Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          O8k0mCxi/GytTX6csjBaKnI8GHCIiawnF7wTY8tret0=
Subject key identifier:   12:C0:F6:99:2F:30:26:21:C6:74:C6:C4:AE:4C:57:A2:A0:89:04:7D
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       4818123D3EAB89DDED63E9B0AC17CE950E73004E
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 31 Mar 2025 18:13:25 +0000
ROA not before:           Mon 31 Mar 2025 18:08:25 +0000
ROA not after:            Mon 30 Mar 2026 18:13:25 +0000
asID:                     270165
IP address blocks:        2806:3eb:f000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:12:3d:3e:ab:89:dd:ed:63:e9:b0:ac:17:ce:95:0e:73:00:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar 31 18:08:25 2025 GMT
            Not After : Mar 30 18:13:25 2026 GMT
        Subject: CN=12C0F6992F302621C674C6C4AE4C57A2A089047D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:a5:82:f8:0e:29:43:1a:04:a2:59:6f:f8:
                    a6:fe:09:1f:96:80:dc:4b:f6:52:2d:84:98:93:82:
                    42:27:58:94:4d:21:01:40:fb:f6:b0:2b:a2:be:71:
                    e3:c3:88:9f:ab:cc:03:ed:86:99:96:89:95:2e:6e:
                    31:a7:0f:df:33:3e:97:47:1f:21:a4:11:b1:74:4e:
                    72:f2:12:76:8e:b2:15:88:01:6a:de:b0:cf:b2:27:
                    b6:2c:98:2f:ee:7d:67:13:86:37:19:4c:d7:85:f6:
                    ff:06:27:e9:b3:dc:ec:8e:4f:63:6d:92:11:71:f9:
                    90:8f:16:a1:fa:02:2b:fb:a0:a6:57:03:dd:1b:a9:
                    df:74:0e:38:aa:94:7e:40:8e:53:5d:f8:a4:fe:b0:
                    c9:56:bd:1a:ab:cc:86:d5:e2:b6:cf:ee:7b:4a:70:
                    12:98:32:5a:05:6d:26:46:f4:bd:3a:38:31:cc:3c:
                    83:d5:ff:bc:a4:cd:a1:74:10:09:e3:a7:cf:6c:7c:
                    18:a8:3a:54:0a:21:4f:2f:98:32:d1:f2:a3:c3:f1:
                    48:6d:8c:21:70:77:6e:c0:e9:89:b9:98:de:e0:22:
                    85:bf:87:30:19:1f:70:4c:b0:b9:ea:4b:8d:db:aa:
                    f0:08:f5:c9:60:14:3c:2d:44:bc:39:de:ff:b3:77:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C0:F6:99:2F:30:26:21:C6:74:C6:C4:AE:4C:57:A2:A0:89:04:7D
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:f000::/39

    Signature Algorithm: sha256WithRSAEncryption
         02:21:fb:96:24:e2:ed:c6:a3:8f:4d:f2:72:e2:ef:22:ab:01:
         2b:6b:1c:27:04:1a:ed:df:72:78:f1:5b:d6:cd:79:e7:90:41:
         c0:7c:fa:7e:7a:29:7a:bc:bd:20:a9:dc:d3:ff:84:a4:2b:90:
         e3:11:a7:74:ff:67:14:dc:34:42:ce:f0:c6:45:eb:e6:35:8e:
         36:92:4a:f4:3f:11:e7:95:b4:35:4c:44:12:37:71:2f:a2:90:
         2b:ca:b8:71:33:35:f0:4c:a0:63:ff:47:30:77:32:23:fb:a1:
         cf:d1:e4:9b:9e:ad:3e:2a:5b:f9:3b:32:e2:fd:30:8a:23:e5:
         48:e3:3c:6c:e9:83:26:27:57:d8:cc:7b:8b:79:95:e4:60:12:
         7c:61:0a:35:c8:52:a9:81:34:ee:b9:cf:5f:35:e3:53:5a:a9:
         af:b7:b8:92:b8:0e:6a:56:5c:0f:8e:12:8e:c2:b3:47:7c:c1:
         b7:dd:ad:07:ad:7a:0a:22:1a:bd:83:d0:97:a0:9d:37:6d:e9:
         28:91:18:a1:9e:06:59:94:fc:c9:b7:c3:aa:d7:74:80:63:6d:
         54:5c:90:4e:78:28:9c:8a:7a:e8:59:4f:64:99:4e:57:28:b6:
         85:fb:ed:53:a6:62:89:b5:47:19:15:53:c3:a7:7a:39:bd:7e:
         c0:d2:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:15 2025 by rpki-client