Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/832C747BD2D7EA93F48C84AB58A79607E757AACF2093F0757A096A79A9D75AF3/0/323830363a3434393a3a2f33322d3438203d3e20323733323734.roa
File:                     323830363a3434393a3a2f33322d3438203d3e20323733323734.roa (raw, json)
Hash identifier:          Q03OAMcuLOhs55Mmv6zgPwqZLkckcN5QVu1bt8oqHQU=
Subject key identifier:   8A:5A:44:82:49:1D:F1:39:33:CE:90:DC:ED:51:CF:88:13:57:47:C8
Certificate issuer:       /CN=8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E
Certificate serial:       603D30CB18E966E4F79E003074B8A516044ED897
Authority key identifier: 8B:C6:0B:D9:BB:0D:0F:CA:08:1B:E5:1C:2F:1D:73:0A:5C:3E:A4:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/832C747BD2D7EA93F48C84AB58A79607E757AACF2093F0757A096A79A9D75AF3/0/323830363a3434393a3a2f33322d3438203d3e20323733323734.roa
Signing time:             Tue 24 Mar 2026 17:35:49 +0000
ROA not before:           Tue 24 Mar 2026 17:30:49 +0000
ROA not after:            Tue 23 Mar 2027 17:35:49 +0000
asID:                     273274
IP address blocks:        2806:449::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/832C747BD2D7EA93F48C84AB58A79607E757AACF2093F0757A096A79A9D75AF3/0/8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/832C747BD2D7EA93F48C84AB58A79607E757AACF2093F0757A096A79A9D75AF3/0/8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 05:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3d:30:cb:18:e9:66:e4:f7:9e:00:30:74:b8:a5:16:04:4e:d8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E
        Validity
            Not Before: Mar 24 17:30:49 2026 GMT
            Not After : Mar 23 17:35:49 2027 GMT
        Subject: CN=8A5A4482491DF13933CE90DCED51CF88135747C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:9b:24:c4:99:60:35:05:a8:ee:2c:d3:1c:
                    2d:a9:65:68:b9:e6:f2:2f:0f:3b:8a:ce:a2:67:99:
                    86:cc:20:09:65:a4:47:82:30:f3:b2:7f:87:06:ef:
                    3e:ac:55:4b:f2:f6:ca:23:39:b5:5b:b3:7e:86:94:
                    45:58:bc:ba:18:ae:df:b9:ba:67:b4:61:03:75:f4:
                    1c:8a:4c:eb:ea:ba:ae:50:77:fd:b2:e5:9b:8b:8c:
                    e9:fe:11:9d:1d:2e:9b:b0:85:af:e6:94:af:47:ec:
                    75:8e:46:e0:fc:0d:43:a4:a3:03:fa:5c:d1:3a:72:
                    9a:6c:40:e6:c1:1f:17:f6:e5:16:d7:76:61:e5:96:
                    d1:5d:69:f2:87:4a:08:32:e4:97:aa:b1:d5:3c:d3:
                    24:54:06:9f:63:0d:6e:37:f5:30:29:96:ef:5b:49:
                    18:7b:e8:39:61:38:47:ec:63:7f:2e:e0:26:5a:e0:
                    a0:84:94:28:b0:7f:94:d9:1c:21:ff:70:50:9f:1a:
                    43:40:05:56:cc:ff:fa:01:e7:f8:6a:1e:0c:84:44:
                    8d:bf:28:bb:75:6e:f7:63:77:04:00:71:b2:d3:28:
                    9a:ff:ae:10:67:e2:35:fc:cc:ec:38:d9:8f:bc:ba:
                    88:5b:a4:03:c6:03:8c:e9:cf:9e:08:5a:c1:5b:a2:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5A:44:82:49:1D:F1:39:33:CE:90:DC:ED:51:CF:88:13:57:47:C8
            X509v3 Authority Key Identifier:
                keyid:8B:C6:0B:D9:BB:0D:0F:CA:08:1B:E5:1C:2F:1D:73:0A:5C:3E:A4:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/832C747BD2D7EA93F48C84AB58A79607E757AACF2093F0757A096A79A9D75AF3/0/8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BC60BD9BB0D0FCA081BE51C2F1D730A5C3EA45E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/832C747BD2D7EA93F48C84AB58A79607E757AACF2093F0757A096A79A9D75AF3/0/323830363a3434393a3a2f33322d3438203d3e20323733323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:449::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:d6:93:19:ef:e0:5e:16:0c:e6:dd:f9:dc:13:d4:9f:59:ec:
         04:c0:4f:bc:e9:33:22:ed:99:d0:5e:d2:be:67:be:93:70:d5:
         82:88:1b:d2:0b:fb:5a:7e:16:b5:50:b7:b8:77:21:01:ca:36:
         f7:35:2d:b6:70:34:b4:8c:1a:54:70:62:a2:39:43:a3:0e:52:
         34:f3:51:f7:65:a3:62:d2:d4:e5:41:85:87:bf:d0:0a:07:ac:
         4b:12:37:e0:5f:4a:ed:05:51:5c:bf:1f:ef:28:f4:2b:f8:65:
         20:4a:ed:74:7e:d8:a1:9c:f6:6a:9f:b4:37:79:d9:b2:98:76:
         33:99:67:08:4a:ca:7b:ef:66:cc:c5:04:9e:7a:c6:21:34:8a:
         75:c6:aa:7e:44:6f:c7:97:62:ef:4c:6a:b5:4d:14:65:26:4f:
         08:fe:f8:d0:0a:e6:db:99:b5:2d:3e:10:a7:11:4f:f0:3f:e2:
         6f:04:76:f0:27:bd:70:1b:3c:80:8a:fa:d3:9e:0f:2b:33:3d:
         32:56:4d:49:b0:1e:c1:e5:33:27:92:76:9e:fd:2c:f2:20:8e:
         21:56:16:4d:8a:12:33:25:b3:3c:4e:93:d6:93:d1:2a:f3:65:
         92:96:e7:c7:36:a5:3d:c0:63:6a:bf:dd:66:1e:bb:01:80:bd:
         6e:f8:ac:65
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYD0wyxjpZuT3ngAwdLilFgRO2JcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJDNjBCRDlCQjBEMEZDQTA4MUJFNTFDMkYxRDczMEE1
QzNFQTQ1RTAeFw0yNjAzMjQxNzMwNDlaFw0yNzAzMjMxNzM1NDlaMDMxMTAvBgNV
BAMTKDhBNUE0NDgyNDkxREYxMzkzM0NFOTBEQ0VENTFDRjg4MTM1NzQ3QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9ZskxJlgNQWo7izTHC2pZWi5
5vIvDzuKzqJnmYbMIAllpEeCMPOyf4cG7z6sVUvy9sojObVbs36GlEVYvLoYrt+5
ume0YQN19ByKTOvquq5Qd/2y5ZuLjOn+EZ0dLpuwha/mlK9H7HWORuD8DUOkowP6
XNE6cppsQObBHxf25RbXdmHlltFdafKHSggy5JeqsdU80yRUBp9jDW439TAplu9b
SRh76DlhOEfsY38u4CZa4KCElCiwf5TZHCH/cFCfGkNABVbM//oB5/hqHgyERI2/
KLt1bvdjdwQAcbLTKJr/rhBn4jX8zOw42Y+8uohbpAPGA4zpz54IWsFbosFtAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUilpEgkkd8TkzzpDc7VHPiBNXR8gwHwYDVR0j
BBgwFoAUi8YL2bsND8oIG+UcLx1zClw+pF4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzJDNzQ3QkQyRDdFQTkzRjQ4Qzg0QUI1OEE3OTYwN0U3
NTdBQUNGMjA5M0YwNzU3QTA5NkE3OUE5RDc1QUYzLzAvOEJDNjBCRDlCQjBEMEZD
QTA4MUJFNTFDMkYxRDczMEE1QzNFQTQ1RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QkM2MEJEOUJCMEQwRkNBMDgx
QkU1MUMyRjFENzMwQTVDM0VBNDVFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODMyQzc0N0JEMkQ3RUE5M0Y0OEM4NEFCNThBNzk2MDdFNzU3QUFDRjIw
OTNGMDc1N0EwOTZBNzlBOUQ3NUFGMy8wLzMyMzgzMDM2M2EzNDM0MzkzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzMzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgRJMA0G
CSqGSIb3DQEBCwUAA4IBAQCk1pMZ7+BeFgzm3fncE9SfWewEwE+86TMi7ZnQXtK+
Z76TcNWCiBvSC/tafha1ULe4dyEByjb3NS22cDS0jBpUcGKiOUOjDlI081H3ZaNi
0tTlQYWHv9AKB6xLEjfgX0rtBVFcvx/vKPQr+GUgSu10ftihnPZqn7Q3edmymHYz
mWcISsp772bMxQSeesYhNIp1xqp+RG/Hl2LvTGq1TRRlJk8I/vjQCubbmbUtPhCn
EU/wP+JvBHbwJ71wGzyAivrTng8rMz0yVk1JsB7B5TMnknae/SzyII4hVhZNihIz
JbM8TpPWk9Eq82WSlufHNqU9wGNqv91mHrsBgL1u+Kxl
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:20 2026 by rpki-client