Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36372e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e36372e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          AWkwnFnoqYOf4ytX7vlB3wvfB1zRaFkLqdahBW8aYXg=
Subject key identifier:   F0:A6:32:4E:10:16:60:FA:49:11:E1:93:C4:68:A2:D8:9A:C4:6F:53
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       787B39077FB1A9FC6DDEDDA134B4199D86794BC5
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36372e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:45 +0000
ROA not before:           Mon 03 Aug 2026 19:14:45 +0000
ROA not after:            Mon 02 Aug 2027 19:19:45 +0000
asID:                     15034
IP address blocks:        200.61.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7b:39:07:7f:b1:a9:fc:6d:de:dd:a1:34:b4:19:9d:86:79:4b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:45 2026 GMT
            Not After : Aug  2 19:19:45 2027 GMT
        Subject: CN=F0A6324E101660FA4911E193C468A2D89AC46F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:8f:b8:39:7f:71:5f:01:b5:6b:81:b9:4f:
                    6d:eb:71:5c:66:5a:62:97:5f:df:b4:4f:67:70:ff:
                    44:8e:b7:b3:3e:da:76:d9:12:6f:ee:b4:7a:ba:64:
                    92:98:30:9f:b1:11:a4:81:6a:b8:f9:65:cd:91:14:
                    99:35:cd:f8:e0:b5:c2:39:fd:26:12:de:d0:2e:7b:
                    6b:e7:a9:17:f6:b5:86:51:f9:7a:27:74:1c:7c:93:
                    90:17:53:69:26:0d:04:03:9b:b0:08:b5:f0:d1:ad:
                    f2:a3:37:05:c4:9b:d1:a5:bf:54:61:83:a5:8e:fa:
                    9f:26:a9:b7:9f:de:2d:09:b8:91:e3:16:90:82:f1:
                    74:05:31:a6:f8:7a:7f:ad:cf:c7:b3:c0:d2:89:36:
                    22:e6:80:e1:66:50:e8:68:76:5b:6b:a5:7f:97:67:
                    57:fa:a8:d9:1b:56:09:37:38:b6:3f:15:83:e8:03:
                    59:43:6a:b5:aa:5a:b9:cb:ed:e6:fc:9e:13:bb:61:
                    f7:64:13:6a:54:ef:28:59:9e:4c:b6:d4:bd:92:02:
                    06:ea:40:4b:5e:2c:5d:b0:6e:8f:1b:ae:36:15:48:
                    5d:0a:f1:5f:f4:3d:34:2f:b5:b8:15:9e:99:0f:6c:
                    c4:3d:80:f1:e6:b1:d3:af:16:4e:40:13:96:19:bb:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A6:32:4E:10:16:60:FA:49:11:E1:93:C4:68:A2:D8:9A:C4:6F:53
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36372e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3e:c9:73:57:c8:6b:89:66:a6:ad:ec:f0:6a:d6:74:60:43:
         ca:35:12:4d:fc:8a:12:a6:3c:4e:ae:38:e4:d6:1a:58:bf:93:
         e3:f6:3f:87:16:8a:07:69:48:74:b6:c3:1e:4e:95:32:00:93:
         ee:f7:e2:b3:0d:f7:49:99:c4:c2:3a:5c:ba:69:bd:66:66:93:
         4b:95:62:55:68:ab:77:71:80:03:2f:b9:ca:25:e3:c3:2e:00:
         c2:41:c1:7c:64:87:56:5e:fc:8c:83:36:07:25:8b:3b:5b:d4:
         32:fa:d3:6e:a3:41:29:7d:7e:4e:e7:a6:f9:bd:79:be:39:a6:
         5d:14:a5:99:5c:e2:13:3c:62:d6:d4:c8:64:17:68:45:2b:c4:
         bf:c0:af:fd:13:5d:cd:0d:72:1d:61:fc:bf:82:71:97:a4:97:
         7b:45:46:ba:b1:fd:45:de:89:af:bf:54:dc:ca:4f:72:3b:6e:
         ec:bf:9e:c3:85:42:98:57:db:a0:b0:32:7f:c1:b9:50:6f:46:
         ed:0b:36:10:bf:f2:0e:8d:c3:b1:0a:c1:f8:93:3d:0a:9f:2c:
         b0:62:e3:cd:68:fa:8c:0f:e8:01:c2:af:67:ad:bf:1b:32:a7:
         72:a9:10:3d:5b:9e:11:da:4d:70:81:d7:1c:97:69:f5:93:1e:
         19:95:d8:83
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeHs5B3+xqfxt3t2hNLQZnYZ5S8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBENzlGNUQ5NzA0RDAzN0E1RkQzNzg5RjdBODA3QkUw
OUFDOEI3RjAeFw0yNjA4MDMxOTE0NDVaFw0yNzA4MDIxOTE5NDVaMDMxMTAvBgNV
BAMTKEYwQTYzMjRFMTAxNjYwRkE0OTExRTE5M0M0NjhBMkQ4OUFDNDZGNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKWo+4OX9xXwG1a4G5T23rcVxm
WmKXX9+0T2dw/0SOt7M+2nbZEm/utHq6ZJKYMJ+xEaSBarj5Zc2RFJk1zfjgtcI5
/SYS3tAue2vnqRf2tYZR+XondBx8k5AXU2kmDQQDm7AItfDRrfKjNwXEm9Glv1Rh
g6WO+p8mqbef3i0JuJHjFpCC8XQFMab4en+tz8ezwNKJNiLmgOFmUOhodltrpX+X
Z1f6qNkbVgk3OLY/FYPoA1lDarWqWrnL7eb8nhO7YfdkE2pU7yhZnky21L2SAgbq
QEteLF2wbo8brjYVSF0K8V/0PTQvtbgVnpkPbMQ9gPHmsdOvFk5AE5YZu1EnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU8KYyThAWYPpJEeGTxGii2JrEb1MwHwYDVR0j
BBgwFoAU8NefXZcE0Del/TeJ96gHvgmsi38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTIxRkZFMzdDRjBBMEYwOENCRkQyNzJBN0IwMEEzNEY0
OEM5QjQ5Njg4RjdDREE0NUNEODA3Q0E2RDJFODU0LzAvRjBENzlGNUQ5NzA0RDAz
N0E1RkQzNzg5RjdBODA3QkUwOUFDOEI3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEQ3OUY1RDk3MDREMDM3QTVG
RDM3ODlGN0E4MDdCRTA5QUM4QjdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUyMUZGRTM3Q0YwQTBGMDhDQkZEMjcyQTdCMDBBMzRGNDhDOUI0OTY4
OEY3Q0RBNDVDRDgwN0NBNkQyRTg1NC8wLzMyMzAzMDJlMzYzMTJlMzYzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMDMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIPUMwDQYJ
KoZIhvcNAQELBQADggEBACo+yXNXyGuJZqat7PBq1nRgQ8o1Ek38ihKmPE6uOOTW
Gli/k+P2P4cWigdpSHS2wx5OlTIAk+734rMN90mZxMI6XLppvWZmk0uVYlVoq3dx
gAMvucol48MuAMJBwXxkh1Ze/IyDNgcliztb1DL6026jQSl9fk7npvm9eb45pl0U
pZlc4hM8YtbUyGQXaEUrxL/Ar/0TXc0Nch1h/L+CcZekl3tFRrqx/UXeia+/VNzK
T3I7buy/nsOFQphX26CwMn/BuVBvRu0LNhC/8g6Nw7EKwfiTPQqfLLBi481o+owP
6AHCr2etvxsyp3KpED1bnhHaTXCB1xyXafWTHhmV2IM=
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:27:09 2026 by rpki-client