Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e3130342e302f32312d3231203d3e203135303334.roa
File:                     3230302e36312e3130342e302f32312d3231203d3e203135303334.roa (raw, json)
Hash identifier:          3JMQBGKbCkk3NdCBf+FV0uP5aq/8IO+fzoLJm4hTMuQ=
Subject key identifier:   31:73:AA:72:6C:5B:0F:95:84:3E:54:AE:73:71:94:02:7B:B6:E9:DF
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       6096A6BA73D72F8A60120D78CC06F2383CFE80E1
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e3130342e302f32312d3231203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:44 +0000
ROA not before:           Mon 03 Aug 2026 19:14:44 +0000
ROA not after:            Mon 02 Aug 2027 19:19:44 +0000
asID:                     15034
IP address blocks:        200.61.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:96:a6:ba:73:d7:2f:8a:60:12:0d:78:cc:06:f2:38:3c:fe:80:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:44 2026 GMT
            Not After : Aug  2 19:19:44 2027 GMT
        Subject: CN=3173AA726C5B0F95843E54AE737194027BB6E9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:56:65:10:15:2b:9e:74:fa:58:db:5d:35:
                    10:b6:65:89:cc:c4:97:f3:cc:e3:7e:09:ae:a3:1c:
                    e3:9b:d4:42:9b:ed:72:bb:50:2b:35:1c:76:90:1e:
                    b0:30:ee:1b:91:0c:fc:03:6f:0b:74:8a:ad:70:e3:
                    ea:5f:c3:00:ce:22:21:db:75:d0:c2:39:f1:a3:11:
                    b9:a3:f5:98:10:8a:65:13:1d:8f:7c:20:e4:ee:bb:
                    60:0c:b3:f2:a5:14:ca:e1:4c:37:02:6a:1b:ee:24:
                    f7:bf:85:4b:cd:c4:d5:83:32:61:45:92:e9:6c:16:
                    27:31:04:f3:12:15:aa:54:d1:35:18:10:70:de:df:
                    8c:a6:1c:3f:5f:af:a0:6d:41:a3:d0:3c:fa:c5:2c:
                    05:47:ac:9b:10:0a:ce:69:3b:d2:93:6f:ce:1f:15:
                    5a:aa:03:ae:0b:30:96:74:43:fe:59:a0:dc:d0:da:
                    90:d5:9c:3d:1b:38:64:27:7a:88:a5:be:0d:c7:40:
                    55:3e:57:95:cc:e9:e6:9a:11:92:24:cd:e0:d3:55:
                    d8:a3:cc:62:37:84:21:66:ec:53:0b:dd:19:45:71:
                    6a:c5:1d:c5:26:af:72:58:ee:43:f8:6a:be:5e:ec:
                    77:34:12:54:90:e3:33:28:8f:43:53:eb:98:3d:7f:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:73:AA:72:6C:5B:0F:95:84:3E:54:AE:73:71:94:02:7B:B6:E9:DF
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e3130342e302f32312d3231203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:a4:c4:bf:27:9e:62:e1:9c:00:8a:6a:e2:02:03:d4:2a:
         f3:1c:fd:d8:9e:fa:bc:b6:91:75:ec:00:c2:b3:ac:c7:df:d7:
         c0:30:23:15:24:25:da:4d:0e:14:87:83:84:3c:49:48:47:f5:
         d8:25:4a:98:79:5a:fd:17:17:36:5a:4d:e0:aa:a5:3c:ab:d3:
         5b:1c:fe:70:11:25:56:db:4d:b6:a3:e3:4f:f0:f7:ce:83:b8:
         f6:10:fb:a4:eb:ac:f6:2d:99:6e:bf:42:f3:4a:16:61:be:b9:
         56:e2:f5:fb:a2:ac:37:bc:b6:05:19:5c:81:1a:32:85:f8:f5:
         c3:c5:0d:dc:0c:be:1e:55:01:ac:d4:50:4f:88:85:0c:17:fd:
         0a:e3:bd:5a:5a:74:42:15:57:a5:87:bd:00:b9:a3:64:22:7c:
         e4:e0:1e:37:3b:28:c0:5e:22:2d:c8:9e:2d:f9:e4:9d:2f:1b:
         58:d9:04:d3:bf:f7:2c:d9:ec:90:3d:d1:4e:7b:3d:f7:23:73:
         7f:6a:ef:25:29:61:6b:43:73:a3:09:ee:5b:b9:e6:49:43:da:
         a5:b4:1f:ea:f0:2e:2a:5a:24:1c:ce:e2:66:29:0a:2d:a7:26:
         c7:95:94:01:6b:2f:c1:b5:cd:9d:b7:90:9e:31:53:c3:6d:6f:
         d6:51:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:28:01 2026 by rpki-client