Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36392e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e36392e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          BrtnxMEOCu0lltpPadg6HoI06XdN0fnvgHx52lyUYLM=
Subject key identifier:   03:05:CD:68:03:71:F4:0C:8F:23:B9:A3:A2:67:00:FA:5F:9A:01:50
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       4FE56F04A410D402D148735523DB2BC673DC531D
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36392e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:48 +0000
ROA not before:           Mon 03 Aug 2026 19:14:48 +0000
ROA not after:            Mon 02 Aug 2027 19:19:48 +0000
asID:                     15034
IP address blocks:        200.61.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e5:6f:04:a4:10:d4:02:d1:48:73:55:23:db:2b:c6:73:dc:53:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:48 2026 GMT
            Not After : Aug  2 19:19:48 2027 GMT
        Subject: CN=0305CD680371F40C8F23B9A3A26700FA5F9A0150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:67:7b:05:ae:d4:95:7d:f0:e7:7d:7a:f1:
                    9b:a3:30:12:ad:63:dc:a0:63:07:57:72:0a:39:c9:
                    52:9d:63:00:cd:c6:ae:c0:d0:3d:f9:bc:67:d3:de:
                    fa:65:bf:bb:70:70:b3:4f:31:8e:2e:c4:85:30:0f:
                    35:a0:03:7f:32:7c:ab:4a:67:77:27:9f:86:4e:41:
                    44:7a:b7:2e:57:35:34:20:ac:6b:d7:bf:06:af:f4:
                    98:ed:3e:e9:62:58:af:bb:b2:b1:98:0a:17:62:e8:
                    aa:27:17:b4:5a:50:bd:f9:7a:b2:82:53:66:2e:00:
                    07:61:24:2a:65:0a:2d:61:39:94:db:d0:b6:a0:d8:
                    6c:56:e4:f7:42:ab:a3:7c:be:4a:1d:80:0d:05:1f:
                    31:2c:cb:2c:c4:76:a0:e0:99:ae:61:ef:60:1e:58:
                    bf:7f:d3:1c:e0:da:47:97:f8:79:59:3c:1e:15:df:
                    33:5b:19:6f:07:c0:dd:cf:c3:6d:32:97:d4:ae:ad:
                    30:4b:b5:09:ce:e0:f1:f7:bb:cb:1e:bb:94:63:b8:
                    e9:3b:f2:b2:b6:65:5b:44:8c:aa:78:0d:5a:6b:ee:
                    5d:19:5a:31:31:45:50:1e:92:de:1d:7f:bd:8a:c0:
                    21:53:f2:ec:b3:4c:02:d3:0e:3e:96:11:8d:2c:49:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:CD:68:03:71:F4:0C:8F:23:B9:A3:A2:67:00:FA:5F:9A:01:50
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e36392e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:72:a2:9f:82:6f:b0:68:c8:ef:cc:96:1e:c0:07:a3:a2:75:
         9f:2b:36:4b:fd:d5:a7:41:7d:57:26:cb:59:96:4c:5e:34:16:
         b5:38:3a:ef:cc:16:83:91:cc:a0:7a:38:8f:09:44:d1:02:f2:
         78:73:ca:05:96:aa:72:b1:bd:fc:89:b6:3e:ef:be:f7:49:e7:
         31:79:79:fc:1a:42:c6:68:39:2d:c3:4a:42:c3:df:32:3f:31:
         20:9a:bd:f2:3e:2b:27:b6:74:a3:52:84:60:3b:de:2f:74:97:
         84:6d:52:6b:80:b9:c3:73:22:e3:9d:0f:23:c8:c3:63:cb:5b:
         a7:16:e0:0b:50:97:0c:79:b9:ba:6f:54:dc:e9:39:34:62:3a:
         e7:82:eb:c5:cb:35:d6:1e:f7:9f:2f:2b:6e:d5:24:1c:37:e5:
         9a:ad:db:0b:a0:68:ec:94:9e:e4:9b:8f:73:a4:f9:65:1a:f6:
         40:73:70:8a:ff:67:b1:a6:fc:15:bc:96:29:fc:3a:95:ee:47:
         27:a7:ba:7c:4b:1d:e5:23:e1:49:5c:b3:3d:6e:9b:db:fe:8b:
         3d:50:cb:50:b0:e0:6c:ea:77:52:09:db:88:dc:61:8d:1f:ae:
         8f:a1:33:82:b8:77:2b:bd:1a:5f:5a:ac:43:dd:6e:9a:ab:d2:
         36:dd:0f:71
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUT+VvBKQQ1ALRSHNVI9srxnPcUx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBENzlGNUQ5NzA0RDAzN0E1RkQzNzg5RjdBODA3QkUw
OUFDOEI3RjAeFw0yNjA4MDMxOTE0NDhaFw0yNzA4MDIxOTE5NDhaMDMxMTAvBgNV
BAMTKDAzMDVDRDY4MDM3MUY0MEM4RjIzQjlBM0EyNjcwMEZBNUY5QTAxNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkGd7Ba7UlX3w53168ZujMBKt
Y9ygYwdXcgo5yVKdYwDNxq7A0D35vGfT3vplv7twcLNPMY4uxIUwDzWgA38yfKtK
Z3cnn4ZOQUR6ty5XNTQgrGvXvwav9JjtPuliWK+7srGYChdi6KonF7RaUL35erKC
U2YuAAdhJCplCi1hOZTb0Lag2GxW5PdCq6N8vkodgA0FHzEsyyzEdqDgma5h72Ae
WL9/0xzg2keX+HlZPB4V3zNbGW8HwN3Pw20yl9SurTBLtQnO4PH3u8seu5RjuOk7
8rK2ZVtEjKp4DVpr7l0ZWjExRVAekt4df72KwCFT8uyzTALTDj6WEY0sSanxAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUAwXNaANx9AyPI7mjomcA+l+aAVAwHwYDVR0j
BBgwFoAU8NefXZcE0Del/TeJ96gHvgmsi38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTIxRkZFMzdDRjBBMEYwOENCRkQyNzJBN0IwMEEzNEY0
OEM5QjQ5Njg4RjdDREE0NUNEODA3Q0E2RDJFODU0LzAvRjBENzlGNUQ5NzA0RDAz
N0E1RkQzNzg5RjdBODA3QkUwOUFDOEI3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEQ3OUY1RDk3MDREMDM3QTVG
RDM3ODlGN0E4MDdCRTA5QUM4QjdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUyMUZGRTM3Q0YwQTBGMDhDQkZEMjcyQTdCMDBBMzRGNDhDOUI0OTY4
OEY3Q0RBNDVDRDgwN0NBNkQyRTg1NC8wLzMyMzAzMDJlMzYzMTJlMzYzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMDMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIPUUwDQYJ
KoZIhvcNAQELBQADggEBAJ9yop+Cb7BoyO/Mlh7AB6OidZ8rNkv91adBfVcmy1mW
TF40FrU4Ou/MFoORzKB6OI8JRNEC8nhzygWWqnKxvfyJtj7vvvdJ5zF5efwaQsZo
OS3DSkLD3zI/MSCavfI+Kye2dKNShGA73i90l4RtUmuAucNzIuOdDyPIw2PLW6cW
4AtQlwx5ubpvVNzpOTRiOueC68XLNdYe958vK27VJBw35Zqt2wugaOyUnuSbj3Ok
+WUa9kBzcIr/Z7Gm/BW8lin8OpXuRyenunxLHeUj4Ulcsz1um9v+iz1Qy1Cw4Gzq
d1IJ24jcYY0fro+hM4K4dyu9Gl9arEPdbpqr0jbdD3E=
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:25:12 2026 by rpki-client