Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          UGApH5wnOxg8cQDo90JmWlJS2+JZr3kpCQZGtfQxIPU=
Subject key identifier:   82:81:81:67:98:F0:F5:48:75:A7:B2:19:BC:A2:C5:29:FD:80:21:39
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       7CC12496EA4D7DDE9A1FB50B4E9B4B7E967E13BB
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 31 Mar 2025 18:13:25 +0000
ROA not before:           Mon 31 Mar 2025 18:08:25 +0000
ROA not after:            Mon 30 Mar 2026 18:13:25 +0000
asID:                     270165
IP address blocks:        2806:3eb::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 May 2025 17:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c1:24:96:ea:4d:7d:de:9a:1f:b5:0b:4e:9b:4b:7e:96:7e:13:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar 31 18:08:25 2025 GMT
            Not After : Mar 30 18:13:25 2026 GMT
        Subject: CN=8281816798F0F54875A7B219BCA2C529FD802139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:a4:de:02:cd:03:2d:60:2a:fb:63:9c:4a:
                    60:80:ff:98:04:08:89:9d:b7:4a:a7:c8:05:83:46:
                    e1:49:90:3a:9d:3a:07:e0:84:a0:1c:c7:c7:ec:b5:
                    ca:b6:af:66:f3:f2:8f:0d:0c:86:16:51:e5:3c:47:
                    e1:f4:a3:aa:df:66:9e:cb:9e:84:83:86:98:44:81:
                    b1:61:14:9c:a2:05:27:bf:05:37:ca:a7:a5:1c:0c:
                    a9:09:1a:f0:79:47:1e:ce:60:88:7d:1b:b7:21:f6:
                    85:e3:9e:cc:9c:68:54:41:8a:d0:8d:81:5b:11:e8:
                    f7:37:fa:2d:8b:73:f6:fc:8d:86:d5:33:86:0c:5a:
                    0c:70:d0:10:54:43:56:5a:8f:cf:54:4a:b7:dc:f3:
                    9a:f2:96:b0:6f:8c:8e:69:35:7b:b2:55:ac:43:92:
                    af:25:a0:aa:0a:b2:a1:bd:c7:e1:b3:70:07:46:27:
                    9a:5a:d0:90:34:c9:2f:c6:97:cf:a8:7a:8f:2d:41:
                    f6:38:ab:b9:f8:78:e3:6e:62:70:60:ee:60:e3:45:
                    e0:35:74:de:74:82:18:15:f7:8a:88:f1:42:c6:c3:
                    cd:99:96:f5:db:50:e1:ed:bc:50:a2:c9:13:16:34:
                    4d:e1:7e:2d:7b:cc:39:ed:e5:0d:90:ab:e0:59:82:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:81:67:98:F0:F5:48:75:A7:B2:19:BC:A2:C5:29:FD:80:21:39
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb::/39

    Signature Algorithm: sha256WithRSAEncryption
         d9:a4:e8:f9:96:a4:fa:c5:b3:ca:42:34:f3:9e:42:1c:6c:f2:
         c3:8c:a7:12:e8:42:c8:61:87:99:7c:c0:3c:38:bb:15:6b:f8:
         08:2a:a1:cd:e1:de:f1:9c:7a:50:c4:e3:9a:d9:e9:c1:3f:de:
         20:cb:7b:dc:bc:11:3e:0c:b1:62:1c:b8:c9:78:bd:c6:21:dc:
         5d:12:53:41:cd:9e:b4:8d:1b:e9:fd:ec:80:c0:ae:7e:bb:61:
         13:91:ac:29:57:77:02:c1:5a:54:22:63:79:12:bf:91:e7:5f:
         fb:c8:02:ce:1a:dd:97:0b:c0:6e:71:d7:40:24:86:1b:ee:d2:
         a0:ce:60:99:d1:a6:6e:0c:76:c3:37:61:ba:73:ef:0c:70:93:
         20:c5:a0:60:e6:b6:9b:67:af:cf:97:0e:ca:bd:9a:ce:6b:85:
         a9:c3:e4:22:91:96:0c:50:2b:a2:0b:63:79:be:62:7f:14:5f:
         ec:1e:8f:b6:52:8d:ea:8c:62:53:92:c0:ab:6c:5d:d3:75:2c:
         65:81:f2:ac:c5:40:3b:18:ee:b3:06:70:43:6c:b2:3c:fe:40:
         7d:5a:a5:94:d9:61:97:09:c3:62:2d:5a:ab:37:e3:ab:57:6f:
         5b:82:58:9e:ce:23:a3:73:a7:79:bd:74:60:c8:c3:e8:93:4c:
         fc:cb:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:27:08 2025 by rpki-client