Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37322e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e37322e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          /m47SNb+Z/EG29qH7xNDAL2GHeVRErp/BxgVauHzRJQ=
Subject key identifier:   85:40:E0:FD:5F:CA:BA:FA:BF:01:B7:F5:01:80:15:C3:94:EE:AE:FF
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       37EE0B7A26C77ADD2684BE39C2E56F29818CAABA
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37322e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:43 +0000
ROA not before:           Mon 03 Aug 2026 19:14:43 +0000
ROA not after:            Mon 02 Aug 2027 19:19:43 +0000
asID:                     15034
IP address blocks:        200.61.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ee:0b:7a:26:c7:7a:dd:26:84:be:39:c2:e5:6f:29:81:8c:aa:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:43 2026 GMT
            Not After : Aug  2 19:19:43 2027 GMT
        Subject: CN=8540E0FD5FCABAFABF01B7F5018015C394EEAEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:88:61:19:4a:a5:72:8a:f0:b0:7f:9b:2b:
                    3b:e9:f6:82:51:90:9a:6b:87:48:f1:74:59:4b:e9:
                    d0:cb:5a:d6:54:39:50:19:f1:ff:7f:04:e5:75:28:
                    85:99:31:a8:b8:6b:62:96:89:eb:08:17:df:94:86:
                    04:64:a5:f0:50:4f:87:2b:24:9b:41:c5:8d:c9:c3:
                    42:94:64:e7:30:63:a5:33:4c:ec:f5:98:fe:8b:01:
                    30:e8:33:32:81:3e:a8:64:c3:8e:0d:3e:6a:ba:f9:
                    c9:e2:66:5e:ee:ed:1b:f2:86:cb:d4:0b:2f:ee:48:
                    7b:60:0f:64:49:de:a3:da:53:93:f7:96:44:2f:29:
                    f1:56:64:ff:f0:50:d6:b0:3c:c6:98:8f:f8:b5:f5:
                    2a:a4:4c:3e:8a:87:88:95:35:73:6e:2f:c6:e8:e3:
                    39:db:48:88:4b:99:6f:ed:e8:0d:6f:05:c7:11:0c:
                    24:18:f2:85:7d:84:ae:ba:39:9d:fd:79:4c:a5:8f:
                    6e:fb:b4:0e:f5:0d:7b:1e:37:3c:06:61:14:67:0c:
                    bb:bb:d6:5a:51:1b:a9:be:ae:52:e4:e5:c1:d3:2c:
                    01:3f:25:1b:93:ef:b8:a8:86:d4:31:20:c3:cf:69:
                    b5:cb:a6:b8:a5:2a:52:5b:48:d7:4a:c1:60:1e:1c:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:40:E0:FD:5F:CA:BA:FA:BF:01:B7:F5:01:80:15:C3:94:EE:AE:FF
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37322e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6c:8e:e6:55:49:c7:e2:00:7f:54:e2:20:ee:f3:e8:50:0e:
         a1:43:81:6b:f8:55:fa:b4:6f:fd:13:00:cb:ca:e8:c9:db:95:
         3e:0a:89:5c:27:d2:49:f0:ef:33:77:0e:9d:48:3a:61:3a:d9:
         01:c3:1f:c0:73:33:ee:30:7c:5d:b0:cc:15:df:d0:a9:d9:e8:
         ca:12:97:81:16:d6:a1:8d:91:3d:30:da:e4:19:2a:c6:00:ff:
         02:40:ee:a1:2e:2f:db:be:6e:77:3e:5f:c5:0f:69:9e:fe:40:
         5c:0a:22:10:42:55:9f:fa:2c:00:26:6e:49:c3:1a:11:e4:a6:
         25:1b:67:ac:04:af:0c:99:9f:05:c5:20:a5:2d:69:f5:67:8e:
         9d:0b:bc:18:9c:61:94:e1:e8:b3:42:c3:27:8e:d8:af:2a:9a:
         ad:c2:28:68:09:df:79:86:61:f1:23:75:80:62:32:d5:7c:6d:
         24:39:a8:af:3d:97:63:13:13:6d:6a:bf:70:a4:f7:bd:ae:96:
         2d:03:2c:40:78:1e:58:ba:ea:33:5f:8d:2e:38:41:91:ff:f8:
         df:17:a9:3b:70:e9:71:7a:79:53:38:7a:06:e0:ae:96:4f:be:
         17:77:60:28:5f:d3:63:1d:4b:ff:ee:32:e4:a4:f9:64:17:64:
         5b:40:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:31:03 2026 by rpki-client