Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa
File:                     323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          exzvCljreS8v+tS4gOaqk24VOAK6783x7F+rTBCkwUQ=
Subject key identifier:   33:12:A4:3B:9E:3F:C5:60:E9:46:2C:39:03:2C:0F:64:35:FB:3B:13
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       43165DD59BB2A91A2E71A7575245259784FE3B1D
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa
Signing time:             Sat 09 May 2026 03:41:47 +0000
ROA not before:           Sat 09 May 2026 03:36:47 +0000
ROA not after:            Sat 08 May 2027 03:41:47 +0000
asID:                     265577
IP address blocks:        2806:32e:6800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 08:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:16:5d:d5:9b:b2:a9:1a:2e:71:a7:57:52:45:25:97:84:fe:3b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: May  9 03:36:47 2026 GMT
            Not After : May  8 03:41:47 2027 GMT
        Subject: CN=3312A43B9E3FC560E9462C39032C0F6435FB3B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:00:1a:83:68:a5:3a:e0:52:9b:a4:80:b8:
                    06:6c:0c:1d:7a:1d:3f:65:b3:43:d4:6c:83:06:a9:
                    a3:94:12:50:34:66:8b:8c:0d:36:da:8f:fb:5b:e0:
                    4a:a9:38:a8:1c:63:44:24:a5:b7:36:b9:ea:8a:48:
                    10:a3:14:f8:38:62:ca:ec:7b:2a:2b:c2:3c:a7:da:
                    d9:cb:5d:b0:59:a4:a2:48:cc:ea:63:1e:46:c0:e6:
                    90:2c:06:2c:28:ba:49:ff:ec:90:87:e6:b5:cd:b5:
                    47:b2:59:14:ed:af:11:f8:77:57:3b:bd:68:60:0e:
                    14:cb:d1:bd:6a:24:fe:83:df:39:89:88:8b:79:3f:
                    73:f4:ff:15:2e:d2:91:6c:da:10:cd:53:a3:63:63:
                    19:fe:77:d0:28:17:02:39:44:3a:56:89:83:5e:df:
                    d0:91:53:82:40:e3:37:77:09:fc:62:86:7b:73:e4:
                    2d:1e:6f:44:1e:ed:aa:e5:a4:66:ae:d0:c0:99:80:
                    b7:1b:0b:a0:1e:b3:49:96:74:20:dd:38:5f:b7:07:
                    82:75:9d:fa:7f:1a:61:5d:99:20:5c:c5:56:03:27:
                    4d:f4:1d:f3:d8:19:74:4a:c1:fa:d9:82:eb:d3:cc:
                    f9:3a:32:05:1c:f1:31:37:42:df:29:4e:16:90:a2:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:12:A4:3B:9E:3F:C5:60:E9:46:2C:39:03:2C:0F:64:35:FB:3B:13
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363830303a3a2f34302d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:30:fc:9e:1b:8f:f3:8d:ff:b7:23:28:98:f9:9e:05:b6:33:
         54:2c:56:11:a5:68:8d:11:f5:a1:07:8f:77:23:34:72:d8:3b:
         40:57:6f:63:4a:01:aa:a3:f6:f4:39:3b:a5:65:c5:30:6b:8c:
         a4:87:62:d7:86:5a:b2:fc:67:1b:f4:b8:e2:b8:cf:b8:ab:13:
         83:24:79:93:0e:d7:be:6f:20:10:21:99:1e:09:5f:01:c9:20:
         12:13:1f:51:50:10:29:4e:f8:61:00:0d:7f:b5:d5:d3:0f:56:
         99:8f:d4:92:2f:a7:ea:75:ed:c2:04:40:90:f0:15:72:18:ac:
         55:8f:78:45:c6:b8:cd:56:46:dd:a0:05:49:de:78:65:1c:7a:
         e9:a3:de:26:83:4c:89:3e:75:99:cb:e3:78:40:a7:93:02:e5:
         e0:be:eb:bc:8d:55:b5:33:f1:52:94:83:9b:e2:03:ec:18:7c:
         cc:93:fd:da:5c:09:78:72:c5:16:14:e8:00:20:3b:1c:a6:8f:
         1a:86:e8:cb:9b:02:01:b5:95:a4:8f:de:ec:c4:75:f0:f2:bc:
         57:9d:6f:12:2f:66:05:e3:0b:7d:1b:d2:7b:72:31:00:a7:2d:
         2f:21:eb:6a:43:59:32:0a:3b:b3:6a:c3:f6:7b:c9:4f:97:85:
         e2:ab:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:44:40 2026 by rpki-client