Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/323830363a3433393a3a2f33322d3438203d3e20323733323535.roa
File:                     323830363a3433393a3a2f33322d3438203d3e20323733323535.roa (raw, json)
Hash identifier:          IjW9rGa4AdQbq7kXbGtoUZ7ZWf0IYCOvXkhR3NI5+xI=
Subject key identifier:   BB:4D:23:81:6A:0F:4B:B7:9B:80:7C:60:B2:AC:98:A1:6F:8A:69:EF
Certificate issuer:       /CN=E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4
Certificate serial:       6DC4B3DC02F595752EFB24C8CE2AD6EA62FC2097
Authority key identifier: E7:65:BD:CF:EE:34:4B:DD:3C:7B:C9:5D:0A:BC:FE:91:DE:B9:63:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/323830363a3433393a3a2f33322d3438203d3e20323733323535.roa
Signing time:             Sat 09 May 2026 04:41:49 +0000
ROA not before:           Sat 09 May 2026 04:36:49 +0000
ROA not after:            Sat 08 May 2027 04:41:49 +0000
asID:                     273255
IP address blocks:        2806:439::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:b3:dc:02:f5:95:75:2e:fb:24:c8:ce:2a:d6:ea:62:fc:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4
        Validity
            Not Before: May  9 04:36:49 2026 GMT
            Not After : May  8 04:41:49 2027 GMT
        Subject: CN=BB4D23816A0F4BB79B807C60B2AC98A16F8A69EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:60:61:00:74:5b:17:2b:31:01:e0:78:92:
                    79:71:58:3d:68:7d:b5:3c:10:41:a6:e6:ac:1b:82:
                    87:aa:39:88:23:9f:b3:5b:b6:2d:88:22:7e:8f:f9:
                    ca:25:0e:97:81:55:b8:a3:cc:37:ea:c7:b5:b7:1a:
                    de:e2:4a:61:bf:ce:9a:32:6a:43:f9:1f:60:f4:31:
                    a7:ad:bb:7c:0a:9f:34:46:44:5b:49:4d:7d:bb:49:
                    4d:04:5b:f2:d3:66:7e:57:d6:8c:1c:09:d1:30:33:
                    d8:2a:de:bf:9f:9c:2b:28:59:58:3c:6f:0f:4b:fa:
                    bc:e3:e7:2c:ff:d5:f5:71:24:3c:82:4b:31:e7:83:
                    c3:ac:3a:e8:68:fa:f0:91:1b:1e:a9:31:0f:32:72:
                    14:19:47:a0:d2:f3:3e:d7:b1:d1:15:17:67:56:e5:
                    8b:63:70:9d:aa:e0:14:40:da:d3:98:56:fc:a2:eb:
                    23:21:d9:5f:da:a6:31:60:60:c0:ef:3b:78:0c:4d:
                    c7:77:26:89:80:1f:74:5e:88:4c:c5:47:4c:08:1a:
                    5d:ea:6f:0e:09:a4:f7:da:52:75:98:5a:7e:db:b6:
                    2b:62:14:e7:bf:81:ad:4c:fe:08:3a:be:4f:f9:9e:
                    88:41:9c:d6:ae:b2:e3:96:cc:e5:e9:e7:2c:62:fb:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4D:23:81:6A:0F:4B:B7:9B:80:7C:60:B2:AC:98:A1:6F:8A:69:EF
            X509v3 Authority Key Identifier:
                keyid:E7:65:BD:CF:EE:34:4B:DD:3C:7B:C9:5D:0A:BC:FE:91:DE:B9:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/323830363a3433393a3a2f33322d3438203d3e20323733323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:439::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:a3:57:87:24:0f:80:af:e0:d6:71:71:82:83:67:77:55:
         a6:6c:56:42:2e:d9:bc:f4:8d:c4:24:bb:b3:4a:db:66:dd:83:
         ea:40:67:be:56:8d:13:f6:6d:d8:5f:b4:52:41:35:81:4a:9d:
         83:95:6d:19:5e:c4:e3:18:d7:8d:b2:98:bc:ef:e1:f3:f5:2e:
         54:a4:f9:fb:fd:6f:99:3d:8a:86:d9:fd:21:6d:df:7c:b1:5f:
         69:5a:b0:7f:50:51:e6:9a:f9:6c:13:9f:88:17:a6:9d:ae:46:
         fd:6d:11:99:b1:df:7f:31:1b:89:0c:0f:95:b1:dc:b6:03:01:
         8f:f0:e1:cb:1a:b6:e3:f7:75:8d:68:91:cc:a1:ff:ac:ef:e1:
         3f:9c:99:7a:f1:ba:1b:0e:d3:bc:0e:f5:f7:2c:3e:3f:84:24:
         e4:4b:a0:1f:87:ce:54:8b:47:d9:a0:11:31:b7:b0:e5:0b:b6:
         6a:6c:ea:ef:86:97:11:22:40:21:96:bc:f8:0c:58:fa:f0:9f:
         c5:65:6f:5f:18:43:de:48:f7:c7:03:10:d8:ef:f1:79:64:b9:
         4e:df:3f:9c:e6:49:fd:0b:e0:88:da:bb:cb:7d:2f:aa:04:e6:
         bd:37:61:e0:e5:93:b8:c3:8e:56:34:38:a0:54:6b:cb:c4:ba:
         d1:76:49:0e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUbcSz3AL1lXUu+yTIzirW6mL8IJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc2NUJEQ0ZFRTM0NEJERDNDN0JDOTVEMEFCQ0ZFOTFE
RUI5NjNENDAeFw0yNjA1MDkwNDM2NDlaFw0yNzA1MDgwNDQxNDlaMDMxMTAvBgNV
BAMTKEJCNEQyMzgxNkEwRjRCQjc5QjgwN0M2MEIyQUM5OEExNkY4QTY5RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJ2BhAHRbFysxAeB4knlxWD1o
fbU8EEGm5qwbgoeqOYgjn7Nbti2IIn6P+colDpeBVbijzDfqx7W3Gt7iSmG/zpoy
akP5H2D0Maetu3wKnzRGRFtJTX27SU0EW/LTZn5X1owcCdEwM9gq3r+fnCsoWVg8
bw9L+rzj5yz/1fVxJDyCSzHng8OsOuho+vCRGx6pMQ8ychQZR6DS8z7XsdEVF2dW
5YtjcJ2q4BRA2tOYVvyi6yMh2V/apjFgYMDvO3gMTcd3JomAH3ReiEzFR0wIGl3q
bw4JpPfaUnWYWn7btitiFOe/ga1M/gg6vk/5nohBnNausuOWzOXp5yxi+/v9AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUu00jgWoPS7ebgHxgsqyYoW+Kae8wHwYDVR0j
BBgwFoAU52W9z+40S908e8ldCrz+kd65Y9QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMzhCMUNEQjAyRERCMDExNjVBMjUwMzRDMzJFRTA5RDg4
RTAzMzUyQ0I5NzRFNDY4OTQ0ODcwRTNDMDM3MjA2LzAvRTc2NUJEQ0ZFRTM0NEJE
RDNDN0JDOTVEMEFCQ0ZFOTFERUI5NjNENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzY1QkRDRkVFMzQ0QkREM0M3
QkM5NUQwQUJDRkU5MURFQjk2M0Q0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjM4QjFDREIwMkREQjAxMTY1QTI1MDM0QzMyRUUwOUQ4OEUwMzM1MkNC
OTc0RTQ2ODk0NDg3MEUzQzAzNzIwNi8wLzMyMzgzMDM2M2EzNDMzMzkzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzMzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgQ5MA0G
CSqGSIb3DQEBCwUAA4IBAQAjbqNXhyQPgK/g1nFxgoNnd1WmbFZCLtm89I3EJLuz
Sttm3YPqQGe+Vo0T9m3YX7RSQTWBSp2DlW0ZXsTjGNeNspi87+Hz9S5UpPn7/W+Z
PYqG2f0hbd98sV9pWrB/UFHmmvlsE5+IF6adrkb9bRGZsd9/MRuJDA+Vsdy2AwGP
8OHLGrbj93WNaJHMof+s7+E/nJl68bobDtO8DvX3LD4/hCTkS6Afh85Ui0fZoBEx
t7DlC7ZqbOrvhpcRIkAhlrz4DFj68J/FZW9fGEPeSPfHAxDY7/F5ZLlO3z+c5kn9
C+CI2rvLfS+qBOa9N2Hg5ZO4w45WNDigVGvLxLrRdkkO
-----END CERTIFICATE-----
Generated at Wed May 13 17:31:07 2026 by rpki-client