Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363030303a3a2f34302d3430203d3e20323635353737.roa
File:                     323830363a3332653a363030303a3a2f34302d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          /b4heljXDtRXFo6wPLU52er8KXb1OSWYdyHT0iFiqxs=
Subject key identifier:   8E:6F:40:E4:7D:D6:50:8D:E1:D2:07:EB:C7:21:3D:E4:87:8A:9E:CF
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       14B05EB10B012313586DF8F0F1F3454CDFD17B5B
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363030303a3a2f34302d3430203d3e20323635353737.roa
Signing time:             Sat 06 Jul 2024 02:30:00 +0000
ROA not before:           Sat 06 Jul 2024 02:25:00 +0000
ROA not after:            Sat 05 Jul 2025 02:30:00 +0000
asID:                     265577
IP address blocks:        2806:32e:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b0:5e:b1:0b:01:23:13:58:6d:f8:f0:f1:f3:45:4c:df:d1:7b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: Jul  6 02:25:00 2024 GMT
            Not After : Jul  5 02:30:00 2025 GMT
        Subject: CN=8E6F40E47DD6508DE1D207EBC7213DE4878A9ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:f7:d1:e1:df:a0:e7:a5:b4:7d:c6:3e:68:
                    88:54:d4:94:72:50:c9:bf:be:30:a6:ff:2d:7d:39:
                    a5:7f:75:78:b9:40:ed:f2:c2:53:40:5a:43:37:e0:
                    2e:d7:2f:dc:7a:c8:37:8e:ea:05:63:3c:89:96:73:
                    f7:ec:84:f7:ba:8e:c9:3e:89:ec:c0:20:6b:8b:1b:
                    0a:ef:7b:33:8f:be:47:91:61:70:20:87:84:db:e7:
                    44:9d:20:5f:54:e6:42:b0:eb:97:4b:2d:4b:27:81:
                    d1:64:b8:45:ab:7d:6b:5e:a4:ab:c4:a6:a6:d2:eb:
                    0e:4f:68:df:ac:62:44:f3:3b:7e:3c:7d:69:52:71:
                    33:de:87:04:c8:16:ab:73:18:f2:cc:18:d1:6f:4d:
                    37:df:ee:df:55:81:13:05:b5:6e:27:e4:a5:39:ad:
                    69:06:43:08:73:38:b1:cc:2e:4d:0f:2e:3f:b9:21:
                    35:f6:80:11:0d:a6:38:60:1a:a0:20:90:d6:7b:3f:
                    db:d6:ea:91:12:bd:16:e0:7d:0a:86:42:e2:33:63:
                    bb:fc:b7:95:21:05:13:e1:c9:73:72:b8:6e:75:36:
                    9b:f0:7e:90:61:b3:a6:5c:b3:d1:23:b3:a5:a5:9d:
                    ec:c2:ac:9e:04:b2:78:35:85:fa:a6:fb:2c:29:f9:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6F:40:E4:7D:D6:50:8D:E1:D2:07:EB:C7:21:3D:E4:87:8A:9E:CF
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363030303a3a2f34302d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:56:8c:8a:b5:68:52:a0:53:4e:ad:e1:03:0a:9f:7d:67:2a:
         74:1e:b0:42:a4:8a:cd:a6:e5:62:0f:23:93:7e:eb:f8:30:92:
         5f:aa:f0:04:ed:1a:fa:1f:b1:3f:ca:77:e4:31:b3:13:4a:e9:
         9c:25:73:ff:d5:bb:82:a1:79:83:53:86:02:ac:d5:d5:6c:e6:
         2d:e6:6e:e2:a5:f0:16:c6:eb:68:52:51:6b:78:9d:51:27:f2:
         e7:6e:3f:32:e6:e2:86:89:c5:a5:77:1f:20:f0:a1:2d:0e:04:
         fd:55:2f:53:6f:d5:70:a1:ad:a6:ac:97:6d:b3:e8:3d:f1:f8:
         00:3b:2f:f9:c3:51:85:2e:7a:ab:ca:dd:36:9a:95:23:c7:c0:
         8c:cf:98:ed:fa:a9:2d:49:4e:84:fa:b9:94:71:31:eb:6d:da:
         13:90:b6:d8:d2:53:6c:bc:82:f3:84:1d:40:24:f6:ec:eb:be:
         2e:e2:4b:d0:72:e2:9d:d1:ef:d8:c4:e2:ba:c4:dc:f2:a9:0d:
         d4:4f:07:4f:73:5c:2e:fa:73:e7:31:5c:75:37:ce:ac:b0:71:
         28:6c:cb:79:01:25:77:4a:d3:36:7e:0d:d7:a0:bf:c8:42:cd:
         1f:29:28:96:2a:99:6b:59:8b:b4:7c:3e:9b:35:14:c7:29:63:
         72:6e:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 07:09:09 2024 by rpki-client on console-fra.rpki-client.org