Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38322e302f32332d3233203d3e203135303334.roa
File:                     3230302e36312e38322e302f32332d3233203d3e203135303334.roa (raw, json)
Hash identifier:          4yxBibqvgpjq+2vYptUdtIJHDINYHPxWF6XLW3MFgwA=
Subject key identifier:   F3:F7:89:E2:77:F9:FB:3C:36:DF:AC:D0:0F:EF:5B:0E:32:CC:BC:AC
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       3BD12CC7063F3F108FB6FC172290818B90705807
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38322e302f32332d3233203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:46 +0000
ROA not before:           Mon 03 Aug 2026 19:14:46 +0000
ROA not after:            Mon 02 Aug 2027 19:19:46 +0000
asID:                     15034
IP address blocks:        200.61.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d1:2c:c7:06:3f:3f:10:8f:b6:fc:17:22:90:81:8b:90:70:58:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:46 2026 GMT
            Not After : Aug  2 19:19:46 2027 GMT
        Subject: CN=F3F789E277F9FB3C36DFACD00FEF5B0E32CCBCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:97:a4:c6:7a:dd:a5:0b:70:c8:16:5c:e0:
                    ef:ce:41:f1:12:d2:0e:00:c8:92:d9:9d:ee:92:da:
                    b4:e8:4f:18:63:a6:59:b0:3f:33:a3:46:ba:2b:8c:
                    c7:82:86:fd:61:9d:26:34:58:1c:6e:34:c0:6a:a1:
                    c4:84:b7:19:e0:99:e1:e7:ee:ed:dd:a2:33:29:96:
                    d1:1b:04:61:bf:2d:29:c4:42:1d:0d:50:68:4e:17:
                    b0:f0:53:c9:84:a2:57:8b:89:d2:25:a9:9a:1b:27:
                    85:5b:19:0b:2e:69:72:cb:90:24:c6:2e:01:61:ff:
                    81:34:04:db:fc:74:c7:09:2e:a2:a6:d9:cb:72:35:
                    b3:9b:76:79:bb:42:26:00:9b:fd:28:0c:05:24:98:
                    76:da:7a:cf:bd:c4:d8:a1:a3:49:0f:a7:f8:f5:4b:
                    18:1e:49:0a:9d:29:ab:14:42:2a:3e:50:23:4c:09:
                    ac:33:b5:44:b0:4e:cb:24:b6:bd:15:9f:a4:b0:54:
                    8e:b4:7f:f5:71:2f:4f:82:86:53:78:89:01:49:a0:
                    80:c5:f1:7a:f9:21:0a:b1:8c:a3:96:72:8e:5f:15:
                    41:f7:ab:61:44:01:3d:42:ec:40:13:1d:33:1b:3b:
                    fe:2d:58:5f:07:89:2e:fa:ed:67:e9:53:89:9a:1e:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:89:E2:77:F9:FB:3C:36:DF:AC:D0:0F:EF:5B:0E:32:CC:BC:AC
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38322e302f32332d3233203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:46:de:ac:cf:61:8f:c9:93:29:2d:3a:3f:0f:45:ae:a9:7e:
         c1:0e:4a:45:0b:4a:05:c2:b7:1f:06:1c:4f:38:6a:b8:57:4d:
         57:50:ae:8d:0a:c7:27:f1:14:c3:64:85:4b:ae:75:5a:04:a4:
         01:bf:2d:f2:5c:58:5c:43:d4:25:de:3c:fd:71:69:01:ff:56:
         e1:4a:a6:62:06:41:d0:40:fe:29:ac:f2:81:b8:cf:39:c5:09:
         8d:94:9a:06:93:8a:fc:d1:2e:0f:77:5a:16:7a:66:e4:db:2d:
         da:fb:5d:c2:6b:74:27:c9:9d:96:46:7f:38:fd:62:51:21:3c:
         78:c1:4b:c2:ef:92:d9:e3:8b:70:db:14:30:b3:41:22:50:c1:
         d9:c0:9e:5b:9b:5c:c7:87:b6:c9:ac:f6:a1:01:dd:7e:bf:69:
         70:4d:f9:8b:51:d5:1b:ec:d2:59:31:c4:5f:c5:5d:fa:0c:f8:
         6d:aa:cf:61:be:d6:d4:8b:47:d4:d1:9a:57:b6:4a:0f:fc:5b:
         99:82:82:02:5d:56:dd:69:20:79:c5:a1:9a:01:f7:cb:51:ba:
         e0:e8:89:52:51:6b:25:bc:8c:9a:6c:3b:d9:9b:d9:a4:67:3d:
         b0:1e:7f:f2:ac:53:4f:d3:56:de:d8:f3:df:56:a1:24:fb:0b:
         cd:12:f2:3d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUO9EsxwY/PxCPtvwXIpCBi5BwWAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBENzlGNUQ5NzA0RDAzN0E1RkQzNzg5RjdBODA3QkUw
OUFDOEI3RjAeFw0yNjA4MDMxOTE0NDZaFw0yNzA4MDIxOTE5NDZaMDMxMTAvBgNV
BAMTKEYzRjc4OUUyNzdGOUZCM0MzNkRGQUNEMDBGRUY1QjBFMzJDQ0JDQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5j5ekxnrdpQtwyBZc4O/OQfES
0g4AyJLZne6S2rToTxhjplmwPzOjRrorjMeChv1hnSY0WBxuNMBqocSEtxngmeHn
7u3dojMpltEbBGG/LSnEQh0NUGhOF7DwU8mEoleLidIlqZobJ4VbGQsuaXLLkCTG
LgFh/4E0BNv8dMcJLqKm2ctyNbObdnm7QiYAm/0oDAUkmHbaes+9xNiho0kPp/j1
SxgeSQqdKasUQio+UCNMCawztUSwTssktr0Vn6SwVI60f/VxL0+ChlN4iQFJoIDF
8Xr5IQqxjKOWco5fFUH3q2FEAT1C7EATHTMbO/4tWF8HiS767WfpU4maHnF5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU8/eJ4nf5+zw236zQD+9bDjLMvKwwHwYDVR0j
BBgwFoAU8NefXZcE0Del/TeJ96gHvgmsi38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTIxRkZFMzdDRjBBMEYwOENCRkQyNzJBN0IwMEEzNEY0
OEM5QjQ5Njg4RjdDREE0NUNEODA3Q0E2RDJFODU0LzAvRjBENzlGNUQ5NzA0RDAz
N0E1RkQzNzg5RjdBODA3QkUwOUFDOEI3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEQ3OUY1RDk3MDREMDM3QTVG
RDM3ODlGN0E4MDdCRTA5QUM4QjdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUyMUZGRTM3Q0YwQTBGMDhDQkZEMjcyQTdCMDBBMzRGNDhDOUI0OTY4
OEY3Q0RBNDVDRDgwN0NBNkQyRTg1NC8wLzMyMzAzMDJlMzYzMTJlMzgzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzUzMDMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIPVIwDQYJ
KoZIhvcNAQELBQADggEBADdG3qzPYY/JkyktOj8PRa6pfsEOSkULSgXCtx8GHE84
arhXTVdQro0KxyfxFMNkhUuudVoEpAG/LfJcWFxD1CXePP1xaQH/VuFKpmIGQdBA
/ims8oG4zznFCY2UmgaTivzRLg93WhZ6ZuTbLdr7XcJrdCfJnZZGfzj9YlEhPHjB
S8Lvktnji3DbFDCzQSJQwdnAnlubXMeHtsms9qEB3X6/aXBN+YtR1Rvs0lkxxF/F
XfoM+G2qz2G+1tSLR9TRmle2Sg/8W5mCggJdVt1pIHnFoZoB98tRuuDoiVJRayW8
jJpsO9mb2aRnPbAef/KsU0/TVt7Y899WoST7C80S8j0=
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:26:31 2026 by rpki-client