Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a363030303a3a2f33352d3335203d3e20323730313433.roa
File:                     323830363a3364663a363030303a3a2f33352d3335203d3e20323730313433.roa (raw, json)
Hash identifier:          dbfl9rdBI6rziLqvDgz7X83DCSJci5P2d+zQhl0gCS4=
Subject key identifier:   EB:AD:58:AF:AB:F9:23:5B:99:F6:33:31:5D:DC:12:82:62:11:5A:E2
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       60E97C60CA0D7E0B58ACA77EBB28B6374E34A4E9
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a363030303a3a2f33352d3335203d3e20323730313433.roa
Signing time:             Mon 30 Jun 2025 14:10:00 +0000
ROA not before:           Mon 30 Jun 2025 14:05:00 +0000
ROA not after:            Mon 29 Jun 2026 14:10:00 +0000
asID:                     270143
IP address blocks:        2806:3df:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e9:7c:60:ca:0d:7e:0b:58:ac:a7:7e:bb:28:b6:37:4e:34:a4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Jun 30 14:05:00 2025 GMT
            Not After : Jun 29 14:10:00 2026 GMT
        Subject: CN=EBAD58AFABF9235B99F633315DDC128262115AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:dd:20:8d:43:c4:49:01:90:41:63:6d:ef:
                    db:9d:1e:e2:03:b0:3e:48:71:11:73:35:bc:aa:8d:
                    d2:57:66:6c:31:86:7a:b7:42:3d:a9:f4:bd:f1:d7:
                    20:53:a6:a2:82:e1:c5:54:16:73:03:08:c2:e8:0f:
                    ab:97:31:32:2e:38:fc:2c:a3:83:e9:04:3f:75:c2:
                    c7:af:06:a2:18:c7:32:e4:ce:90:8d:c5:38:f5:46:
                    62:c3:df:5c:9d:8f:78:1f:55:e3:ab:3e:4f:d1:f1:
                    f9:1d:c3:89:f2:f7:08:98:37:55:51:62:0a:59:91:
                    2d:77:51:98:e0:30:39:eb:11:fc:4c:28:3e:ac:8f:
                    4b:ee:60:3f:ea:2d:46:cb:ce:1e:be:d4:56:86:a7:
                    02:96:76:f7:fa:4f:0a:3a:19:0d:45:e7:91:8f:c9:
                    11:4c:df:ab:ee:15:86:43:84:be:6f:e6:b2:cd:f8:
                    c3:db:27:c4:e6:7e:6d:1c:d9:51:37:62:04:47:ab:
                    ac:7e:60:e2:42:89:51:cf:f1:36:73:c2:4a:79:b6:
                    fc:4c:bc:03:08:25:a2:44:25:e9:8d:8a:39:84:82:
                    c6:78:d9:eb:52:2f:de:4b:67:f9:c9:2e:2b:a9:fb:
                    80:a8:09:9d:95:90:2c:24:0a:35:a1:83:cf:2e:68:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:58:AF:AB:F9:23:5B:99:F6:33:31:5D:DC:12:82:62:11:5A:E2
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a363030303a3a2f33352d3335203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3df:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         24:38:3a:ff:25:34:7c:1f:ee:7f:55:ec:04:a8:8a:89:56:40:
         a9:13:e6:29:ca:44:c1:5c:65:09:53:b3:de:4a:fb:bc:c6:28:
         eb:20:7c:4d:11:cb:8f:e3:56:65:6d:2a:50:2a:80:85:a8:d7:
         02:a6:ae:8e:cd:d4:9a:78:67:d9:b6:b7:52:96:06:33:88:57:
         53:52:0d:4b:d1:13:8d:df:49:72:d5:b4:76:f0:92:c0:6e:a2:
         06:df:b5:30:5d:58:f6:42:3a:13:86:62:94:f7:52:c8:d8:62:
         30:e8:32:37:97:09:3f:00:3b:99:3a:7b:dd:9e:3f:86:a2:d3:
         58:79:26:57:35:05:a4:56:45:9e:f4:c9:b9:75:88:9a:6c:5c:
         59:9a:e3:b5:d6:64:fd:e1:34:34:32:54:5d:18:27:9f:7f:ac:
         a2:1f:73:b0:41:76:81:84:33:1c:d9:28:a5:14:f8:a4:80:48:
         5c:ea:c4:6e:db:f0:e9:05:d8:97:9b:e2:6e:af:9c:9a:b7:16:
         e5:fb:94:c8:86:6c:3a:d1:d1:81:e5:fb:69:91:3e:ee:7f:f0:
         0e:bd:0b:d3:8e:22:c4:6c:e4:4c:7f:4a:2c:71:6c:c3:39:e0:
         77:a4:2e:b2:09:25:85:0e:08:80:b5:b2:6f:40:c0:1d:f8:f2:
         6f:92:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:04:27 2025 by rpki-client