Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          FBa/8PKISJqK+HLYIFMuRGPkJ8ps49IWgnDgL/bYQwI=
Subject key identifier:   A4:6F:3D:01:73:F3:1A:17:8F:A9:4E:98:9E:71:9B:CC:D8:8D:00:9B
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       3FAC0849DC504A92F9AC068A31CE6A90B9B21900
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 31 Mar 2025 18:13:26 +0000
ROA not before:           Mon 31 Mar 2025 18:08:26 +0000
ROA not after:            Mon 30 Mar 2026 18:13:26 +0000
asID:                     270165
IP address blocks:        2806:3eb:9000::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ac:08:49:dc:50:4a:92:f9:ac:06:8a:31:ce:6a:90:b9:b2:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar 31 18:08:26 2025 GMT
            Not After : Mar 30 18:13:26 2026 GMT
        Subject: CN=A46F3D0173F31A178FA94E989E719BCCD88D009B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:23:b7:9f:6c:d2:20:b7:cc:c1:2b:19:6c:
                    58:61:a1:8b:21:9f:70:8c:3c:c2:4a:27:9f:a9:be:
                    c6:1b:41:14:f1:95:ce:e7:8f:2a:e2:b7:31:8f:19:
                    ea:08:7f:2c:66:b2:3d:59:b4:00:40:45:3d:8f:1e:
                    42:72:a6:4d:d9:01:49:d5:ba:c4:0c:f7:78:fe:c7:
                    4d:1f:22:0e:3f:dd:e7:c2:a0:f4:54:7e:af:49:1c:
                    44:e6:66:84:07:29:15:78:b2:18:06:27:73:2e:00:
                    f4:2a:9f:f8:b2:08:be:69:b6:97:44:82:e6:8d:b2:
                    b3:2f:3f:cf:0f:90:1a:19:99:29:0e:ee:a5:07:39:
                    5c:a1:d4:50:e3:cb:85:83:6b:cb:e9:f7:e0:41:34:
                    fa:4e:f2:82:75:75:a1:e8:81:c1:08:d9:8d:63:17:
                    f5:5f:d2:d3:5e:98:17:9f:8f:41:4b:77:d0:50:ae:
                    45:f2:ab:11:a0:bb:13:47:ab:d0:f1:6c:5f:0e:4b:
                    b2:70:15:6b:ef:35:b1:6e:94:0f:e6:56:24:2d:0b:
                    82:74:b8:de:12:1c:aa:cc:2c:f6:17:a4:19:cd:ad:
                    df:45:be:28:bc:ec:ab:d9:4b:d1:97:e1:00:dd:0a:
                    9f:ce:f9:c4:ef:4c:77:38:3f:cc:ad:64:36:df:bf:
                    dc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6F:3D:01:73:F3:1A:17:8F:A9:4E:98:9E:71:9B:CC:D8:8D:00:9B
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:9e:ee:e1:12:12:2e:a7:08:7e:fa:ef:2c:6c:c6:1a:e8:
         cb:6a:08:0f:20:13:d1:c1:c0:54:80:f7:72:0e:41:a2:22:87:
         68:7f:31:1a:6b:36:25:9a:8e:9c:b8:25:bd:1d:87:01:76:70:
         18:fb:84:c2:4c:6d:94:20:29:03:c0:59:65:31:4e:fc:87:93:
         d9:4a:55:15:68:c6:2c:d6:84:61:27:95:e1:d6:2a:b6:3a:ca:
         33:04:fe:9e:2c:d8:06:23:61:61:c3:e1:9f:57:db:72:2b:27:
         e5:38:28:66:ee:90:47:f0:03:e4:02:8f:80:56:b1:ca:48:bb:
         56:c1:15:ac:4c:11:36:88:19:c6:1c:32:e5:62:c1:70:2e:ec:
         d5:c8:d7:76:42:b4:86:87:d3:62:fd:7b:cb:95:a2:4e:40:e7:
         44:fb:db:aa:65:4e:2d:b7:b7:fd:68:4c:f6:f6:4d:d5:97:6e:
         6e:d2:69:87:01:7a:ac:60:7e:8f:17:23:2b:1a:9d:ff:64:27:
         f9:7e:bf:2b:87:54:9e:8c:b8:d8:32:2c:71:d2:12:fc:e4:fb:
         bf:70:de:20:f6:d1:6c:1c:f0:65:59:fc:c9:a0:0c:76:0c:72:
         45:aa:81:db:fa:35:54:eb:66:0c:93:99:5f:bd:e7:f4:7e:06:
         16:8c:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:29 2025 by rpki-client on console.sobornost.net