Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a393030303a3a2f34302d3430203d3e20323635353737.roa
File:                     323830363a3332653a393030303a3a2f34302d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          lH/pLM6OfXMHLyNt/tWGuzz07kc9XLGynoZ2eUXJVYs=
Subject key identifier:   8E:D7:03:6D:2E:5F:87:53:9B:B7:3F:70:A0:D4:69:65:CC:AC:FC:FC
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       274C91F66A81A92523DCB525726AB166290CC804
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a393030303a3a2f34302d3430203d3e20323635353737.roa
Signing time:             Sat 09 May 2026 03:41:47 +0000
ROA not before:           Sat 09 May 2026 03:36:47 +0000
ROA not after:            Sat 08 May 2027 03:41:47 +0000
asID:                     265577
IP address blocks:        2806:32e:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 08:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:91:f6:6a:81:a9:25:23:dc:b5:25:72:6a:b1:66:29:0c:c8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: May  9 03:36:47 2026 GMT
            Not After : May  8 03:41:47 2027 GMT
        Subject: CN=8ED7036D2E5F87539BB73F70A0D46965CCACFCFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:70:4b:3b:4a:6b:f1:ec:2e:28:ae:dc:1b:
                    3a:43:b5:53:77:ff:44:98:7e:36:15:6f:42:05:5f:
                    1e:53:c2:be:95:d4:56:a4:fe:8f:2e:6d:83:b4:50:
                    f3:24:9f:92:fb:94:d0:d5:c9:8e:c1:1e:e9:a9:7e:
                    a8:6f:da:86:4c:0f:bb:49:29:36:79:63:64:d5:80:
                    72:8c:4e:55:3f:28:69:7b:2f:f7:1c:d7:b6:73:ee:
                    e5:b2:a0:72:98:69:33:a7:7a:8b:a4:e8:0a:02:da:
                    30:ba:89:85:86:c3:0f:a3:bd:0b:f0:f8:ce:31:2e:
                    74:2a:1e:11:ff:95:1c:d2:f5:2e:c1:89:37:e1:50:
                    3c:f7:23:00:7a:51:d5:37:a9:86:9d:0d:a0:8b:a0:
                    6a:02:48:cc:a1:d2:ed:f3:12:93:d6:23:07:da:09:
                    0f:b3:b3:38:9f:e4:66:34:c7:a5:05:05:5e:45:46:
                    5b:a0:43:24:f1:cb:94:6d:d3:22:76:9e:eb:c1:dc:
                    90:d3:9a:19:e0:af:07:1a:99:f4:80:87:f8:f8:42:
                    23:04:df:a2:37:98:b9:60:98:6f:2d:08:bb:66:a0:
                    b3:5f:34:e3:fc:f7:02:07:0a:68:8e:80:91:d3:24:
                    7d:c6:a3:71:88:23:24:71:ca:56:52:a9:ff:28:7f:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D7:03:6D:2E:5F:87:53:9B:B7:3F:70:A0:D4:69:65:CC:AC:FC:FC
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a393030303a3a2f34302d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:62:1d:32:e6:08:99:ea:b3:1f:8d:66:08:7b:96:94:9c:17:
         a2:4a:dd:c1:d3:c9:d9:58:17:2e:11:8a:ec:54:36:65:fa:fc:
         99:6c:53:0d:7a:59:93:b7:e2:0c:89:39:a7:14:64:8c:1f:69:
         fe:9e:be:6f:61:cc:d7:44:f7:2c:0c:f2:75:62:7d:00:e0:a6:
         29:82:47:40:dd:40:d6:0e:eb:15:0b:8a:60:37:5c:4e:1d:26:
         70:49:81:45:e2:19:f1:68:0f:20:be:56:11:b9:6f:6a:1d:b5:
         5d:56:90:b7:dc:f0:cf:ce:e4:0f:cd:58:53:37:6c:22:ed:da:
         a7:0f:f3:72:24:fa:2d:44:a9:ac:33:5f:d5:e3:19:22:e8:02:
         29:2f:17:0d:ad:69:8c:e8:6b:13:35:85:98:9a:91:9f:7b:82:
         8e:98:7f:c5:25:17:09:36:35:9a:ff:70:95:8e:ed:8f:38:da:
         0f:15:cd:71:6a:82:a7:96:f5:ef:45:49:d8:97:3d:f7:f4:18:
         64:4a:f0:84:6b:cb:d3:e7:0d:c2:1e:08:a3:11:5b:f8:16:59:
         0f:99:ac:c4:91:bb:59:43:48:52:46:4a:1a:85:dd:b2:8d:cf:
         23:46:ff:30:19:53:6c:02:e2:02:e2:c9:ef:af:8e:d1:1b:a8:
         2c:9c:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:19:40 2026 by rpki-client