Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          HRD7gayofTOCcs5vNAJ6oybFFvCoRmflTNyuZ2tsmu8=
Subject key identifier:   E6:12:0B:D6:FC:B7:FB:22:1E:45:87:ED:5C:97:EF:92:ED:0B:3A:B2
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       4282D0E85489BBD3F067ADA88889938A2C40522A
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 31 Mar 2025 18:13:26 +0000
ROA not before:           Mon 31 Mar 2025 18:08:26 +0000
ROA not after:            Mon 30 Mar 2026 18:13:26 +0000
asID:                     270165
IP address blocks:        2806:3eb:600::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:d0:e8:54:89:bb:d3:f0:67:ad:a8:88:89:93:8a:2c:40:52:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar 31 18:08:26 2025 GMT
            Not After : Mar 30 18:13:26 2026 GMT
        Subject: CN=E6120BD6FCB7FB221E4587ED5C97EF92ED0B3AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:2b:90:bb:b6:74:67:19:dc:4e:96:60:05:
                    3c:13:8a:6a:be:9c:37:be:e0:2e:97:4f:c6:ef:ef:
                    c9:95:15:cd:0a:c8:3d:49:a4:f2:9a:cf:18:d2:bd:
                    ae:b9:04:60:65:56:ce:c7:60:36:42:95:1f:b6:6d:
                    ae:04:f1:00:55:f7:b7:65:38:8f:18:e6:b6:18:a5:
                    91:a1:ac:ec:2b:40:a2:57:67:80:3c:e6:53:a2:23:
                    19:68:cc:04:11:5d:f3:8f:0c:f3:f7:95:bb:d1:47:
                    78:9c:30:14:46:08:50:cc:d5:9d:19:b1:f5:a3:2f:
                    ae:6e:5c:46:50:05:3b:5d:92:42:40:0e:e3:d1:4c:
                    e3:c4:f8:45:6f:20:87:63:f8:10:2e:aa:c4:c0:9a:
                    be:6b:9a:25:7d:6f:e0:ea:da:dd:54:3e:e7:41:53:
                    55:7c:87:69:f4:df:7e:05:5d:24:2a:42:11:72:e3:
                    4d:06:d6:2d:5e:70:b5:6f:33:8f:97:5c:8f:60:23:
                    70:95:a4:70:96:42:a0:04:cf:11:04:dc:ae:31:fc:
                    3f:e6:c7:bc:fe:3b:d5:a7:1b:97:c7:a9:e5:1c:b6:
                    d9:fa:93:87:68:d4:2e:44:45:e1:e7:d1:2d:2d:75:
                    9f:d2:3e:58:a5:dd:42:5d:71:2a:ec:bc:6e:f2:95:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:12:0B:D6:FC:B7:FB:22:1E:45:87:ED:5C:97:EF:92:ED:0B:3A:B2
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:600::/39

    Signature Algorithm: sha256WithRSAEncryption
         25:75:1a:3d:69:6b:04:e0:7d:1f:91:e5:87:aa:f6:45:0f:c9:
         d7:27:12:3b:e1:a2:62:a5:b6:39:9f:6b:92:ee:88:37:8a:43:
         a2:0f:6e:ca:48:f4:1f:26:97:aa:b6:04:51:b3:f7:86:ed:df:
         3d:86:80:20:84:be:93:f6:c9:07:66:22:5e:cc:80:7f:44:a7:
         b9:ab:6f:4f:67:f8:3d:18:da:4d:ef:86:f3:1d:95:22:9b:11:
         d9:0c:31:85:18:6c:d2:65:cb:05:fd:64:8e:ec:61:67:96:5f:
         dc:a5:70:bb:31:58:43:8d:26:44:1f:56:e6:02:2d:bd:e2:66:
         a0:91:87:41:a5:68:72:67:0e:9e:36:7d:ce:4f:d0:e4:e0:54:
         64:19:ae:9f:b1:10:14:9c:c0:7f:53:2a:46:dd:8d:d3:df:59:
         fc:89:ff:ec:e1:97:fd:c5:4d:36:f9:12:44:9f:5e:c0:2a:cc:
         65:55:25:04:3f:21:7f:58:17:c2:61:01:9b:61:23:58:8e:ea:
         1d:4b:ca:d3:37:ea:37:25:ae:7a:4b:88:41:a6:d1:ff:f2:0a:
         4b:37:22:e8:ce:eb:ad:6f:58:c4:44:66:04:fe:fa:9c:ce:e1:
         5a:92:58:36:e7:59:13:55:4b:14:f7:b8:82:d3:dd:32:29:e7:
         e4:d2:99:b8
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUQoLQ6FSJu9PwZ62oiImTiixAUiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEzRUVCNUNENTlBQTBDQjlBQjkwODI1RkNDMUREODA5
MjQ1RTcyMjAeFw0yNTAzMzExODA4MjZaFw0yNjAzMzAxODEzMjZaMDMxMTAvBgNV
BAMTKEU2MTIwQkQ2RkNCN0ZCMjIxRTQ1ODdFRDVDOTdFRjkyRUQwQjNBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjyuQu7Z0ZxncTpZgBTwTimq+
nDe+4C6XT8bv78mVFc0KyD1JpPKazxjSva65BGBlVs7HYDZClR+2ba4E8QBV97dl
OI8Y5rYYpZGhrOwrQKJXZ4A85lOiIxlozAQRXfOPDPP3lbvRR3icMBRGCFDM1Z0Z
sfWjL65uXEZQBTtdkkJADuPRTOPE+EVvIIdj+BAuqsTAmr5rmiV9b+Dq2t1UPudB
U1V8h2n0334FXSQqQhFy400G1i1ecLVvM4+XXI9gI3CVpHCWQqAEzxEE3K4x/D/m
x7z+O9WnG5fHqeUcttn6k4do1C5EReHn0S0tdZ/SPlil3UJdcSrsvG7ylVk9AgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQU5hIL1vy3+yIeRYftXJfvku0LOrIwHwYDVR0j
BBgwFoAUij7rXNWaoMuauQgl/MHdgJJF5yIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDJDQkRBMjE2RkQ3RTRGNENCM0QzODczNjA5NDA5NzVD
NTg3OEQ3MjBBNTBFQ0FCNDQxODgxODc4OTJERkIxLzAvOEEzRUVCNUNENTlBQTBD
QjlBQjkwODI1RkNDMUREODA5MjQ1RTcyMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTNFRUI1Q0Q1OUFBMENCOUFC
OTA4MjVGQ0MxREQ4MDkyNDVFNzIyLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyQ0JEQTIxNkZEN0U0RjRDQjNEMzg3MzYwOTQwOTc1QzU4NzhENzIw
QTUwRUNBQjQ0MTg4MTg3ODkyREZCMS8wLzMyMzgzMDM2M2EzMzY1NjIzYTM2MzAz
MDNhM2EyZjMzMzkyZDMzMzkyMDNkM2UyMDMyMzczMDMxMzYzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ASgGA+sGMA0GCSqGSIb3DQEBCwUAA4IBAQAldRo9aWsE4H0fkeWHqvZFD8nXJxI7
4aJipbY5n2uS7og3ikOiD27KSPQfJpeqtgRRs/eG7d89hoAghL6T9skHZiJezIB/
RKe5q29PZ/g9GNpN74bzHZUimxHZDDGFGGzSZcsF/WSO7GFnll/cpXC7MVhDjSZE
H1bmAi294magkYdBpWhyZw6eNn3OT9Dk4FRkGa6fsRAUnMB/UypG3Y3T31n8if/s
4Zf9xU02+RJEn17AKsxlVSUEPyF/WBfCYQGbYSNYjuodS8rTN+o3Ja56S4hBptH/
8gpLNyLozuutb1jERGYE/vqczuFaklg251kTVUsU97iC090yKefk0pm4
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:18 2025 by rpki-client