Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38342e302f32322d3232203d3e203135303334.roa
File:                     3230302e36312e38342e302f32322d3232203d3e203135303334.roa (raw, json)
Hash identifier:          0+YCo725xX2ejR6q36sSzJvyS069hkkHCuadGGlk3bw=
Subject key identifier:   6E:97:C2:3D:D1:2F:4A:7A:26:4A:3D:0A:CF:3A:4F:FA:BD:04:2C:1B
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       53C914B6DB582278A766314BE0CE567328E86910
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38342e302f32322d3232203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:49 +0000
ROA not before:           Mon 03 Aug 2026 19:14:49 +0000
ROA not after:            Mon 02 Aug 2027 19:19:49 +0000
asID:                     15034
IP address blocks:        200.61.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c9:14:b6:db:58:22:78:a7:66:31:4b:e0:ce:56:73:28:e8:69:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:49 2026 GMT
            Not After : Aug  2 19:19:49 2027 GMT
        Subject: CN=6E97C23DD12F4A7A264A3D0ACF3A4FFABD042C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:28:06:6b:07:7b:06:8c:6d:0d:c4:b5:73:
                    90:1d:0a:c1:23:3f:9e:28:22:84:47:75:df:18:24:
                    ef:8e:d6:59:fe:c4:ed:55:a6:7c:d9:75:b3:af:92:
                    f4:05:81:8a:c6:99:6b:5d:aa:f8:be:f0:0e:93:8c:
                    ec:e4:08:12:49:5f:e9:4b:e3:36:6b:20:f5:44:a6:
                    b0:36:43:42:1d:29:c6:5b:69:44:cd:d1:c9:33:80:
                    cd:e0:62:83:5a:bb:a7:cb:f1:f9:ba:d5:b7:8d:f0:
                    6a:af:4a:3c:6d:76:54:91:b3:c2:c8:1e:90:17:0c:
                    77:4f:c7:20:dd:1c:f3:62:60:53:c7:48:7c:1f:1f:
                    aa:28:c9:77:07:4a:70:4c:23:a5:13:70:88:b5:a8:
                    22:3c:c9:b0:2c:5e:c1:a3:55:71:a0:21:8c:3b:47:
                    87:89:ad:f2:cc:da:a7:5e:60:d6:55:b6:30:32:c3:
                    69:c6:f3:ac:15:09:f4:36:68:18:73:bc:5b:a7:c0:
                    af:d2:e6:05:7b:ce:98:cd:47:56:99:9c:f8:c7:eb:
                    5c:63:1d:02:84:68:1b:c0:6f:c3:69:4c:41:ad:0d:
                    34:ff:11:e6:d7:27:51:b7:34:0e:3f:57:ce:f9:04:
                    f7:d7:00:69:c0:fc:b7:1a:92:30:66:05:c1:e1:93:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:C2:3D:D1:2F:4A:7A:26:4A:3D:0A:CF:3A:4F:FA:BD:04:2C:1B
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38342e302f32322d3232203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:16:14:17:7e:82:f0:37:47:58:ef:82:65:60:e2:f7:36:bb:
         5b:11:7e:d8:6f:c1:5b:91:fb:65:6a:c2:d0:d8:ee:50:a7:06:
         bc:63:5c:f2:49:77:27:3e:37:b9:11:68:64:01:bb:1b:77:16:
         ad:b2:fb:a8:4e:ed:c2:68:50:f4:a8:b7:59:be:16:90:cf:c0:
         67:85:c1:3f:e8:85:e7:ad:f2:fc:62:e6:7b:e5:af:d4:f1:cf:
         57:bb:c9:32:7c:a0:f7:69:51:a4:40:e3:ac:79:a2:99:87:ae:
         e1:42:49:1d:d0:89:d2:b9:46:d3:8a:8b:f6:32:2f:ad:2b:07:
         23:2c:52:3c:bb:0f:be:62:84:a8:88:be:24:14:fc:70:83:3b:
         de:06:7d:ef:91:09:16:8a:f5:b1:85:70:04:85:f9:66:1d:bf:
         96:92:0f:14:14:9c:94:d1:c2:35:bb:a0:5b:1a:14:8c:e8:83:
         52:f7:a5:7a:77:1d:cf:87:eb:2e:a6:62:be:ab:77:3a:fd:00:
         17:34:c7:75:c4:58:7e:86:9c:b5:f1:01:b6:7d:7c:64:66:ca:
         f8:1d:d4:72:9e:88:7e:d3:a7:c5:82:a5:cb:14:57:31:ad:44:
         f6:99:44:50:58:34:45:c4:e7:d3:2d:73:e7:72:f5:f3:6d:5a:
         99:04:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:27:07 2026 by rpki-client