Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e38312e39362e302f32302d3230203d3e203135303334.roa
File:                     3230302e38312e39362e302f32302d3230203d3e203135303334.roa (raw, json)
Hash identifier:          mdkm9xR24oCcxb/Kl/QRmSWLV7qn3hwzSQWek31SLGQ=
Subject key identifier:   E0:52:D2:81:D6:71:D5:7E:86:65:E3:35:A3:A9:01:3E:52:6F:21:70
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       46BC7F40C0C16DF7DE7AABA1AFA93E8D317C1EE4
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e38312e39362e302f32302d3230203d3e203135303334.roa
Signing time:             Mon 03 Aug 2026 18:19:42 +0000
ROA not before:           Mon 03 Aug 2026 18:14:42 +0000
ROA not after:            Mon 02 Aug 2027 18:19:42 +0000
asID:                     15034
IP address blocks:        200.81.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bc:7f:40:c0:c1:6d:f7:de:7a:ab:a1:af:a9:3e:8d:31:7c:1e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Aug  3 18:14:42 2026 GMT
            Not After : Aug  2 18:19:42 2027 GMT
        Subject: CN=E052D281D671D57E8665E335A3A9013E526F2170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:1a:b1:90:de:18:1b:91:84:1f:cd:6f:8e:
                    13:34:a6:6f:c7:40:79:f4:50:46:21:d6:85:73:67:
                    5b:bd:a2:ad:bd:70:50:27:ca:cd:dc:d1:5f:4c:f4:
                    07:31:be:02:54:34:6b:c6:1c:4c:29:3d:b6:29:cc:
                    05:5d:0f:79:af:66:63:3c:38:e8:cd:c6:35:e2:19:
                    d4:26:b0:47:5d:78:95:04:be:97:9d:a5:37:e3:e8:
                    63:10:ee:a8:09:e0:74:12:07:5c:de:dd:30:92:30:
                    f7:b5:9e:04:56:25:d4:97:8e:76:d7:63:ed:72:88:
                    40:3c:09:94:b3:e8:12:f1:7d:0f:18:35:ed:e3:38:
                    df:3d:f6:0c:53:db:8d:46:d5:4d:ee:31:8d:8b:1e:
                    be:e8:e5:a6:03:9d:ad:61:60:25:33:2c:67:46:be:
                    78:cb:38:9c:20:78:d6:8d:a1:51:62:f5:04:80:7b:
                    96:ff:d5:fc:61:1f:e4:22:7a:55:6e:69:e6:bc:89:
                    5c:95:b4:33:45:8e:87:eb:37:1a:10:3f:2a:a5:ea:
                    cb:a2:d7:01:9a:65:b5:b3:cb:bd:a5:cc:22:de:a6:
                    36:58:85:85:ad:51:72:3a:e7:c1:62:7a:9f:2e:17:
                    8d:d3:cc:25:a9:7e:aa:04:41:47:36:cc:8c:a2:e6:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:52:D2:81:D6:71:D5:7E:86:65:E3:35:A3:A9:01:3E:52:6F:21:70
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e38312e39362e302f32302d3230203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:87:21:ef:53:70:39:0d:72:16:7f:a9:22:dc:28:4d:0e:b9:
         15:ea:63:f7:56:56:ec:ca:08:80:41:28:9d:e2:a9:f8:36:15:
         38:08:a5:8c:e0:36:39:f4:0b:f7:e7:dc:b7:32:38:45:5d:3c:
         0f:d6:7f:83:2a:1a:5e:44:3b:36:2e:5e:75:12:e9:dc:fe:20:
         86:c2:9e:d6:0e:21:57:de:23:ff:55:16:d3:69:17:0b:e8:5c:
         eb:17:78:80:43:03:14:48:f0:eb:23:79:a8:f5:95:9f:da:33:
         94:af:49:38:af:75:43:23:4e:97:4d:f3:bb:81:15:f5:fd:46:
         ab:b7:02:5c:e0:38:a7:00:d2:62:2e:1c:14:7a:2e:00:05:51:
         5a:84:bd:7d:ce:64:49:fb:b6:fe:8c:f1:ef:e8:94:4e:f0:20:
         e3:29:fd:da:87:7d:d5:91:4f:23:6f:6f:ad:c0:9f:b1:5a:20:
         0a:71:30:df:b5:50:2f:4c:60:d1:e1:3e:a6:86:40:2e:4c:47:
         2d:7f:58:e8:ea:f3:af:4a:0a:5b:64:43:45:c7:a5:0f:41:00:
         4f:47:19:8c:d0:11:ef:5f:94:2c:18:1d:dd:a5:ce:c3:48:39:
         99:43:68:9d:4e:eb:88:63:f3:99:78:11:60:98:57:39:7a:fb:
         82:a6:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:28:16 2026 by rpki-client