Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          tfC8f/Dm8ErUK0/8KShXm5EY3rby0MEMIPyWBpgXpZo=
Subject key identifier:   3D:84:D0:B5:4E:7E:BF:C1:89:CF:69:41:5A:EC:B4:A5:E8:48:7E:4B
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       72D80D272FF874E6F84891350290DD22887C7AF2
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 29 Apr 2024 17:30:01 +0000
ROA not before:           Mon 29 Apr 2024 17:25:01 +0000
ROA not after:            Mon 28 Apr 2025 17:30:01 +0000
asID:                     270165
IP address blocks:        2806:3eb::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d8:0d:27:2f:f8:74:e6:f8:48:91:35:02:90:dd:22:88:7c:7a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Apr 29 17:25:01 2024 GMT
            Not After : Apr 28 17:30:01 2025 GMT
        Subject: CN=3D84D0B54E7EBFC189CF69415AECB4A5E8487E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:77:ce:83:e4:2d:d1:48:b9:cb:c0:af:49:
                    f8:e6:68:82:0e:4c:14:33:12:27:cc:e6:f7:11:60:
                    0b:7c:9f:18:1c:56:49:2d:0d:d8:40:f6:d3:34:ac:
                    03:31:22:27:d7:a6:e3:b3:9e:ed:a9:04:ba:9a:e0:
                    f4:b9:a7:63:28:28:e6:07:cd:c3:89:a4:fd:28:71:
                    f5:90:7a:bd:8c:e2:0f:5b:d5:d8:63:df:bf:cd:79:
                    85:c1:05:d8:cc:3c:cf:79:d2:64:90:4c:8f:bd:32:
                    58:bd:63:4f:63:c9:11:9d:7e:a5:93:46:51:d9:65:
                    41:4d:24:15:47:d7:b9:ff:b2:6d:7d:a6:e0:67:5c:
                    74:79:f2:07:77:a7:ba:0e:cd:24:14:a2:2e:e7:e4:
                    cf:16:48:12:43:a8:49:6e:a3:6a:ff:46:ab:c5:76:
                    e9:22:dd:d6:2d:e0:eb:37:68:de:ed:5d:6c:ec:cc:
                    f1:c2:9f:31:ee:dc:6d:15:84:af:02:df:e4:f3:62:
                    ab:17:0f:59:5d:91:bf:95:85:6c:dc:74:4f:5b:13:
                    9b:68:77:58:ae:c7:36:e8:28:c0:11:38:82:50:ae:
                    7c:82:32:88:b7:e1:ac:1c:6b:8c:2a:86:17:c1:88:
                    dd:09:9f:cd:de:71:c4:75:60:b1:f1:51:ad:58:e7:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:84:D0:B5:4E:7E:BF:C1:89:CF:69:41:5A:EC:B4:A5:E8:48:7E:4B
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb::/39

    Signature Algorithm: sha256WithRSAEncryption
         b9:ec:5b:88:72:e0:f2:19:4f:db:17:e5:dd:90:f0:d6:b1:d1:
         6c:bc:97:93:c3:ab:5b:60:c5:10:4f:b8:12:a9:8a:c2:ef:07:
         b6:94:77:c9:18:f9:c3:5c:53:30:00:6a:34:a4:7c:a1:bc:2f:
         8d:88:e2:0e:98:88:21:6a:80:8b:2f:bc:d6:3d:60:52:6b:47:
         91:ce:40:30:e1:05:a7:42:04:6b:3b:b0:a3:f1:95:e0:8c:80:
         16:2a:17:b8:eb:26:2d:b6:16:fb:55:0c:c0:c0:b0:c7:ec:2a:
         b2:5a:f5:54:4a:83:7e:c4:dd:b8:9f:b3:91:55:42:78:0f:8b:
         bf:78:6b:d3:9e:1b:1e:d8:83:18:ef:b1:93:f9:a1:86:fd:a2:
         c1:b0:1f:72:b1:f8:ff:fd:1e:25:54:5a:20:ec:86:d7:48:18:
         8c:ab:d4:34:6f:40:54:19:5f:07:7a:a9:76:4f:a1:48:6d:cc:
         30:4c:91:a8:8b:fa:22:43:00:4f:87:62:19:58:af:8e:59:bb:
         06:2b:73:5e:61:d2:cb:43:04:3d:af:b4:ed:2a:08:f6:7b:5e:
         8f:55:7f:4e:cd:10:6a:5b:85:ef:f2:eb:e0:d6:46:2f:66:bc:
         b6:e4:90:57:af:d0:f5:de:e8:18:4f:d0:14:65:9f:59:5b:18:
         fd:01:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 19:35:48 2024 by rpki-client on console-fra.rpki-client.org