Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/323830363a3435313a3a2f33322d3438203d3e20323733333032.roa
File:                     323830363a3435313a3a2f33322d3438203d3e20323733333032.roa (raw, json)
Hash identifier:          uFixbwHmGBvzvx3lm45kYcuiQIIDpA5Y5NgSEa0aREA=
Subject key identifier:   B4:FE:37:6E:B9:5D:A9:FB:92:06:5F:B3:BC:BB:8A:97:82:60:14:E1
Certificate issuer:       /CN=531C37C371A1AD06FE5F6C2D206BF3333E603FE8
Certificate serial:       71CE7F09744E273065264582B4BFCA55112BDB88
Authority key identifier: 53:1C:37:C3:71:A1:AD:06:FE:5F:6C:2D:20:6B:F3:33:3E:60:3F:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/323830363a3435313a3a2f33322d3438203d3e20323733333032.roa
Signing time:             Mon 27 Apr 2026 23:10:00 +0000
ROA not before:           Mon 27 Apr 2026 23:05:00 +0000
ROA not after:            Mon 26 Apr 2027 23:10:00 +0000
asID:                     273302
IP address blocks:        2806:451::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ce:7f:09:74:4e:27:30:65:26:45:82:b4:bf:ca:55:11:2b:db:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531C37C371A1AD06FE5F6C2D206BF3333E603FE8
        Validity
            Not Before: Apr 27 23:05:00 2026 GMT
            Not After : Apr 26 23:10:00 2027 GMT
        Subject: CN=B4FE376EB95DA9FB92065FB3BCBB8A97826014E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:cf:55:9d:6f:37:b0:e7:88:48:f9:ed:00:
                    64:b6:12:2b:0f:62:ac:c8:35:a4:b7:eb:c1:ea:c4:
                    36:f7:d0:5a:f0:69:f6:49:d3:96:3f:2a:97:5c:62:
                    b6:55:a1:e8:d2:d9:7c:66:f4:aa:cc:7f:6f:d7:e5:
                    2c:01:57:1a:bc:fc:bc:ec:6e:8e:bb:da:53:ce:44:
                    08:72:70:33:af:d4:7f:2a:ab:01:27:83:60:d7:2b:
                    da:cb:6d:49:11:e2:17:aa:06:bb:18:be:c3:f3:47:
                    31:3f:62:cc:85:61:52:0f:d1:53:91:63:0d:58:a7:
                    30:c3:c3:59:01:9d:1b:f5:25:7f:5b:76:b9:99:9e:
                    42:43:3f:3b:92:3a:09:d0:be:45:b5:c2:bd:82:73:
                    27:d6:69:e9:6d:30:f9:f0:30:61:16:33:2e:89:34:
                    12:51:83:8f:ea:b6:cf:35:59:e3:28:a7:0b:76:ef:
                    2f:0c:79:56:d7:9d:de:f0:35:5b:05:1e:10:85:a9:
                    fb:86:c0:44:8f:03:49:ab:c6:eb:59:6c:cc:b5:86:
                    b5:27:f2:8e:3b:cb:3e:f7:d5:ec:4b:52:34:52:c0:
                    8d:3f:7a:de:4c:43:0e:16:6a:4a:60:5b:a3:db:e1:
                    cf:80:f3:4f:1b:a6:6b:86:6a:c2:ff:30:e1:a7:26:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:37:6E:B9:5D:A9:FB:92:06:5F:B3:BC:BB:8A:97:82:60:14:E1
            X509v3 Authority Key Identifier:
                keyid:53:1C:37:C3:71:A1:AD:06:FE:5F:6C:2D:20:6B:F3:33:3E:60:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/323830363a3435313a3a2f33322d3438203d3e20323733333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:451::/32

    Signature Algorithm: sha256WithRSAEncryption
         e5:d2:d1:57:a6:3a:7b:7e:d2:86:78:58:7a:60:91:5f:c1:39:
         bf:41:f1:19:f9:f4:a8:56:92:74:30:51:bf:40:4f:8a:ca:2e:
         bd:dd:81:22:ce:cd:57:49:9e:ed:db:2d:64:4a:19:64:81:ca:
         f9:58:b1:9c:2d:d1:1d:87:67:41:a7:24:bb:7c:b9:2d:6a:9b:
         20:fe:a2:77:0b:74:c7:41:1e:f4:7e:10:7c:4e:9c:65:6c:45:
         3c:a3:9f:76:36:60:b4:aa:be:42:d2:5d:cb:30:0f:4d:7e:a9:
         e1:d8:ad:c4:e1:77:41:2b:ad:44:b8:c1:aa:1c:02:18:13:5c:
         bb:24:14:21:c8:0b:a9:d1:17:9c:5e:c4:a2:86:f8:49:c2:b9:
         50:94:5e:03:62:d4:b8:f7:76:77:c7:82:83:6e:cc:23:71:cb:
         42:87:c5:09:59:0b:01:e2:c4:0f:20:c0:1c:79:84:69:b1:86:
         d4:37:c4:a5:ea:a9:58:63:a3:f5:9a:11:82:56:cc:e2:25:de:
         cd:b4:22:2c:7d:53:45:b5:43:f8:c6:88:ea:51:e4:b3:c1:f3:
         f5:42:86:13:41:08:3a:e8:39:24:4b:b5:93:74:26:73:8d:ca:
         6f:dc:01:53:8f:30:d9:62:fc:e7:3a:d3:c8:24:09:b3:76:d2:
         ac:21:6d:f4
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUcc5/CXROJzBlJkWCtL/KVREr24gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMxQzM3QzM3MUExQUQwNkZFNUY2QzJEMjA2QkYzMzMz
RTYwM0ZFODAeFw0yNjA0MjcyMzA1MDBaFw0yNzA0MjYyMzEwMDBaMDMxMTAvBgNV
BAMTKEI0RkUzNzZFQjk1REE5RkI5MjA2NUZCM0JDQkI4QTk3ODI2MDE0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CM9VnW83sOeISPntAGS2EisP
YqzINaS368HqxDb30FrwafZJ05Y/KpdcYrZVoejS2Xxm9KrMf2/X5SwBVxq8/Lzs
bo672lPORAhycDOv1H8qqwEng2DXK9rLbUkR4heqBrsYvsPzRzE/YsyFYVIP0VOR
Yw1YpzDDw1kBnRv1JX9bdrmZnkJDPzuSOgnQvkW1wr2CcyfWaeltMPnwMGEWMy6J
NBJRg4/qts81WeMopwt27y8MeVbXnd7wNVsFHhCFqfuGwESPA0mrxutZbMy1hrUn
8o47yz731exLUjRSwI0/et5MQw4WakpgW6Pb4c+A808bpmuGasL/MOGnJtBPAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUtP43brldqfuSBl+zvLuKl4JgFOEwHwYDVR0j
BBgwFoAUUxw3w3GhrQb+X2wtIGvzMz5gP+gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMjI1NzRGODUxQkNDNjk4RDkyQzVBQjQ2MDE3NENEQzVD
Q0Q4N0I3OTE4QTVFNDJEREFEQzBBMDJGRTJCNTVBLzAvNTMxQzM3QzM3MUExQUQw
NkZFNUY2QzJEMjA2QkYzMzMzRTYwM0ZFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MzFDMzdDMzcxQTFBRDA2RkU1
RjZDMkQyMDZCRjMzMzNFNjAzRkU4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjIyNTc0Rjg1MUJDQzY5OEQ5MkM1QUI0NjAxNzRDREM1Q0NEODdCNzkx
OEE1RTQyRERBREMwQTAyRkUyQjU1QS8wLzMyMzgzMDM2M2EzNDM1MzEzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzMzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgRRMA0G
CSqGSIb3DQEBCwUAA4IBAQDl0tFXpjp7ftKGeFh6YJFfwTm/QfEZ+fSoVpJ0MFG/
QE+Kyi693YEizs1XSZ7t2y1kShlkgcr5WLGcLdEdh2dBpyS7fLktapsg/qJ3C3TH
QR70fhB8TpxlbEU8o592NmC0qr5C0l3LMA9Nfqnh2K3E4XdBK61EuMGqHAIYE1y7
JBQhyAup0RecXsSihvhJwrlQlF4DYtS493Z3x4KDbswjcctCh8UJWQsB4sQPIMAc
eYRpsYbUN8Sl6qlYY6P1mhGCVsziJd7NtCIsfVNFtUP4xojqUeSzwfP1QoYTQQg6
6DkkS7WTdCZzjcpv3AFTjzDZYvznOtPIJAmzdtKsIW30
-----END CERTIFICATE-----
Generated at Tue Apr 28 23:10:19 2026 by rpki-client