Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363430303a3a2f34302d3430203d3e20323635353737.roa
File:                     323830363a3332653a363430303a3a2f34302d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          QE4FfidftAXb4+BFA2K6wTjytFnA2XxeJ8QXPyZ6hCQ=
Subject key identifier:   A7:12:95:DD:AE:4E:24:C4:39:05:54:B1:67:48:CF:43:E7:E4:60:0B
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       38B23AD9E736AF5810B437238C17607210529CAB
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363430303a3a2f34302d3430203d3e20323635353737.roa
Signing time:             Sat 09 May 2026 03:41:48 +0000
ROA not before:           Sat 09 May 2026 03:36:48 +0000
ROA not after:            Sat 08 May 2027 03:41:48 +0000
asID:                     265577
IP address blocks:        2806:32e:6400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 08:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b2:3a:d9:e7:36:af:58:10:b4:37:23:8c:17:60:72:10:52:9c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: May  9 03:36:48 2026 GMT
            Not After : May  8 03:41:48 2027 GMT
        Subject: CN=A71295DDAE4E24C4390554B16748CF43E7E4600B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:8e:ad:b7:74:cc:a7:df:84:eb:54:0d:3f:
                    37:dc:7b:2d:71:0f:3a:b9:30:89:59:dc:e8:a3:46:
                    fb:e5:09:5d:b7:23:ee:80:49:2f:41:9f:6b:9a:9e:
                    97:e9:5e:f1:00:0a:88:22:c9:cf:12:c4:48:67:9e:
                    43:b4:01:93:c5:fb:9c:b2:e4:eb:8a:90:5f:38:58:
                    5a:8b:91:f6:6f:d7:f6:c1:fa:af:de:de:04:f7:e5:
                    2e:31:d7:f8:44:36:c8:83:22:30:d0:c2:6f:09:ed:
                    27:1c:a5:5d:17:96:e0:ae:f6:2b:92:9f:50:82:7f:
                    c7:f9:fa:c3:12:66:e1:ba:79:b3:04:80:0f:ad:db:
                    34:b6:61:54:64:81:49:5e:8d:94:6a:34:f9:44:6d:
                    0c:35:e5:94:af:5f:54:de:72:9c:29:9d:db:0f:b6:
                    e5:a5:77:4d:09:3a:b6:9e:37:f1:f1:84:c8:ea:59:
                    e9:5b:b7:52:a3:58:5e:06:37:bc:7b:06:cd:51:37:
                    5e:45:b5:cc:ba:73:23:90:d9:e9:b8:19:2d:8d:55:
                    a6:31:4b:b4:5d:f2:96:f4:a4:2b:b1:27:4b:1e:bb:
                    1f:fe:2e:58:93:d8:08:73:46:64:22:97:0d:54:b5:
                    1b:0f:74:06:5d:d2:2c:35:97:b8:3c:4d:ad:67:60:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:95:DD:AE:4E:24:C4:39:05:54:B1:67:48:CF:43:E7:E4:60:0B
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363430303a3a2f34302d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:0a:b2:cb:23:53:4b:7c:0b:26:18:37:b9:dd:c8:6f:17:
         29:ad:4c:83:7c:9f:a8:77:cc:a4:47:8d:26:0c:f9:d3:1f:04:
         fd:ee:6f:f0:4a:ea:b1:4c:a3:e4:42:96:8f:d0:b4:bf:56:3d:
         af:65:f2:4d:13:b0:2a:1b:9e:19:f0:f4:40:59:84:63:42:b3:
         71:4c:8d:3e:a0:10:71:8c:3f:34:10:a4:58:04:49:e8:c7:4c:
         c0:31:44:42:88:12:ab:fd:58:a5:db:20:35:ae:cd:37:09:6f:
         b6:4a:e5:73:8d:12:18:6d:1f:4d:ab:a3:7e:2e:3d:f4:69:c1:
         a6:da:38:8d:9f:9c:e5:75:a3:42:ed:5b:0c:9d:a8:b3:5a:34:
         4f:62:a9:43:21:dc:22:a1:ad:e8:65:5d:20:73:45:38:fb:e1:
         5b:e9:34:95:46:a6:0e:97:4a:97:2c:bc:c6:4e:bf:82:73:0b:
         e3:d5:d9:2a:09:96:42:28:19:da:bf:33:7d:f1:a2:cb:8a:a2:
         b6:59:20:06:d7:09:7c:47:4f:08:28:55:02:31:64:fe:1b:94:
         b5:bc:ad:f4:7d:df:47:a2:36:18:33:73:62:e1:ed:6f:d9:6e:
         2d:9b:24:34:ca:38:c8:58:b0:d4:2e:6b:94:a9:bc:ac:e0:c7:
         64:73:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:44:40 2026 by rpki-client