Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37362e302f32322d3232203d3e203135303334.roa
File:                     3230302e36312e37362e302f32322d3232203d3e203135303334.roa (raw, json)
Hash identifier:          +77m2RbldpwEkr6CNqSI8qoR9Kw74gSSOJOlBluPhCk=
Subject key identifier:   31:EF:78:51:08:DB:59:DE:05:3F:AB:82:EA:F5:D6:3A:9E:78:4B:66
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       2979143F9541CE67630B94B0A2AD8D74F8BC7F9B
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37362e302f32322d3232203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:43 +0000
ROA not before:           Mon 03 Aug 2026 19:14:43 +0000
ROA not after:            Mon 02 Aug 2027 19:19:43 +0000
asID:                     15034
IP address blocks:        200.61.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:79:14:3f:95:41:ce:67:63:0b:94:b0:a2:ad:8d:74:f8:bc:7f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:43 2026 GMT
            Not After : Aug  2 19:19:43 2027 GMT
        Subject: CN=31EF785108DB59DE053FAB82EAF5D63A9E784B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:4a:42:a4:a8:64:6c:49:2d:be:20:54:7f:
                    b2:48:c0:42:b0:e0:0d:27:df:d2:18:ca:3b:5b:85:
                    8a:24:0d:d8:8f:d2:e9:da:02:73:27:d1:e7:a4:34:
                    7f:19:a7:06:50:0c:64:19:c7:00:f3:f7:5a:0c:6b:
                    10:b9:eb:ce:8d:f6:30:da:84:02:4e:2b:06:a6:62:
                    b1:33:63:8c:21:68:8b:7c:7f:24:46:c3:a6:17:d0:
                    47:1b:ba:82:66:b7:b7:20:26:20:19:de:8e:0e:d5:
                    c5:91:b0:8f:e9:61:49:10:5f:82:bd:5f:3f:01:40:
                    bf:41:cc:5b:57:d4:b8:b1:4f:52:7f:3b:7e:62:ce:
                    30:de:6e:ac:4f:bb:7b:b7:52:27:9d:1c:1c:94:bc:
                    0e:76:a1:a0:c4:55:bb:aa:ee:c2:ec:02:cb:c0:6e:
                    f1:5c:bc:2c:6d:f9:23:0c:18:c0:78:e3:3e:5d:8f:
                    4e:8f:ec:6a:d8:b6:78:90:c1:33:4d:65:84:1d:d9:
                    46:1e:5c:3e:f1:39:28:8d:96:ca:d7:cc:13:b6:9e:
                    18:12:9e:15:2a:a5:d6:83:8a:0d:45:3a:1a:da:85:
                    39:59:3b:5a:b9:84:b4:1d:38:ef:56:4d:67:af:e8:
                    75:e0:57:54:1a:c9:08:67:59:bb:98:65:ca:f2:c8:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:78:51:08:DB:59:DE:05:3F:AB:82:EA:F5:D6:3A:9E:78:4B:66
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37362e302f32322d3232203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:37:6d:c5:43:19:16:61:61:4f:7c:98:0e:7e:c1:f2:f4:aa:
         b0:91:fc:bd:e3:35:65:4a:27:77:32:02:28:95:05:56:77:56:
         07:0b:8f:95:d3:e6:b6:c6:ed:00:c0:ce:79:4d:b7:22:8c:ab:
         46:b9:5a:c2:7e:49:ac:62:73:08:c2:84:60:af:a8:03:ec:fa:
         5a:56:30:8e:a0:65:b7:6d:da:3c:6c:f1:de:42:43:33:0a:ca:
         df:be:c6:77:8d:2e:a1:d1:61:56:c5:d9:ac:06:67:fe:c5:ec:
         60:04:0b:d2:1e:e1:2c:4e:c2:b5:19:14:20:3e:85:a1:27:ff:
         f7:38:37:d0:c0:2a:ba:18:68:00:7a:27:f4:dd:df:49:c6:79:
         72:c7:14:39:23:c5:1b:dd:0e:d0:30:80:3c:52:4b:cc:6a:0e:
         27:c7:78:30:91:f0:1f:b8:d9:61:7d:e8:ac:84:d6:1d:9b:b5:
         c2:9e:ad:1f:1f:31:8a:fc:3f:80:db:12:b0:8b:05:52:9f:76:
         ed:9b:18:d7:03:45:6a:21:d7:24:15:54:09:b2:81:ab:a1:56:
         30:9a:68:dc:70:8c:89:19:36:c1:e2:68:96:b9:c4:ce:d1:7c:
         5e:7e:51:7b:6b:eb:bf:27:8e:47:e2:28:92:ad:7a:b5:61:4d:
         c2:26:b0:2f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKXkUP5VBzmdjC5Swoq2NdPi8f5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBENzlGNUQ5NzA0RDAzN0E1RkQzNzg5RjdBODA3QkUw
OUFDOEI3RjAeFw0yNjA4MDMxOTE0NDNaFw0yNzA4MDIxOTE5NDNaMDMxMTAvBgNV
BAMTKDMxRUY3ODUxMDhEQjU5REUwNTNGQUI4MkVBRjVENjNBOUU3ODRCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wkpCpKhkbEktviBUf7JIwEKw
4A0n39IYyjtbhYokDdiP0unaAnMn0eekNH8ZpwZQDGQZxwDz91oMaxC5686N9jDa
hAJOKwamYrEzY4whaIt8fyRGw6YX0EcbuoJmt7cgJiAZ3o4O1cWRsI/pYUkQX4K9
Xz8BQL9BzFtX1LixT1J/O35izjDebqxPu3u3UiedHByUvA52oaDEVbuq7sLsAsvA
bvFcvCxt+SMMGMB44z5dj06P7GrYtniQwTNNZYQd2UYeXD7xOSiNlsrXzBO2nhgS
nhUqpdaDig1FOhrahTlZO1q5hLQdOO9WTWev6HXgV1QayQhnWbuYZcryyGNnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMe94UQjbWd4FP6uC6vXWOp54S2YwHwYDVR0j
BBgwFoAU8NefXZcE0Del/TeJ96gHvgmsi38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTIxRkZFMzdDRjBBMEYwOENCRkQyNzJBN0IwMEEzNEY0
OEM5QjQ5Njg4RjdDREE0NUNEODA3Q0E2RDJFODU0LzAvRjBENzlGNUQ5NzA0RDAz
N0E1RkQzNzg5RjdBODA3QkUwOUFDOEI3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEQ3OUY1RDk3MDREMDM3QTVG
RDM3ODlGN0E4MDdCRTA5QUM4QjdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUyMUZGRTM3Q0YwQTBGMDhDQkZEMjcyQTdCMDBBMzRGNDhDOUI0OTY4
OEY3Q0RBNDVDRDgwN0NBNkQyRTg1NC8wLzMyMzAzMDJlMzYzMTJlMzczNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzUzMDMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIPUwwDQYJ
KoZIhvcNAQELBQADggEBAI43bcVDGRZhYU98mA5+wfL0qrCR/L3jNWVKJ3cyAiiV
BVZ3VgcLj5XT5rbG7QDAznlNtyKMq0a5WsJ+SaxicwjChGCvqAPs+lpWMI6gZbdt
2jxs8d5CQzMKyt++xneNLqHRYVbF2awGZ/7F7GAEC9Ie4SxOwrUZFCA+haEn//c4
N9DAKroYaAB6J/Td30nGeXLHFDkjxRvdDtAwgDxSS8xqDifHeDCR8B+42WF96KyE
1h2btcKerR8fMYr8P4DbErCLBVKfdu2bGNcDRWoh1yQVVAmygauhVjCaaNxwjIkZ
NsHiaJa5xM7RfF5+UXtr678njkfiKJKterVhTcImsC8=
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:26:54 2026 by rpki-client