Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39372e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e39372e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          3xuZN2Rj0bWFpCXgEzpt3gYUvlaJ4iME8kOyUoMvFJ0=
Subject key identifier:   CC:96:43:72:8E:67:73:75:70:DF:FA:F0:5E:26:0F:C6:1B:4D:4B:B7
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       1DBA56A8C7939115A38AD6D102AC979013CE28F7
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39372e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 18:19:41 +0000
ROA not before:           Mon 03 Aug 2026 18:14:41 +0000
ROA not after:            Mon 02 Aug 2027 18:19:41 +0000
asID:                     15034
IP address blocks:        200.61.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ba:56:a8:c7:93:91:15:a3:8a:d6:d1:02:ac:97:90:13:ce:28:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 18:14:41 2026 GMT
            Not After : Aug  2 18:19:41 2027 GMT
        Subject: CN=CC9643728E67737570DFFAF05E260FC61B4D4BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:3d:32:a7:e5:2c:2f:18:58:b6:c3:d5:72:
                    b2:bf:39:86:79:aa:f5:a6:f7:04:db:c3:ce:ec:a8:
                    85:70:69:b4:40:1c:26:08:46:68:10:25:65:cd:f5:
                    5d:01:ff:7f:62:5f:6d:10:9a:6e:ff:86:97:07:02:
                    a4:be:10:38:de:fd:56:9e:8d:e5:66:04:98:7d:cd:
                    7c:b1:0a:d8:a3:67:a2:86:0b:6a:a5:40:a3:97:74:
                    6d:f7:66:3f:6d:a9:07:74:d6:87:1c:4e:86:0f:49:
                    14:bd:bd:4d:1f:cb:33:39:3c:9b:33:19:b1:a0:e6:
                    2e:3e:58:98:a6:b0:37:e7:33:4f:5a:5f:72:ef:9b:
                    3b:3b:88:a6:1e:f4:06:19:8f:f5:ba:bd:c1:a8:40:
                    5d:3d:ad:ad:d5:e8:cc:80:6a:54:67:29:f7:54:47:
                    f5:2b:b5:e6:7c:c2:71:a1:fc:39:19:c1:b2:e4:fc:
                    48:cd:52:1d:4a:6c:63:28:d9:ec:4d:f6:63:89:61:
                    f7:02:51:f8:7e:c3:ac:8c:b7:cd:5c:21:3a:e9:c0:
                    61:bc:60:7d:6c:61:60:19:08:44:a9:c2:f6:bc:c1:
                    4d:4f:2c:96:08:1e:8c:4a:ba:d8:50:5c:d5:8f:5a:
                    84:f0:21:54:04:e3:64:12:06:d5:ca:d6:28:6a:b1:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:96:43:72:8E:67:73:75:70:DF:FA:F0:5E:26:0F:C6:1B:4D:4B:B7
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39372e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:f4:7d:31:c9:ac:96:02:2e:01:42:99:c4:c6:79:bd:fd:
         d6:90:48:85:de:9c:84:d5:ca:fa:0d:f8:99:6d:de:e2:a8:7b:
         48:57:4a:1b:7d:cd:be:78:4b:bc:43:5c:a5:4b:68:b6:c9:ba:
         07:e8:1a:e8:2a:c8:2b:cd:a5:ac:83:1a:d3:fe:5b:31:5b:25:
         b2:48:b5:c8:95:49:51:8c:d9:e1:6a:89:46:63:45:d6:c3:e6:
         17:0e:a4:1d:c7:95:ce:d4:d6:b2:ec:28:56:00:5a:c9:88:38:
         31:5e:a8:e8:c8:b9:27:19:65:a8:af:58:05:f9:6c:34:dc:95:
         2b:59:57:08:53:5e:ff:cd:7a:94:8a:5f:0a:60:70:7b:fd:23:
         de:e2:15:79:e0:3f:f6:c2:00:40:81:46:87:d5:fe:98:54:18:
         46:b7:20:37:f6:8b:4b:d5:39:b8:06:fb:e9:88:0c:b7:53:e0:
         2b:f3:c5:b1:37:14:5e:8a:47:40:ab:4e:01:a1:9b:ec:5f:67:
         0c:63:b9:81:3a:5b:22:de:c7:59:55:11:81:b2:50:eb:f0:f3:
         94:25:ea:50:2d:fb:4a:c2:97:8a:09:35:6b:b8:ab:29:9f:af:
         20:70:33:76:d9:64:f0:9b:b0:c8:f2:2a:4c:5f:8e:c0:f3:0b:
         3c:92:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:24:13 2026 by rpki-client