Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39382e302f32332d3233203d3e203135303334.roa
File:                     3230302e36312e39382e302f32332d3233203d3e203135303334.roa (raw, json)
Hash identifier:          X5sduPVewoWCbencepNlONqIb3NmbgS6V1sVH6SHdDc=
Subject key identifier:   6E:BA:09:25:C0:98:9D:2D:54:91:8B:32:F9:D6:0C:E4:A8:00:9D:74
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       7D8D3F75968C7C2DA908A40F1E04EAFD281C5225
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39382e302f32332d3233203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 19:19:43 +0000
ROA not before:           Mon 03 Aug 2026 19:14:43 +0000
ROA not after:            Mon 02 Aug 2027 19:19:43 +0000
asID:                     15034
IP address blocks:        200.61.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8d:3f:75:96:8c:7c:2d:a9:08:a4:0f:1e:04:ea:fd:28:1c:52:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 19:14:43 2026 GMT
            Not After : Aug  2 19:19:43 2027 GMT
        Subject: CN=6EBA0925C0989D2D54918B32F9D60CE4A8009D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:ad:c4:5a:be:38:96:dd:b9:f6:0d:2e:b8:
                    7f:c8:13:85:ef:39:55:ef:2f:0b:e5:45:99:35:58:
                    13:03:3e:cf:42:13:57:3b:c4:a1:da:5b:ef:2c:dd:
                    4b:33:07:91:cc:13:d2:63:c0:c4:2a:93:56:27:49:
                    a7:d4:44:a1:4f:22:74:19:00:94:fe:1c:7a:d0:12:
                    6e:dc:7a:57:43:2e:ae:d1:df:49:1e:55:a1:af:f6:
                    bb:ac:95:f6:70:c1:25:80:29:d5:e8:e3:b3:f8:74:
                    10:0a:b9:1f:04:8a:9a:ce:97:01:b7:a9:5d:51:f6:
                    d1:83:e0:9d:ac:f6:2c:75:96:1f:35:2f:2e:9f:bf:
                    74:63:e0:a5:f5:9f:1c:80:ef:ad:53:6c:2c:21:8d:
                    08:4c:70:8c:e9:2c:2a:77:ab:14:de:32:29:c2:83:
                    1a:72:14:39:82:14:1d:30:9f:1f:70:53:60:21:5a:
                    14:27:02:08:4d:61:21:7b:b7:f9:a0:cd:0f:79:5b:
                    37:05:ff:6e:2c:5b:36:f7:b2:61:f9:ac:4d:5a:8c:
                    27:6e:2e:19:08:0f:53:b3:72:76:49:60:72:ad:3f:
                    c8:0d:3f:f3:82:27:4c:a8:f1:d0:70:78:7f:41:e7:
                    99:61:60:c9:ba:87:78:03:2d:9a:df:f4:de:f5:2c:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:09:25:C0:98:9D:2D:54:91:8B:32:F9:D6:0C:E4:A8:00:9D:74
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39382e302f32332d3233203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:ce:d6:42:b0:b7:0f:13:d8:85:ea:34:eb:ed:4e:a8:bc:
         6a:a4:95:36:c2:fd:76:cb:80:0d:40:84:fa:9d:a8:43:ab:a0:
         04:1a:3b:a9:d7:d5:c3:ea:a4:5a:15:d6:a8:8f:c5:8e:36:22:
         e8:f4:9a:00:a3:bb:dd:a3:12:9d:2e:9f:a1:46:91:ca:fb:ea:
         2f:b7:0f:ea:3e:a0:1a:45:3f:27:08:fb:65:71:25:a2:74:57:
         51:8b:84:6b:1f:3d:fe:75:00:44:5c:9b:72:48:97:7f:2b:64:
         fd:b8:ca:b3:19:cc:b1:cd:5e:77:2c:9c:83:92:d5:42:c6:6f:
         90:2f:82:fe:a8:db:07:d6:c0:d7:a5:26:64:54:97:ac:27:fc:
         b0:7b:e1:7d:a7:51:b2:63:e2:38:fa:c5:c1:0c:67:8a:01:e5:
         b2:d5:60:96:6c:2d:6e:b4:36:aa:ae:78:b9:e4:e0:5a:a6:ba:
         91:88:cb:26:92:da:9b:b1:e2:2b:72:c4:ef:83:31:e9:78:3b:
         70:bb:98:dc:93:13:eb:34:80:bd:51:d9:1f:5f:45:06:44:94:
         a7:ba:ea:21:d3:88:2a:41:71:6c:8d:9b:3f:2a:62:c7:b0:fe:
         21:5a:f9:04:66:a5:2d:ff:d1:c7:70:92:d8:2e:a0:0d:36:9b:
         dd:42:fc:99
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUfY0/dZaMfC2pCKQPHgTq/SgcUiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBENzlGNUQ5NzA0RDAzN0E1RkQzNzg5RjdBODA3QkUw
OUFDOEI3RjAeFw0yNjA4MDMxOTE0NDNaFw0yNzA4MDIxOTE5NDNaMDMxMTAvBgNV
BAMTKDZFQkEwOTI1QzA5ODlEMkQ1NDkxOEIzMkY5RDYwQ0U0QTgwMDlENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFa3EWr44lt259g0uuH/IE4Xv
OVXvLwvlRZk1WBMDPs9CE1c7xKHaW+8s3UszB5HME9JjwMQqk1YnSafURKFPInQZ
AJT+HHrQEm7celdDLq7R30keVaGv9ruslfZwwSWAKdXo47P4dBAKuR8EiprOlwG3
qV1R9tGD4J2s9ix1lh81Ly6fv3Rj4KX1nxyA761TbCwhjQhMcIzpLCp3qxTeMinC
gxpyFDmCFB0wnx9wU2AhWhQnAghNYSF7t/mgzQ95WzcF/24sWzb3smH5rE1ajCdu
LhkID1OzcnZJYHKtP8gNP/OCJ0yo8dBweH9B55lhYMm6h3gDLZrf9N71LOipAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUbroJJcCYnS1UkYsy+dYM5KgAnXQwHwYDVR0j
BBgwFoAU8NefXZcE0Del/TeJ96gHvgmsi38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTIxRkZFMzdDRjBBMEYwOENCRkQyNzJBN0IwMEEzNEY0
OEM5QjQ5Njg4RjdDREE0NUNEODA3Q0E2RDJFODU0LzAvRjBENzlGNUQ5NzA0RDAz
N0E1RkQzNzg5RjdBODA3QkUwOUFDOEI3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEQ3OUY1RDk3MDREMDM3QTVG
RDM3ODlGN0E4MDdCRTA5QUM4QjdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUyMUZGRTM3Q0YwQTBGMDhDQkZEMjcyQTdCMDBBMzRGNDhDOUI0OTY4
OEY3Q0RBNDVDRDgwN0NBNkQyRTg1NC8wLzMyMzAzMDJlMzYzMTJlMzkzODJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzUzMDMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIPWIwDQYJ
KoZIhvcNAQELBQADggEBADnRztZCsLcPE9iF6jTr7U6ovGqklTbC/XbLgA1AhPqd
qEOroAQaO6nX1cPqpFoV1qiPxY42Iuj0mgCju92jEp0un6FGkcr76i+3D+o+oBpF
PycI+2VxJaJ0V1GLhGsfPf51AERcm3JIl38rZP24yrMZzLHNXncsnIOS1ULGb5Av
gv6o2wfWwNelJmRUl6wn/LB74X2nUbJj4jj6xcEMZ4oB5bLVYJZsLW60NqqueLnk
4FqmupGIyyaS2pux4ityxO+DMel4O3C7mNyTE+s0gL1R2R9fRQZElKe66iHTiCpB
cWyNmz8qYsew/iFa+QRmpS3/0cdwktguoA02m91C/Jk=
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:35:29 2026 by rpki-client