02:93:53:fd:fb:
                    02:b3:4d:d6:ab:78:66:2b:1c:29:d6:93:2b:c5:90:
                    ec:3d:13:7b:04:cc:75:d4:1d:a7:80:cb:61:7f:82:
                    53:ea:f2:3c:a1:6a:0f:d2:05:8a:90:5a:2c:64:f0:
                    fd:54:af:ae:cf:cb:18:9e:a8:0c:f0:13:82:80:13:
                    b5:6e:bd:17:70:d9:d0:b1:ca:11:71:c3:f5:ac:b2:
                    b9:a8:88:76:68:93:5b:c9:c9:82:b1:0e:4d:76:c6:
                    1c:0a:ba:99:08:51:2a:69:96:43:56:88:61:7a:3c:
                    4e:72:b1:81:5d:7f:50:14:2c:06:e8:df:41:4a:eb:
                    59:68:7f:0b:c8:ee:b3:6e:24:fd:c7:60:47:bf:4f:
                    18:fd:91:d7:04:a3:53:b5:2d:80:c3:38:d7:02:70:
                    a6:8c:f5:26:85:e7:f2:2e:e9:84:24:0b:06:f8:9b:
                    5b:b6:c6:8d:a5:12:d2:7b:aa:c8:6b:c6:ab:7b:d2:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:30:17:CD:DC:62:72:62:1C:2F:69:61:4D:52:18:2A:3C:4E:8D
            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de90::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:1a:7c:df:78:f1:63:75:1a:0d:00:70:5a:68:b8:ba:63:
         4b:22:4d:9e:5d:46:a1:dd:d9:08:2a:85:c2:66:a9:69:7e:f5:
         8d:a6:e9:35:74:ea:a2:1b:78:00:a9:d4:00:28:47:54:d4:30:
         db:65:5a:4d:4c:b0:0d:2f:27:d8:2d:af:0c:0b:3a:3d:07:68:
         7c:ae:87:52:93:89:cd:c2:88:30:41:36:72:a0:83:ad:c4:5a:
         5a:26:f6:07:5e:8b:ba:fe:c8:f7:c5:09:94:81:42:d4:57:a0:
         32:30:62:d7:67:3b:83:11:6d:c8:aa:63:f2:73:d0:60:9a:a2:
         9b:7f:37:77:68:a1:93:05:f7:fe:3f:65:7f:70:03:78:74:56:
         8a:8a:9b:e6:86:42:41:9a:7a:4e:74:ab:aa:08:b1:f1:05:10:
         2f:a7:8d:80:6b:de:75:4f:83:eb:95:5c:a9:c7:c9:6b:0b:84:
         84:bf:2c:79:7a:31:81:19:48:72:ba:b0:8f:2a:89:86:2c:99:
         75:77:85:ff:98:78:70:21:5c:c9:5a:69:f6:58:c6:29:b5:51:
         03:a9:b2:79:80:f2:90:3c:90:5f:2a:70:9c:59:74:0f:a4:df:
         1f:79:a8:01:1c:58:eb:89:53:dc:8a:cb:5f:bb:4d:a3:ba:7f:
         b9:7c:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:30:11 2025 by rpki-client