Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa
File:                     323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          P7BJXpNM/lup0U17Ssh8PaqRUfAJzDrN2vesOa6zplE=
Subject key identifier:   DC:F5:63:A0:93:45:6A:32:39:98:8B:C2:3D:C9:06:55:BC:79:BD:AD
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       60E0CF7B5B89FC8FC9214AAC70EC2367ED177ADA
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa
Signing time:             Sat 07 Jun 2025 03:21:14 +0000
ROA not before:           Sat 07 Jun 2025 03:16:14 +0000
ROA not after:            Sat 06 Jun 2026 03:21:14 +0000
asID:                     265577
IP address blocks:        2806:32e:6600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 16:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:cf:7b:5b:89:fc:8f:c9:21:4a:ac:70:ec:23:67:ed:17:7a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: Jun  7 03:16:14 2025 GMT
            Not After : Jun  6 03:21:14 2026 GMT
        Subject: CN=DCF563A093456A3239988BC23DC90655BC79BDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:16:48:a1:8d:f5:64:55:d2:09:95:d3:7c:
                    6f:b2:97:53:63:bf:7d:d5:c1:e1:63:fc:ad:ff:87:
                    e0:24:7e:64:2c:ae:99:3f:ec:4c:53:be:c1:76:2f:
                    e0:7c:74:e4:6d:ae:b6:bf:db:7a:75:9e:f7:b0:ff:
                    4f:64:41:22:f3:cf:4d:f9:98:56:8c:e2:40:da:c5:
                    f1:37:92:26:08:7a:34:ad:ea:3e:50:15:c2:cf:b3:
                    12:31:66:64:00:59:6b:1b:5d:a9:d7:24:75:7a:67:
                    ad:7a:d8:b1:04:5d:77:dc:dd:b9:c7:47:9a:e6:0c:
                    60:28:d3:ff:88:30:6b:c6:23:3b:29:8a:b6:88:7d:
                    33:b4:23:9f:62:fb:02:b2:7c:18:47:c6:9a:ae:de:
                    4c:87:19:1b:83:63:fd:9f:28:96:01:75:5d:33:8f:
                    ee:ee:fc:db:57:bc:18:d0:19:ca:84:ee:d0:5c:72:
                    31:ae:52:df:bf:23:36:2e:c2:c3:5e:84:05:e3:23:
                    82:26:53:47:02:f1:6d:c0:03:83:2a:18:c1:03:66:
                    3a:8c:8c:98:9c:51:c1:11:80:2c:f5:fc:57:02:c7:
                    2d:60:7a:62:b6:81:d9:77:08:ac:24:1e:d3:c3:f3:
                    20:42:43:ac:bf:b1:1e:b0:70:b9:b9:53:e5:7a:9c:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:63:A0:93:45:6A:32:39:98:8B:C2:3D:C9:06:55:BC:79:BD:AD
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:95:96:88:c6:69:5b:c3:95:68:c5:cb:66:0b:9e:b6:48:37:
         1c:8d:7c:f3:7e:70:46:4b:df:05:c9:c0:78:cb:ed:eb:47:78:
         71:bd:2a:13:8d:f2:9d:9f:23:9e:50:bf:1b:b8:1a:e8:f5:9b:
         e5:cd:c4:d5:ba:1d:31:db:28:c0:cd:fc:26:2e:af:1d:55:4b:
         99:ca:a8:04:e2:0e:b6:5d:5c:bf:85:a5:18:26:fa:dc:b9:e0:
         bc:86:2c:e8:e4:57:38:fd:33:da:02:6f:a9:e9:db:3b:3e:55:
         17:f6:0d:85:69:4a:07:7e:85:2d:d4:54:69:c1:f3:0e:1c:a6:
         b5:5a:5a:f1:1f:98:2e:32:a4:5f:22:51:75:ef:ab:8a:e3:dc:
         78:56:1d:74:ac:12:66:f8:e6:22:ae:dc:e7:f2:fc:18:ac:e6:
         4b:95:55:88:c0:04:74:47:47:00:5e:c5:01:34:98:ae:5f:9c:
         97:86:d5:3a:26:46:2e:9c:4d:4d:d6:3f:4f:45:9a:0e:25:9a:
         e5:2a:20:6e:fe:de:96:0f:b3:02:cb:b9:1b:3d:37:da:ba:6f:
         01:4d:e3:53:b2:fc:82:99:39:ac:d9:4e:f3:43:96:72:06:d3:
         50:89:49:99:b6:c3:8b:f7:5f:6e:57:93:8b:a6:c4:52:f5:f7:
         cc:e1:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:01:43 2025 by rpki-client