Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36352e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e36352e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          xHFr4SxN0jy00xNVfLSM5uAHcVIcV40pQfEzi2R1H9E=
Subject key identifier:   54:CC:1D:B2:21:5A:3F:1E:22:BB:B1:6B:36:EE:AA:21:41:58:7D:41
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       485C333803962BD9B9B4D401837DCAF9902894F9
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36352e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:43 +0000
ROA not before:           Mon 03 Aug 2026 19:14:43 +0000
ROA not after:            Mon 02 Aug 2027 19:19:43 +0000
asID:                     15034
IP address blocks:        200.61.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5c:33:38:03:96:2b:d9:b9:b4:d4:01:83:7d:ca:f9:90:28:94:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:43 2026 GMT
            Not After : Aug  2 19:19:43 2027 GMT
        Subject: CN=54CC1DB2215A3F1E22BBB16B36EEAA2141587D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:33:d6:67:6d:d0:5c:93:04:4d:aa:9f:57:
                    b3:fa:fa:54:84:cd:b4:a9:be:ad:8d:94:87:6c:ac:
                    82:97:b9:32:cd:dd:7e:1b:b5:6d:1a:dd:20:30:de:
                    a5:4a:4b:cf:10:b4:1b:eb:bc:54:3f:55:c7:0a:02:
                    c6:f3:90:19:06:2a:5f:c5:60:86:d7:0e:cc:6e:32:
                    c6:7b:e6:d0:ac:06:8a:0b:69:dc:90:a2:db:46:25:
                    9c:58:32:3d:86:26:8d:ff:f9:a7:ce:77:88:24:bc:
                    59:76:a9:b2:5f:2f:c3:84:f2:e9:17:e2:51:7b:04:
                    a5:b1:c6:8a:48:71:a8:73:2f:5b:51:ce:b3:2a:cc:
                    63:a4:48:b4:4c:5d:cc:42:4a:2a:b9:41:cc:d2:e2:
                    00:cf:77:14:51:4a:a7:10:da:ad:b4:74:de:b0:45:
                    97:b8:f4:0d:69:ef:8f:48:f9:4f:6b:5e:db:38:96:
                    a9:47:90:ae:ef:80:9e:23:dd:9e:26:db:d7:40:e2:
                    c3:f1:45:45:12:1c:36:16:8d:f0:9c:d3:28:0a:4f:
                    ac:9a:63:f0:49:e2:60:6b:8d:a6:d9:04:eb:f5:34:
                    f8:27:7a:ba:9c:9f:21:ad:8f:f6:94:d1:d5:d6:74:
                    62:ca:22:81:2c:11:ea:78:49:6e:aa:7d:39:d5:ce:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:1D:B2:21:5A:3F:1E:22:BB:B1:6B:36:EE:AA:21:41:58:7D:41
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36352e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:75:16:15:38:8e:20:d4:ac:7b:c9:a9:0e:1b:68:cf:09:bb:
         0b:3f:7d:1b:33:0c:31:41:32:39:41:47:06:4a:d4:69:ea:57:
         a1:94:e1:59:61:23:10:4d:fa:bc:f2:69:2c:ed:30:b2:2a:36:
         e5:c9:47:80:fb:03:bd:98:9a:f9:e6:9c:c0:38:cb:4a:c5:0f:
         67:45:8f:3a:ad:4e:77:42:43:3a:38:e6:bb:84:f7:d5:4b:2d:
         8e:8d:46:04:b3:63:c2:97:64:83:a4:3f:ab:41:4d:a5:da:e0:
         c0:d0:bf:7f:db:7a:c3:82:d6:58:8e:c6:e3:93:e8:8d:2a:49:
         45:31:d1:9c:79:b4:20:cf:e6:d7:87:7d:03:33:d3:b7:0d:43:
         59:d5:88:93:0f:95:15:c0:d8:05:28:0f:72:26:e3:12:34:c8:
         7a:7c:c1:8d:9a:ee:52:48:7b:7a:37:20:c1:7f:9a:1b:00:fc:
         a1:60:93:ed:4d:4b:a1:fd:af:70:e8:a1:a8:1c:58:b9:a1:e6:
         d4:bb:87:33:c1:8d:2c:25:38:ef:d3:f6:71:05:0a:cf:32:03:
         b4:f5:dc:2d:c7:7e:1c:15:bf:49:66:18:c9:ab:66:54:de:0a:
         ae:5f:cb:77:77:39:0c:ee:89:b2:10:66:61:c8:c6:2e:bd:e1:
         8e:d2:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:36:00 2026 by rpki-client