Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a3a2f33322d3430203d3e20323635353737.roa
File:                     323830363a3332653a3a2f33322d3430203d3e20323635353737.roa (raw, json)
Hash identifier:          ik9+vb9Bd12JfcsbtLjsQh3F9e3frKr2BMPqm+QzHOs=
Subject key identifier:   B2:D7:AB:05:73:FC:DD:02:4A:9C:FF:3A:9C:7C:1F:B7:8E:AD:B5:E6
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       42E8CBFD66A672999679F573FE84A7F3AD52897B
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a3a2f33322d3430203d3e20323635353737.roa
Signing time:             Sat 06 Jul 2024 02:45:00 +0000
ROA not before:           Sat 06 Jul 2024 02:40:00 +0000
ROA not after:            Sat 05 Jul 2025 02:45:00 +0000
asID:                     265577
IP address blocks:        2806:32e::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:cb:fd:66:a6:72:99:96:79:f5:73:fe:84:a7:f3:ad:52:89:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: Jul  6 02:40:00 2024 GMT
            Not After : Jul  5 02:45:00 2025 GMT
        Subject: CN=B2D7AB0573FCDD024A9CFF3A9C7C1FB78EADB5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:bc:07:af:b5:fc:39:ec:78:e6:89:a1:f5:
                    cf:e1:13:e5:6b:d6:6e:83:6b:69:f6:a6:fa:f7:4e:
                    fb:01:8c:7e:bf:3c:1e:40:c0:d4:ec:cf:7a:5c:22:
                    fe:5c:46:3b:b5:bc:d9:a2:a2:31:1a:47:3a:29:cb:
                    ac:ae:e2:e1:2d:3b:52:eb:96:fc:c5:bb:51:7b:5b:
                    ac:b4:a9:ec:6d:bb:16:65:69:9e:71:50:6f:30:b8:
                    f3:33:fe:b7:0c:79:9b:a6:7b:7c:8c:69:e8:6b:ab:
                    f0:5b:4f:dd:84:6b:ee:47:b8:e1:6e:8e:4d:84:9a:
                    d7:96:8c:3c:c3:d0:9b:50:4e:ad:77:7f:ca:fb:55:
                    48:2a:ee:2c:90:b1:1c:4a:fc:4d:d4:7a:50:8c:aa:
                    78:7c:ee:9b:3f:e9:9c:2f:88:7c:5b:b0:7d:94:1c:
                    d7:44:f3:12:34:4c:99:91:79:ad:ec:05:95:6c:26:
                    e0:65:2b:63:4c:a4:2f:40:74:0a:b7:4c:c4:7c:47:
                    51:f6:63:11:61:e9:39:00:19:78:23:f8:90:f5:05:
                    7e:85:37:4d:49:f3:37:58:18:cb:28:4a:6b:be:24:
                    13:b1:5e:d3:35:10:e7:dc:a0:36:b2:c5:b7:32:8f:
                    81:2d:e5:28:3f:0b:ad:8c:f1:af:59:f2:d0:7f:19:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D7:AB:05:73:FC:DD:02:4A:9C:FF:3A:9C:7C:1F:B7:8E:AD:B5:E6
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/323830363a3332653a3a2f33322d3430203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32e::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:0e:2d:db:a3:cc:f8:f4:47:f4:8f:77:a6:e3:24:3e:1e:
         55:6f:78:ce:de:a2:07:d2:c3:5c:4b:fb:85:0e:55:f3:3c:47:
         67:ec:90:54:85:26:74:f6:53:98:db:f1:4d:51:5f:94:59:ef:
         56:ed:38:2d:b9:fc:7b:b9:7c:b8:de:52:58:00:46:47:66:77:
         81:3f:67:a7:b3:5f:1e:ab:4a:84:35:61:55:fb:5c:31:fb:a1:
         b5:58:c0:6c:b3:bc:db:f7:1e:a0:b3:94:bc:6e:c2:eb:e6:08:
         72:1e:93:02:a7:f0:1b:a8:b6:ed:64:a0:e6:25:b7:db:39:dc:
         1a:52:0d:16:43:29:3f:3d:3f:31:6d:69:4e:40:7a:17:b4:9e:
         5e:25:fc:3f:ac:fb:52:ef:de:56:70:2a:69:35:d1:ff:d4:14:
         80:84:18:ad:60:f4:b6:5b:21:81:9a:ed:7c:c9:29:09:8f:54:
         c3:f0:26:17:54:30:bf:5e:10:5a:24:1a:94:7b:63:42:13:99:
         99:8e:70:26:da:05:62:a9:a1:aa:e1:73:f5:02:48:17:d9:09:
         47:5c:d8:29:f4:26:ac:11:06:6e:90:4b:36:c2:bc:28:c7:b8:
         7e:9b:54:1d:84:91:29:e0:4b:ce:8d:89:00:ed:d2:00:06:e1:
         b7:3f:6e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org