Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa
File:                     323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          YXiRMB6KtE+FSpSLA/07+uBXJLHYlDOwrAI+6U9WHO8=
Subject key identifier:   C4:4A:C1:01:16:4B:AA:E7:6B:4D:9B:0B:43:80:E3:96:8E:AC:5C:F3
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       7573F5FC0A05D93F436AFB454482E63A9630E8F7
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa
Signing time:             Sat 06 Jul 2024 02:30:00 +0000
ROA not before:           Sat 06 Jul 2024 02:25:00 +0000
ROA not after:            Sat 05 Jul 2025 02:30:00 +0000
asID:                     265577
IP address blocks:        2806:32e:6600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:73:f5:fc:0a:05:d9:3f:43:6a:fb:45:44:82:e6:3a:96:30:e8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: Jul  6 02:25:00 2024 GMT
            Not After : Jul  5 02:30:00 2025 GMT
        Subject: CN=C44AC101164BAAE76B4D9B0B4380E3968EAC5CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:48:2f:99:1d:7f:cb:57:29:0e:ed:43:87:
                    61:07:27:3a:e1:e8:d2:b2:f2:cd:4f:ea:45:ff:5a:
                    ee:b0:bc:32:a6:4b:c5:04:ae:64:e9:45:df:8a:d0:
                    37:ce:aa:29:cd:57:47:c3:8c:73:27:82:4b:b4:32:
                    05:9d:07:68:75:b1:33:f6:83:3a:9b:94:31:00:e1:
                    96:7b:71:b4:b6:fe:55:80:0e:f1:3a:a9:39:5e:17:
                    6a:de:39:fd:65:7d:e4:8e:fe:ca:4a:99:e7:81:e8:
                    97:16:d2:24:24:f5:56:7b:da:9d:f9:40:4b:92:38:
                    aa:e4:5b:d2:6f:c5:17:16:04:03:0c:27:8c:1d:1e:
                    a8:ac:0a:bb:a4:f4:cd:96:7d:29:46:3b:f6:17:70:
                    1c:f5:2f:6d:7f:39:72:99:56:66:7b:18:27:84:f8:
                    d1:d0:09:b5:09:e6:54:a4:77:35:95:be:0e:dc:27:
                    83:fb:ee:f0:5f:62:6a:b2:53:de:37:3e:2e:b5:78:
                    b8:45:0b:fd:94:43:02:bb:00:2e:19:ef:c8:1d:26:
                    28:40:d8:b8:e4:4b:5b:b1:51:ae:c3:ee:07:ef:0f:
                    a0:95:3f:47:f6:8e:74:f2:63:c3:e5:c6:ff:ea:d6:
                    b4:ef:34:1d:23:68:22:93:16:9e:5b:21:b8:07:1a:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:C1:01:16:4B:AA:E7:6B:4D:9B:0B:43:80:E3:96:8E:AC:5C:F3
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a363630303a3a2f34302d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:96:d0:ea:0b:a2:b6:fd:df:a8:76:0f:22:c5:6c:e8:a0:57:
         bb:77:5a:26:9e:9e:a6:26:d5:c4:e7:92:15:a7:99:5f:5d:cc:
         1f:9b:bb:80:0f:7a:12:cd:ae:b4:e5:8f:43:79:60:4f:c3:9a:
         ab:05:60:6e:d1:fd:be:4e:02:fe:7d:42:9f:f3:75:63:af:ee:
         f9:f4:e5:5c:80:89:21:31:ea:75:08:52:29:77:1b:88:32:c2:
         dc:fb:a5:74:c4:17:81:03:6f:74:e4:98:f6:7e:02:26:f2:04:
         83:eb:e5:b7:1f:2c:a3:6d:56:2b:b5:2b:50:4f:ab:bc:f3:31:
         71:d7:1a:db:de:28:4a:97:16:2a:4a:eb:aa:13:09:7d:29:92:
         a9:05:20:0e:d9:cb:77:b4:17:e9:14:b6:b6:9a:23:d5:36:e0:
         b2:5a:94:5f:57:b7:be:9d:02:a4:99:2e:25:d7:f5:42:dc:b9:
         bb:b9:ea:c6:95:29:84:aa:18:46:54:5a:43:44:16:e3:39:e5:
         31:7c:9b:64:53:0c:0e:34:e8:15:27:e0:11:f5:8f:0f:7b:86:
         68:20:f4:97:f9:d4:05:79:e1:6c:c0:ef:31:0d:6b:0d:4c:c5:
         c2:a0:56:92:47:cd:aa:d0:c2:03:c7:48:ea:2b:bb:76:ad:9e:
         45:31:8d:96
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUdXP1/AoF2T9DavtFRILmOpYw6PcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1Q0E3NDlCOTdCNzUwNEY5NzNEOThENTkzNEIzNjVC
RTgxOTM1NTAeFw0yNDA3MDYwMjI1MDBaFw0yNTA3MDUwMjMwMDBaMDMxMTAvBgNV
BAMTKEM0NEFDMTAxMTY0QkFBRTc2QjREOUIwQjQzODBFMzk2OEVBQzVDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIkgvmR1/y1cpDu1Dh2EHJzrh
6NKy8s1P6kX/Wu6wvDKmS8UErmTpRd+K0DfOqinNV0fDjHMngku0MgWdB2h1sTP2
gzqblDEA4ZZ7cbS2/lWADvE6qTleF2reOf1lfeSO/spKmeeB6JcW0iQk9VZ72p35
QEuSOKrkW9JvxRcWBAMMJ4wdHqisCruk9M2WfSlGO/YXcBz1L21/OXKZVmZ7GCeE
+NHQCbUJ5lSkdzWVvg7cJ4P77vBfYmqyU943Pi61eLhFC/2UQwK7AC4Z78gdJihA
2LjkS1uxUa7D7gfvD6CVP0f2jnTyY8Plxv/q1rTvNB0jaCKTFp5bIbgHGj43AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUxErBARZLqudrTZsLQ4Djlo6sXPMwHwYDVR0j
BBgwFoAUH1ynSbl7dQT5c9mNWTSzZb6Bk1UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDZCMDA3QUI2NDFDMkRFQjkzMDAyQ0M4RTI3RjcwNDc5
MDE2N0MxOTVDQzE2RkEwNkU2RUQ3QkI4RDU0MjEyLzAvMUY1Q0E3NDlCOTdCNzUw
NEY5NzNEOThENTkzNEIzNjVCRTgxOTM1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjVDQTc0OUI5N0I3NTA0Rjk3
M0Q5OEQ1OTM0QjM2NUJFODE5MzU1LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ2QjAwN0FCNjQxQzJERUI5MzAwMkNDOEUyN0Y3MDQ3OTAxNjdDMTk1
Q0MxNkZBMDZFNkVEN0JCOEQ1NDIxMi8wLzMyMzgzMDM2M2EzMzMyNjUzYTM2MzYz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM1MzUzNzM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAYDLmYwDQYJKoZIhvcNAQELBQADggEBAGSW0OoLorb936h2DyLFbOigV7t3
WiaenqYm1cTnkhWnmV9dzB+bu4APehLNrrTlj0N5YE/DmqsFYG7R/b5OAv59Qp/z
dWOv7vn05VyAiSEx6nUIUil3G4gywtz7pXTEF4EDb3TkmPZ+AibyBIPr5bcfLKNt
Viu1K1BPq7zzMXHXGtveKEqXFipK66oTCX0pkqkFIA7Zy3e0F+kUtraaI9U24LJa
lF9Xt76dAqSZLiXX9ULcubu56saVKYSqGEZUWkNEFuM55TF8m2RTDA406BUn4BH1
jw97hmgg9Jf51AV54WzA7zENaw1MxcKgVpJHzarQwgPHSOoru3atnkUxjZY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org