Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38312e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e38312e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          Yq2RFTQWoxGgjE2siGZKHqE2PnsdhoIM0tRxKHEXYio=
Subject key identifier:   31:7E:AF:3A:DA:00:88:E3:7B:12:36:10:8C:00:54:37:01:EC:83:D8
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       236C71691BFDB0CC6E1E459D3728BF8FB418F466
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38312e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:47 +0000
ROA not before:           Mon 03 Aug 2026 19:14:47 +0000
ROA not after:            Mon 02 Aug 2027 19:19:47 +0000
asID:                     15034
IP address blocks:        200.61.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6c:71:69:1b:fd:b0:cc:6e:1e:45:9d:37:28:bf:8f:b4:18:f4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:47 2026 GMT
            Not After : Aug  2 19:19:47 2027 GMT
        Subject: CN=317EAF3ADA0088E37B1236108C00543701EC83D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:a8:e6:7c:d0:ad:98:5d:07:b3:f3:ae:df:
                    aa:a1:84:17:c1:3f:a7:fd:c8:ba:0c:99:a0:ed:57:
                    5c:91:3d:55:3c:4f:3f:f7:ee:96:fd:47:ca:f0:ff:
                    bb:25:be:aa:76:df:78:b1:fe:cd:f3:75:fc:07:b1:
                    90:80:07:63:c8:61:5d:3b:51:53:a4:55:10:8f:1e:
                    38:a1:e6:92:98:5b:af:0a:a5:46:e2:ea:e4:51:77:
                    1b:13:7d:cf:99:71:12:27:14:6b:0b:14:c7:47:de:
                    ee:1b:0c:9b:31:4b:64:7b:d1:7b:b6:e2:44:a5:95:
                    83:09:ce:30:97:87:3e:2e:32:06:19:fa:70:84:84:
                    ca:d5:fa:22:75:b1:1d:d7:48:55:00:58:f7:d9:62:
                    cd:b1:1a:31:27:4f:a1:88:1c:a6:68:70:3a:1c:d0:
                    52:3c:97:2c:df:64:6b:d2:5f:82:3c:93:13:48:22:
                    0e:4c:8e:28:e9:07:1d:b5:64:9a:65:85:9e:3c:ae:
                    c8:bc:62:e9:79:95:7d:4f:b8:93:a7:f4:4a:18:77:
                    14:78:0b:8d:b6:e3:2c:8f:c1:4c:8f:02:b4:88:43:
                    df:aa:27:d1:4b:44:55:4b:c9:c9:50:0c:72:7d:e2:
                    f0:98:ce:2e:74:64:04:48:73:1b:72:d1:c5:65:81:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:AF:3A:DA:00:88:E3:7B:12:36:10:8C:00:54:37:01:EC:83:D8
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38312e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3c:b7:21:af:38:53:b2:b6:be:32:3f:6a:63:54:93:27:ec:
         3e:4f:93:ac:b3:83:21:8a:c7:b1:af:c0:2a:ee:22:48:39:5e:
         8b:ea:b9:f7:fb:5b:4f:94:92:a2:00:aa:fb:d0:78:92:56:41:
         12:76:4a:5a:5e:10:95:d4:3f:0c:2c:1c:76:a9:4f:e9:9d:eb:
         8a:a4:bc:03:d2:62:78:f5:d2:fd:0c:96:be:de:a2:bc:69:5c:
         14:79:fb:ef:43:be:9d:67:5d:e0:66:d2:4c:01:5a:e3:80:b5:
         c5:1a:6f:b1:a2:0b:b2:89:6a:cf:94:19:7c:04:ea:16:aa:e2:
         54:b3:1a:34:8c:79:f8:c7:dc:c3:00:38:86:8d:a9:36:5d:6a:
         51:53:76:a8:7c:01:77:0f:75:da:1c:40:1e:41:84:57:da:4e:
         5f:7e:c4:b9:65:4b:ee:3e:5f:04:4d:37:47:56:51:85:50:49:
         0f:aa:95:d6:23:51:a3:a9:36:0f:e9:ff:86:fb:95:78:00:46:
         61:57:61:52:e8:b3:6a:94:55:0e:5d:eb:ae:ef:ac:2c:93:0a:
         eb:07:06:b1:c9:53:82:4d:61:53:2b:ad:66:a3:bc:3e:99:42:
         d6:d4:34:a8:9b:b5:09:fd:32:b3:cd:37:e4:e9:41:98:ef:84:
         46:c3:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:25:40 2026 by rpki-client