Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/323830333a396265303a3a2f33322d3332203d3e20323730303931.roa
File:                     323830333a396265303a3a2f33322d3332203d3e20323730303931.roa (raw, json)
Hash identifier:          Qg45mnvK9/wzvp11d435gVdYVRXadTvI5Nun8JpsRx0=
Subject key identifier:   03:46:98:12:0B:48:BE:95:C3:C6:93:F8:D2:42:08:9B:02:6E:1A:A8
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       225BE535F8F3A049902CB0C23F6FC86C9E47B7F7
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/323830333a396265303a3a2f33322d3332203d3e20323730303931.roa
Signing time:             Tue 23 Jun 2026 23:49:20 +0000
ROA not before:           Tue 23 Jun 2026 23:44:20 +0000
ROA not after:            Tue 22 Jun 2027 23:49:20 +0000
asID:                     270091
IP address blocks:        2803:9be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5b:e5:35:f8:f3:a0:49:90:2c:b0:c2:3f:6f:c8:6c:9e:47:b7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Jun 23 23:44:20 2026 GMT
            Not After : Jun 22 23:49:20 2027 GMT
        Subject: CN=034698120B48BE95C3C693F8D242089B026E1AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:8d:eb:2b:62:da:45:02:fa:0b:8e:e6:5d:
                    d9:a5:1e:2c:bf:43:51:6c:e1:0c:11:6a:08:13:41:
                    f3:86:cb:4f:47:17:20:cf:f2:2d:e3:a9:fb:be:e8:
                    1c:da:6b:9a:ef:de:0b:e9:cc:26:11:19:43:40:fe:
                    d8:2a:88:59:b5:a3:fb:53:1b:f3:23:2c:68:5f:6c:
                    92:7c:eb:28:51:46:c7:3b:8e:34:a8:23:55:e6:0d:
                    1c:73:b7:0f:90:46:a1:14:7f:f3:49:f0:dc:70:31:
                    ad:29:2b:43:db:01:73:de:7e:b6:a6:d1:84:f2:21:
                    19:b4:2d:ea:ff:5e:2c:e3:61:b8:c1:f1:44:c6:c8:
                    bc:84:ea:7a:f1:5f:cc:81:d7:ed:0e:0e:98:52:d8:
                    78:e2:ef:bf:03:84:a6:fa:cd:73:35:04:2f:d7:05:
                    00:83:92:2d:16:7f:d9:4c:c6:6a:81:d4:f1:10:5b:
                    02:7b:17:b6:e7:91:6a:b8:e6:67:85:c6:fe:7d:b9:
                    b5:86:7d:b9:87:89:90:eb:97:89:3f:51:72:08:73:
                    29:e8:88:29:78:36:b2:f1:81:37:05:ea:ce:0b:6d:
                    a7:1d:66:bc:b6:ec:39:37:8a:fb:53:54:3c:1e:ef:
                    a7:f6:fe:9a:ab:dd:b5:a3:0d:4a:5b:9b:4f:b4:d8:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:98:12:0B:48:BE:95:C3:C6:93:F8:D2:42:08:9B:02:6E:1A:A8
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/323830333a396265303a3a2f33322d3332203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:de:d8:ee:7b:11:7f:93:22:05:03:1c:f3:4a:5a:f5:f2:
         f8:6a:bc:fb:21:b5:42:36:2a:75:d6:0b:3c:34:99:fd:ac:68:
         a0:ed:0c:0f:ef:84:7b:bb:77:3c:cf:8f:09:a7:af:22:ce:6e:
         c0:07:66:ae:2a:9d:de:6e:ba:2f:19:1d:bf:5a:37:a3:77:55:
         86:6a:6c:ad:3d:10:a0:72:cb:d9:f0:b6:17:46:14:40:77:56:
         82:d2:7a:c9:99:3c:ea:f5:b0:82:61:a2:96:2c:7b:6d:a9:59:
         ef:fc:96:25:99:20:1f:3a:83:1f:aa:bc:c4:c9:dd:85:ba:7c:
         cf:bf:82:e9:39:06:35:13:a5:57:29:df:7d:f9:79:eb:8b:a9:
         52:a6:8f:57:a8:df:7d:82:4e:87:77:26:58:83:42:ee:5c:a2:
         95:6a:6b:99:74:66:fe:56:02:24:ba:34:64:f4:5e:a9:1c:7d:
         31:ea:2b:75:f3:2c:d4:b6:48:8d:8b:45:c5:32:ce:8b:54:e9:
         9a:4e:b1:19:e1:b6:77:7b:ac:31:7c:ee:40:19:bd:b4:52:e0:
         90:a1:f2:fd:bb:78:b5:90:6e:6e:94:77:d0:da:c4:42:30:82:
         17:06:ef:b8:b6:fb:24:2d:d5:49:25:ea:57:cf:2b:f6:be:b0:
         77:d9:d6:a3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIlvlNfjzoEmQLLDCP2/IbJ5Ht/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJBNjhFNjk1NEY2NzREODA5RDU1NDI0OUQxMTdCNThB
NEY2NEVDMDAeFw0yNjA2MjMyMzQ0MjBaFw0yNzA2MjIyMzQ5MjBaMDMxMTAvBgNV
BAMTKDAzNDY5ODEyMEI0OEJFOTVDM0M2OTNGOEQyNDIwODlCMDI2RTFBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5AY3rK2LaRQL6C47mXdmlHiy/
Q1Fs4QwRaggTQfOGy09HFyDP8i3jqfu+6Bzaa5rv3gvpzCYRGUNA/tgqiFm1o/tT
G/MjLGhfbJJ86yhRRsc7jjSoI1XmDRxztw+QRqEUf/NJ8NxwMa0pK0PbAXPefram
0YTyIRm0Ler/XizjYbjB8UTGyLyE6nrxX8yB1+0ODphS2Hji778DhKb6zXM1BC/X
BQCDki0Wf9lMxmqB1PEQWwJ7F7bnkWq45meFxv59ubWGfbmHiZDrl4k/UXIIcyno
iCl4NrLxgTcF6s4LbacdZry27Dk3ivtTVDwe76f2/pqr3bWjDUpbm0+02JIvAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUA0aYEgtIvpXDxpP40kIImwJuGqgwHwYDVR0j
BBgwFoAUa6aOaVT2dNgJ1VQknRF7WKT2TsAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjBFMzdEMzI3MEM2OTY5MzIzMTFGN0NENTlDOUVGNUQ5
QTEwMUFBOTkyQkJGMjM1OThCNjJBNzNFMzA2MEE2LzAvNkJBNjhFNjk1NEY2NzRE
ODA5RDU1NDI0OUQxMTdCNThBNEY2NEVDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QkE2OEU2OTU0RjY3NEQ4MDlE
NTU0MjQ5RDExN0I1OEE0RjY0RUMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzYwRTM3RDMyNzBDNjk2OTMyMzExRjdDRDU5QzlFRjVEOUExMDFBQTk5
MkJCRjIzNTk4QjYyQTczRTMwNjBBNi8wLzMyMzgzMDMzM2EzOTYyNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDm+Aw
DQYJKoZIhvcNAQELBQADggEBADK93tjuexF/kyIFAxzzSlr18vhqvPshtUI2KnXW
Czw0mf2saKDtDA/vhHu7dzzPjwmnryLObsAHZq4qnd5uui8ZHb9aN6N3VYZqbK09
EKByy9nwthdGFEB3VoLSesmZPOr1sIJhopYse22pWe/8liWZIB86gx+qvMTJ3YW6
fM+/guk5BjUTpVcp3335eeuLqVKmj1eo332CTod3JliDQu5copVqa5l0Zv5WAiS6
NGT0XqkcfTHqK3XzLNS2SI2LRcUyzotU6ZpOsRnhtnd7rDF87kAZvbRS4JCh8v27
eLWQbm6Ud9DaxEIwghcG77i2+yQt1Ukl6lfPK/a+sHfZ1qM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:40:41 2026 by rpki-client