Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a3a2f33322d3438203d3e20323733383231.roa
File:                     323830333a653135303a3a2f33322d3438203d3e20323733383231.roa (raw, json)
Hash identifier:          9YsOLweaYiLBjta71wfVllwZPH0q/pskoe6aoM06T0c=
Subject key identifier:   FE:6A:33:1A:2A:74:26:5C:FC:6E:48:1C:AB:64:4B:D5:A1:6C:7E:96
Certificate issuer:       /CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
Certificate serial:       775DF9B9AED2E47F6F20E4F726575F2C4DCF9DE8
Authority key identifier: DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a3a2f33322d3438203d3e20323733383231.roa
Signing time:             Fri 16 May 2025 17:19:12 +0000
ROA not before:           Fri 16 May 2025 17:14:12 +0000
ROA not after:            Fri 15 May 2026 17:19:12 +0000
asID:                     273821
IP address blocks:        2803:e150::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 May 2025 00:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5d:f9:b9:ae:d2:e4:7f:6f:20:e4:f7:26:57:5f:2c:4d:cf:9d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A
        Validity
            Not Before: May 16 17:14:12 2025 GMT
            Not After : May 15 17:19:12 2026 GMT
        Subject: CN=FE6A331A2A74265CFC6E481CAB644BD5A16C7E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:3c:b4:48:1a:24:db:3c:6d:b0:27:81:43:
                    dc:54:19:8f:b3:a1:3a:02:c6:dc:25:48:4f:8d:49:
                    71:29:10:71:b7:5e:51:d6:72:4e:f2:d6:f5:42:ca:
                    b4:2d:77:df:0e:c9:dd:fc:b8:36:d9:5a:72:1b:f9:
                    ff:80:84:ba:4e:9f:e5:c8:e6:50:cb:18:8c:73:d8:
                    3b:ea:a2:b3:1b:e4:e0:18:12:26:9f:a1:2d:27:30:
                    2a:05:e9:eb:5e:a4:23:ef:a1:91:92:6c:1d:5a:32:
                    d8:27:18:37:e9:39:e8:a2:d2:cf:6b:08:05:6c:59:
                    1f:d5:e2:d9:ef:f5:35:b0:01:d6:ce:ec:5b:44:20:
                    3b:22:39:0b:da:39:17:42:a4:ff:eb:ef:b5:9e:0c:
                    43:e3:a6:ac:a8:9a:6d:25:8c:ac:55:2c:d7:b2:d6:
                    af:6b:75:d2:f5:8c:47:e5:30:f7:ba:ae:34:55:70:
                    e4:de:b8:2c:5e:b6:60:73:d7:46:3a:e1:13:12:4f:
                    92:7f:ca:81:8b:32:c3:55:e7:57:95:2d:94:af:35:
                    00:20:4e:f6:92:05:68:40:95:5c:b5:8f:65:aa:95:
                    9a:d2:4e:48:1e:b5:ea:05:89:fe:ae:9e:6b:b7:79:
                    1e:0b:34:86:46:d6:9d:3b:1f:12:5a:66:da:97:a1:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6A:33:1A:2A:74:26:5C:FC:6E:48:1C:AB:64:4B:D5:A1:6C:7E:96
            X509v3 Authority Key Identifier:
                keyid:DE:0B:94:FC:CA:15:0C:4F:D7:8B:B4:84:7D:B8:7C:5A:BB:77:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0B94FCCA150C4FD78BB4847DB87C5ABB770F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30143F66BF8870838A5F4C6EED7A9056CD230C5974EAD1663FC474D08A6FA573/0/323830333a653135303a3a2f33322d3438203d3e20323733383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e150::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:b1:24:20:9b:9c:48:45:c1:7a:54:4a:fd:01:eb:d3:07:
         c6:4d:75:2d:ee:97:d8:a4:f4:90:98:0f:c2:55:00:da:fb:62:
         44:d3:c2:33:a8:be:ad:7f:b8:b2:51:12:cb:4a:07:d4:ce:90:
         1f:72:f6:f7:e4:3b:04:db:28:da:42:f8:9f:dc:ac:01:16:1e:
         5b:4c:06:a7:7a:00:f5:f6:f0:98:86:e0:ed:35:6a:c0:b0:e2:
         b7:1b:25:a4:a9:72:5a:22:1b:89:1c:99:d9:ff:df:32:05:8d:
         d3:85:13:62:4d:9a:36:e9:e2:54:6f:a9:ae:ce:33:be:17:aa:
         f4:c4:1d:c8:a9:b5:fc:e2:ac:10:48:ba:77:92:1f:33:89:df:
         97:5b:04:7a:d7:86:fa:90:c3:a9:3b:0a:b8:98:d8:f5:52:67:
         7c:d1:d0:dc:92:d1:04:f2:2e:b1:6e:cf:d9:54:85:2a:36:09:
         b3:84:d4:6b:b1:93:c8:14:e8:13:b0:14:ac:3d:35:4b:48:44:
         87:31:d2:f4:3a:92:fa:39:b7:a2:a0:23:37:44:ac:6a:20:03:
         93:83:7f:2c:bc:c1:00:e3:99:bc:5b:2d:12:24:b4:2d:22:07:
         26:41:a3:d2:78:f3:84:d8:20:26:e5:c3:db:52:50:01:ab:86:
         3b:cd:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 08:18:44 2025 by rpki-client