Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e38312e39322e302f32332d3233203d3e203135303334.roa
File:                     3230302e38312e39322e302f32332d3233203d3e203135303334.roa (raw, json)
Hash identifier:          IFXpiaTc1qP96wl+Af46acoby6717l1aUf/hADZ/lCQ=
Subject key identifier:   BA:49:CC:CA:DD:7C:76:0D:28:F7:75:D8:8F:D6:17:B0:99:8B:43:CD
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       5589CE6D5F9BDD12798000B6108266A2C67967ED
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e38312e39322e302f32332d3233203d3e203135303334.roa
Signing time:             Mon 01 Sep 2025 18:15:00 +0000
ROA not before:           Mon 01 Sep 2025 18:10:00 +0000
ROA not after:            Mon 31 Aug 2026 18:15:00 +0000
asID:                     15034
IP address blocks:        200.81.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:89:ce:6d:5f:9b:dd:12:79:80:00:b6:10:82:66:a2:c6:79:67:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Sep  1 18:10:00 2025 GMT
            Not After : Aug 31 18:15:00 2026 GMT
        Subject: CN=BA49CCCADD7C760D28F775D88FD617B0998B43CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:f6:a0:12:8c:fc:59:32:86:ba:d3:75:33:
                    ef:8a:66:72:c4:21:83:a6:9a:7f:d4:b9:9a:9f:f5:
                    e7:2e:3f:52:ba:11:a9:f0:ee:78:ff:f9:ed:21:45:
                    26:0a:e7:7c:53:c5:17:2f:cc:15:e9:5c:09:04:4c:
                    0c:98:a0:f0:38:77:f1:a5:26:0e:c1:33:15:c4:e4:
                    6a:9d:39:a8:f1:1f:c0:08:b4:1b:ce:26:83:8d:18:
                    23:a5:80:88:d8:6c:cc:ba:41:2d:94:49:0f:ab:5b:
                    6e:b1:4e:11:94:40:fc:e3:46:2f:da:4b:2b:ef:fc:
                    74:b9:1d:22:a2:a4:dc:95:b7:59:46:47:0d:1a:0b:
                    66:a4:77:98:d0:63:d9:a7:11:3f:dc:6d:db:f1:f9:
                    c2:98:6f:eb:0a:10:2f:39:7b:9c:65:50:8d:66:fd:
                    32:cb:07:69:83:b9:7b:bf:ef:38:e2:76:f3:f6:e9:
                    7f:b2:78:8a:84:d1:24:0e:f7:9b:d5:83:98:19:3f:
                    79:a1:43:4f:e5:40:1e:9c:f6:e6:1b:dd:b1:69:82:
                    6f:16:12:43:03:dc:9c:ca:6d:4a:61:7a:e4:a8:26:
                    ac:fd:a9:f4:d8:a2:3e:74:2c:2b:4c:c7:2f:1c:d2:
                    be:2a:4b:8b:f8:b4:8c:d0:ad:2e:bb:42:d3:8c:1e:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:CC:CA:DD:7C:76:0D:28:F7:75:D8:8F:D6:17:B0:99:8B:43:CD
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e38312e39322e302f32332d3233203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:13:c6:33:57:f6:c4:c4:83:ae:9c:d3:13:13:8e:7f:68:bc:
         dc:f1:8b:06:68:f2:03:3c:40:6e:02:70:e0:8b:42:26:1d:7a:
         06:01:21:51:38:05:9e:06:ce:67:42:cb:75:48:a2:99:3f:a7:
         85:92:4d:e2:60:cf:94:14:dc:3c:fd:64:72:91:c3:0a:c5:49:
         d8:d1:54:a8:87:b8:54:e9:4a:a9:0c:85:94:c9:98:e9:1f:f0:
         ce:8e:22:e4:2b:3a:c3:ef:20:08:38:e9:ce:ad:dc:84:5d:67:
         dc:e1:82:78:70:de:31:7c:99:13:62:69:63:82:0b:27:f3:8c:
         bc:af:ad:6b:f7:27:c9:62:4c:d0:fe:a6:a9:13:9b:4f:29:e5:
         c5:9c:7b:7c:0b:77:4e:7e:fb:5b:53:59:f0:83:10:c9:7c:b9:
         38:1b:0b:49:df:d9:10:c0:1c:72:ed:3a:98:d3:90:0b:3b:5f:
         b8:eb:9e:5a:70:1c:f8:6f:6e:f2:02:a9:b2:dd:a6:f4:52:ed:
         8e:bb:a7:9d:d2:98:fe:fe:5d:70:ce:f1:c6:a4:6f:75:2a:82:
         52:81:6a:3d:92:79:c4:36:92:9b:73:a8:74:db:36:f8:d5:d7:
         9a:a0:8c:40:22:59:b3:2f:d4:36:26:02:9b:5f:13:86:97:c5:
         01:4d:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:07:05 2025 by rpki-client