Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          FNdDoVUb1qAGAoLjg6uLeZo417DC2OVzZCHqGLcxQ1c=
Subject key identifier:   C8:2C:86:DD:C8:C6:0A:BB:F3:9A:91:59:08:9C:B1:64:87:95:5F:38
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       71361F19678C2DAE5AAB493230CE35AC298E1844
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 31 Mar 2025 18:13:25 +0000
ROA not before:           Mon 31 Mar 2025 18:08:25 +0000
ROA not after:            Mon 30 Mar 2026 18:13:25 +0000
asID:                     270165
IP address blocks:        2806:3eb:7000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:36:1f:19:67:8c:2d:ae:5a:ab:49:32:30:ce:35:ac:29:8e:18:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar 31 18:08:25 2025 GMT
            Not After : Mar 30 18:13:25 2026 GMT
        Subject: CN=C82C86DDC8C60ABBF39A9159089CB16487955F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:c7:a8:78:12:b3:66:5d:43:ed:bd:86:6f:
                    32:86:a3:ae:8a:52:d9:6f:8d:09:03:29:d4:9e:93:
                    76:5b:2b:5f:12:40:82:ce:e9:7b:b7:1d:62:ac:1e:
                    8a:94:8b:86:f6:74:c4:66:42:58:3e:aa:f6:57:96:
                    4d:6f:91:fb:8c:b1:0b:e3:32:3c:a6:e0:e6:a2:d5:
                    01:4c:e9:21:cb:7a:38:9d:b9:ef:36:ab:e1:f0:5a:
                    f7:de:5d:42:4c:2b:91:50:e0:e4:87:d2:9b:97:68:
                    77:6e:95:f5:89:88:4a:61:d0:9a:d8:ed:ef:a6:e3:
                    c4:de:93:97:ee:af:0b:04:e5:c7:ba:27:de:96:15:
                    02:9f:c7:35:03:ef:06:32:32:26:aa:b4:8f:33:b9:
                    9e:f1:4e:0f:6c:92:b8:cf:96:60:b9:e1:d2:83:03:
                    dd:f0:32:d1:f1:64:77:99:e0:04:f2:a5:4d:95:cc:
                    f5:47:00:a2:67:6f:0d:0a:6e:bb:3b:b3:e4:90:c0:
                    47:fd:8d:63:7b:b3:71:68:7f:34:cb:6a:d7:fc:e4:
                    f3:22:ed:b2:ea:11:3e:81:93:09:ba:cf:52:52:1d:
                    e2:26:27:3e:60:22:98:71:b0:6f:3c:f6:93:f1:67:
                    9e:59:45:b0:55:e6:35:e5:dd:e8:eb:4a:36:9e:1c:
                    0f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2C:86:DD:C8:C6:0A:BB:F3:9A:91:59:08:9C:B1:64:87:95:5F:38
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a373030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:7000::/39

    Signature Algorithm: sha256WithRSAEncryption
         57:85:7f:b5:8e:32:ca:4a:cd:d5:9b:04:b0:d3:ca:26:7d:35:
         df:d9:ad:35:1c:cf:27:47:7c:3a:05:67:6f:16:2f:f1:9e:2e:
         9f:c5:e4:2a:04:4b:58:73:a6:b4:c2:c7:98:7f:c2:55:e3:d3:
         ab:5b:c2:42:e7:f2:3b:82:34:c4:cf:48:a0:7d:dd:ca:cb:ed:
         ef:3d:9d:76:ff:f3:85:65:39:ca:04:70:af:98:fc:e2:ba:cc:
         5d:75:8f:14:50:4e:a6:5f:bb:02:5d:82:f7:01:1e:20:1e:ab:
         dd:fc:b9:dc:38:5e:1a:5f:ef:ad:28:b1:c0:02:dc:60:4a:f8:
         09:7c:49:56:49:04:50:54:f2:a6:76:30:f3:8e:74:85:f4:1a:
         8d:1e:7b:31:f0:c6:d8:78:5f:10:84:f5:0b:93:8d:7c:1c:13:
         bf:7d:6c:af:39:df:1c:03:3d:46:3b:ae:51:fc:53:e9:4d:12:
         e2:ad:9c:b7:13:07:aa:0a:4d:f3:04:12:5f:70:a0:28:c8:47:
         76:a9:df:7e:6c:6a:81:fb:aa:f9:28:c9:8e:a5:2f:c2:8b:99:
         5e:18:bf:a6:67:6f:43:15:db:1b:44:6d:c6:d1:bb:95:62:31:
         c8:e6:8b:89:75:5c:b3:dd:e0:39:cb:b1:8c:19:f8:c9:2a:d1:
         e3:bb:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:17:07 2025 by rpki-client