Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa
File:                     323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          2W33Bs1wUl0bIPsSXc6PyVEFiLzr6F19WDnkuKmbO3c=
Subject key identifier:   FE:31:14:E3:69:59:69:49:BA:E8:54:83:6D:D7:4F:3F:42:7F:A8:D1
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       3775D4E1932EB1FC4447E7F036BFC31A716514DB
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa
Signing time:             Sat 07 Jun 2025 03:21:15 +0000
ROA not before:           Sat 07 Jun 2025 03:16:15 +0000
ROA not after:            Sat 06 Jun 2026 03:21:15 +0000
asID:                     265577
IP address blocks:        2806:32e:6800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 16:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:75:d4:e1:93:2e:b1:fc:44:47:e7:f0:36:bf:c3:1a:71:65:14:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: Jun  7 03:16:15 2025 GMT
            Not After : Jun  6 03:21:15 2026 GMT
        Subject: CN=FE3114E369596949BAE854836DD74F3F427FA8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:48:fc:bd:0d:59:18:1f:80:37:06:83:d7:
                    1c:fe:ee:61:ca:eb:5f:94:c1:e3:4b:d4:20:04:9d:
                    9c:88:7d:38:2f:69:ca:f6:a0:54:47:bf:49:6d:b4:
                    25:df:70:84:65:da:6c:0e:86:51:e2:b3:64:c1:f4:
                    e6:7e:96:4a:65:48:31:d8:ae:41:4c:74:36:c8:76:
                    4c:4a:3d:cb:91:80:60:49:18:78:8d:ab:4e:5c:2f:
                    7a:50:46:7c:f8:43:73:a9:a8:b0:93:0d:53:02:36:
                    60:f0:a1:a6:1f:0c:c3:fe:d8:a3:f2:1b:e5:ab:87:
                    4e:54:41:7e:2e:25:3d:9d:b6:48:03:e7:b6:a6:60:
                    a7:01:7e:8a:ca:0b:83:5f:8c:39:49:1d:4b:6d:6a:
                    bd:ad:db:48:9a:49:54:1f:be:3d:4f:ca:68:73:cf:
                    c0:73:f1:f0:5a:69:ce:cd:ae:83:8c:fb:68:91:12:
                    2f:ba:d0:51:d5:8f:f3:f2:a3:6c:0a:68:94:ea:c3:
                    9b:71:94:8f:3c:0b:13:63:58:8b:07:9a:31:38:d9:
                    e0:ed:e8:fb:39:1e:f2:34:5d:3b:44:19:49:a6:1d:
                    2c:9c:fe:7c:cd:e4:99:a4:23:3f:56:1b:85:23:a2:
                    6b:e3:dd:85:bf:75:51:11:8e:15:ec:68:4e:f4:40:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:31:14:E3:69:59:69:49:BA:E8:54:83:6D:D7:4F:3F:42:7F:A8:D1
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:49:18:80:82:54:86:a1:91:00:c1:cc:31:5a:c7:74:e2:
         ab:75:a5:0c:dc:0d:bd:20:e2:39:6a:e5:7b:6f:31:a3:d2:a2:
         0f:7c:71:e0:3e:67:39:21:16:d0:38:a8:1e:6d:05:10:a1:88:
         5f:39:19:bb:a9:5f:d3:41:e9:20:6e:cd:6b:4a:39:a2:17:17:
         c9:ff:97:1a:94:f9:ab:e0:70:c6:e6:86:d2:06:db:7c:3c:64:
         77:53:3a:a7:ec:ba:05:7c:69:2f:a5:b0:4d:6a:f2:6c:89:06:
         ae:8d:c5:d6:2e:f4:e2:65:f4:2c:e4:da:5c:2b:65:76:4d:ab:
         19:1a:d9:a3:8c:0f:77:4b:f6:a7:80:25:bd:c6:8d:2c:9e:1e:
         d5:df:67:18:27:38:b3:40:ea:53:a6:cc:48:18:d6:67:3b:b3:
         15:d8:a4:b9:ca:5a:c0:88:36:93:23:83:00:46:6b:20:4e:d3:
         ae:f9:31:16:59:ff:c9:fd:7d:65:4a:1f:d6:fb:07:d6:5e:65:
         a7:d2:86:8f:cb:19:ad:14:cf:4d:9c:ee:03:44:a4:6e:95:ef:
         a8:23:dc:06:33:c0:5a:d7:93:dc:9a:5a:08:96:3e:ef:e4:ca:
         91:de:bb:da:97:a0:be:a4:01:68:cf:fd:c0:f4:4f:e6:65:d5:
         fd:c9:48:a3
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUN3XU4ZMusfxER+fwNr/DGnFlFNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1Q0E3NDlCOTdCNzUwNEY5NzNEOThENTkzNEIzNjVC
RTgxOTM1NTAeFw0yNTA2MDcwMzE2MTVaFw0yNjA2MDYwMzIxMTVaMDMxMTAvBgNV
BAMTKEZFMzExNEUzNjk1OTY5NDlCQUU4NTQ4MzZERDc0RjNGNDI3RkE4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2Ej8vQ1ZGB+ANwaD1xz+7mHK
61+UweNL1CAEnZyIfTgvacr2oFRHv0lttCXfcIRl2mwOhlHis2TB9OZ+lkplSDHY
rkFMdDbIdkxKPcuRgGBJGHiNq05cL3pQRnz4Q3OpqLCTDVMCNmDwoaYfDMP+2KPy
G+Wrh05UQX4uJT2dtkgD57amYKcBforKC4NfjDlJHUttar2t20iaSVQfvj1Pymhz
z8Bz8fBaac7NroOM+2iREi+60FHVj/Pyo2wKaJTqw5txlI88CxNjWIsHmjE42eDt
6Ps5HvI0XTtEGUmmHSyc/nzN5JmkIz9WG4Ujomvj3YW/dVERjhXsaE70QOKXAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU/jEU42lZaUm66FSDbddPP0J/qNEwHwYDVR0j
BBgwFoAUH1ynSbl7dQT5c9mNWTSzZb6Bk1UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDZCMDA3QUI2NDFDMkRFQjkzMDAyQ0M4RTI3RjcwNDc5
MDE2N0MxOTVDQzE2RkEwNkU2RUQ3QkI4RDU0MjEyLzAvMUY1Q0E3NDlCOTdCNzUw
NEY5NzNEOThENTkzNEIzNjVCRTgxOTM1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjVDQTc0OUI5N0I3NTA0Rjk3
M0Q5OEQ1OTM0QjM2NUJFODE5MzU1LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ2QjAwN0FCNjQxQzJERUI5MzAwMkNDOEUyN0Y3MDQ3OTAxNjdDMTk1
Q0MxNkZBMDZFNkVEN0JCOEQ1NDIxMi8wLzMyMzgzMDM2M2EzMzMyNjUzYTM2Mzgz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM1MzUzNzM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAYDLmgwDQYJKoZIhvcNAQELBQADggEBAJnWSRiAglSGoZEAwcwxWsd04qt1
pQzcDb0g4jlq5XtvMaPSog98ceA+ZzkhFtA4qB5tBRChiF85GbupX9NB6SBuzWtK
OaIXF8n/lxqU+avgcMbmhtIG23w8ZHdTOqfsugV8aS+lsE1q8myJBq6NxdYu9OJl
9Czk2lwrZXZNqxka2aOMD3dL9qeAJb3GjSyeHtXfZxgnOLNA6lOmzEgY1mc7sxXY
pLnKWsCINpMjgwBGayBO0675MRZZ/8n9fWVKH9b7B9ZeZafSho/LGa0Uz02c7gNE
pG6V76gj3AYzwFrXk9yaWgiWPu/kypHeu9qXoL6kAWjP/cD0T+Zl1f3JSKM=
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:07:20 2025 by rpki-client