Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          CRf9bpRIeb6rPkhhzIggWRKEnqNdKSCd3mYpU6Rq2b0=
Subject key identifier:   D0:83:E9:92:2B:2D:86:08:75:EF:0D:34:FB:8A:AC:EA:57:53:5C:B7
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       4AE7071E59A9F9DD7FDAF4EA5E887174230BE3B5
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 31 Mar 2025 18:13:26 +0000
ROA not before:           Mon 31 Mar 2025 18:08:26 +0000
ROA not after:            Mon 30 Mar 2026 18:13:26 +0000
asID:                     270165
IP address blocks:        2806:3eb:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 May 2025 17:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e7:07:1e:59:a9:f9:dd:7f:da:f4:ea:5e:88:71:74:23:0b:e3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar 31 18:08:26 2025 GMT
            Not After : Mar 30 18:13:26 2026 GMT
        Subject: CN=D083E9922B2D860875EF0D34FB8AACEA57535CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:67:64:91:dd:0a:58:2a:aa:02:d3:8f:86:
                    41:e1:28:52:a9:21:42:79:6f:75:c2:b9:b5:89:2d:
                    4a:d5:0f:c9:78:8c:31:04:cb:6a:61:a5:5d:ae:e9:
                    e4:83:6e:a9:59:31:39:ba:41:af:4b:83:ad:74:5d:
                    e2:0e:9c:02:19:93:79:00:01:29:f2:27:92:df:20:
                    59:9f:c9:ca:8e:a5:1b:20:e7:ab:bb:3f:d0:c8:46:
                    39:22:3a:c6:39:87:8c:71:ce:b0:26:43:df:22:58:
                    5c:25:d8:ee:73:6d:5c:f8:ad:8d:2b:e6:a4:0d:97:
                    8f:e1:ba:0b:bc:76:c6:f8:e8:8f:09:e8:91:a2:80:
                    9d:68:e2:2e:f6:59:b0:ad:7a:98:b7:78:c4:32:b7:
                    59:de:86:86:9d:3c:85:64:bc:09:ee:ec:0a:ce:17:
                    57:49:72:68:71:ce:7a:30:16:33:a1:30:80:c9:34:
                    a3:37:a8:84:37:dd:69:40:dd:c6:b2:cf:dd:51:d5:
                    b2:bf:6f:0a:f1:64:19:43:0a:5b:de:e8:4c:4f:b0:
                    ef:ba:0b:80:6c:86:46:5f:15:9c:01:ac:73:e2:4b:
                    ee:f5:5d:61:8a:db:96:41:95:2f:eb:e3:65:76:e3:
                    75:78:26:68:c3:4b:69:9f:57:81:73:41:80:7e:f1:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:83:E9:92:2B:2D:86:08:75:EF:0D:34:FB:8A:AC:EA:57:53:5C:B7
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         9d:a7:2f:e6:d8:cb:4a:82:71:53:0c:02:d3:d4:a1:74:65:bb:
         73:8a:79:ca:bb:f5:b1:74:85:da:60:36:4e:f6:7a:d5:58:5e:
         c6:8f:2a:9b:8f:9f:20:9d:c2:3f:80:9f:4c:eb:a2:27:58:28:
         01:aa:14:50:76:24:4f:5e:1a:44:cb:4c:5f:4f:c2:15:55:e1:
         aa:43:11:7d:9f:24:47:a6:33:33:84:5d:4a:1b:4d:2a:cf:2c:
         5c:8e:14:43:40:49:ae:e1:37:6f:79:14:ef:c5:5e:1a:f3:e2:
         67:2a:ee:d5:b4:6b:ed:03:1d:de:a9:df:15:c9:d7:2c:54:16:
         a4:c4:e6:c7:c8:c5:57:64:27:48:6a:19:0c:4c:a9:11:e4:3f:
         84:34:80:b9:4d:ae:09:08:d4:7b:3b:85:42:ac:48:c0:8a:99:
         98:e6:97:fb:df:e0:af:3b:55:74:37:c7:24:a3:b1:01:96:6a:
         04:77:f9:84:4d:b6:68:19:ac:90:b2:21:cc:55:8d:23:af:da:
         12:1c:ca:65:3c:65:27:18:a8:29:27:6c:a0:20:a9:27:f3:8a:
         bb:0f:b1:4d:08:76:82:68:2c:80:0b:9b:88:c1:7e:93:47:02:
         c6:2d:99:91:7b:a5:50:3b:de:2a:19:45:6f:86:85:5d:48:d6:
         a9:74:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:20:43 2025 by rpki-client