Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37302e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e37302e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          N4C9C/Qo7sgebZ3sNoShGY2btLxa59dwRT7WVuekGJA=
Subject key identifier:   A1:2F:D2:AD:14:5D:54:E9:FD:A0:4F:E8:32:2A:B4:6B:D8:DF:CB:B2
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       0A49ECE71366A744D4E57BEF7DADF54EB0FAE01E
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37302e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:49 +0000
ROA not before:           Mon 03 Aug 2026 19:14:49 +0000
ROA not after:            Mon 02 Aug 2027 19:19:49 +0000
asID:                     15034
IP address blocks:        200.61.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:49:ec:e7:13:66:a7:44:d4:e5:7b:ef:7d:ad:f5:4e:b0:fa:e0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:49 2026 GMT
            Not After : Aug  2 19:19:49 2027 GMT
        Subject: CN=A12FD2AD145D54E9FDA04FE8322AB46BD8DFCBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:a7:0d:63:1b:eb:6e:58:1d:9c:53:41:04:
                    13:1e:74:30:6b:f0:c4:44:6f:a5:1b:0b:fa:48:c3:
                    61:4c:62:37:52:03:07:b4:bd:b6:27:f3:9d:ba:f2:
                    97:34:08:28:d7:03:cb:f7:6d:da:38:e6:6d:bc:84:
                    40:8d:dd:d8:8c:43:43:f1:78:3c:44:99:77:f3:71:
                    ed:d4:ad:48:eb:43:6c:db:89:c9:f6:24:0d:e0:48:
                    80:ce:b7:a9:10:2d:91:ca:53:2c:eb:59:46:15:bf:
                    75:ba:c1:ae:97:ec:d7:86:ea:be:db:f3:1f:1b:80:
                    fe:c1:2d:54:da:3c:a7:72:0c:f1:34:6f:03:89:a8:
                    54:2b:cb:23:12:4f:5f:0a:d2:0c:e9:d7:3f:85:c1:
                    38:dd:cd:1b:04:7a:7b:71:69:33:3a:5a:ed:39:35:
                    38:d2:af:4d:92:9d:76:2c:2c:bf:99:3b:fd:0e:ab:
                    03:e5:b8:23:96:9b:e9:c6:f7:19:fb:7d:dc:b6:5d:
                    cb:8d:7a:c3:79:df:28:d6:08:61:09:dd:fd:a1:f6:
                    d9:5a:df:d7:51:f8:c7:84:26:ad:13:14:dd:a6:10:
                    eb:21:20:ee:22:0f:6a:b2:c4:e1:9c:2d:52:3c:11:
                    b3:90:53:2c:d5:6f:79:9a:d5:42:28:3a:9d:c0:ab:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:D2:AD:14:5D:54:E9:FD:A0:4F:E8:32:2A:B4:6B:D8:DF:CB:B2
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37302e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:2e:90:9f:87:b6:62:88:fa:3e:24:af:ef:4d:c1:a5:a6:
         ba:d7:5d:df:2d:6d:23:34:ca:63:c7:65:65:23:91:2f:98:ad:
         7c:c7:98:ef:57:23:f8:bf:ee:b1:82:a5:54:c0:bf:99:9b:5c:
         e9:29:ca:26:f9:a6:1f:80:c8:06:86:87:92:fc:42:a9:1a:0b:
         22:e0:17:73:7c:23:17:11:85:98:76:1a:b3:65:20:22:3f:fc:
         42:f6:1d:bf:db:e6:ed:b3:7d:70:36:57:a6:1a:f5:88:96:85:
         2a:c7:e1:5e:6b:b6:30:85:ef:47:d8:80:d9:72:97:33:b9:26:
         ff:59:29:90:d8:8d:9e:30:98:2d:4d:51:72:d1:71:78:ee:1b:
         c9:88:d7:4a:15:dd:cc:15:1f:b3:6b:3f:b5:45:aa:e0:ff:19:
         f2:0c:23:e0:09:cb:d8:4d:5d:5e:9f:88:60:d9:b8:f5:d3:8a:
         97:73:94:2c:73:0d:96:7a:66:35:f1:fc:19:ea:fc:a5:f1:8c:
         6b:4a:70:ac:a1:37:90:b6:e9:d3:28:fd:68:52:03:24:08:54:
         90:07:6e:12:41:90:5b:a2:4e:33:81:b1:10:b1:c4:d7:43:35:
         5c:c0:ca:f9:cd:8c:37:30:1c:38:55:e3:25:4f:2a:34:15:a1:
         cb:c2:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:27:54 2026 by rpki-client