Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35332e3132382e302f31382d3234203d3e203232303131.roa
File:                     3230302e35332e3132382e302f31382d3234203d3e203232303131.roa (raw, json)
Hash identifier:          soJhHQoJEJ2kQS6J5eFSgH/dgfhTxk00SPVxuIHvGxQ=
Subject key identifier:   29:C2:78:69:12:98:E3:1C:4B:69:30:C8:9B:72:07:3A:08:63:12:0B
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       61A01F4357696F2D2A4F360B598A5CAD4A602ECD
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35332e3132382e302f31382d3234203d3e203232303131.roa
Signing time:             Fri 24 Apr 2026 17:39:57 +0000
ROA not before:           Fri 24 Apr 2026 17:34:57 +0000
ROA not after:            Fri 23 Apr 2027 17:39:57 +0000
asID:                     22011
IP address blocks:        200.53.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a0:1f:43:57:69:6f:2d:2a:4f:36:0b:59:8a:5c:ad:4a:60:2e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Apr 24 17:34:57 2026 GMT
            Not After : Apr 23 17:39:57 2027 GMT
        Subject: CN=29C278691298E31C4B6930C89B72073A0863120B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:ee:6b:df:81:fb:f1:dc:45:f0:36:0c:19:
                    94:49:75:c8:7d:d3:9e:b9:5f:da:de:09:d5:39:be:
                    1a:58:d5:07:a2:fa:7c:d3:45:77:2d:33:f5:cc:d6:
                    b3:4c:2e:31:4c:b6:c3:bb:69:01:04:81:bb:fa:2c:
                    6b:fe:e5:8b:e3:9e:80:c7:20:e7:82:0d:d3:5c:8d:
                    30:20:d1:47:7a:d0:b7:87:86:d9:94:22:5d:05:05:
                    a8:20:89:68:21:bf:ed:03:85:0e:66:40:95:ac:0a:
                    15:f9:8c:60:92:d0:f7:5a:34:f0:d6:87:a0:a3:30:
                    ce:36:6b:f0:6f:79:d1:f0:10:cb:c2:61:51:b5:cb:
                    0b:47:a8:44:f1:ef:a7:76:b1:fd:56:29:e7:43:0a:
                    a6:79:2c:57:11:92:62:30:91:d2:c5:ee:16:23:2b:
                    ab:ae:8d:ec:d6:36:14:67:ad:05:22:82:8e:19:40:
                    a0:33:02:cb:eb:05:44:29:35:74:36:c6:f6:0a:24:
                    0c:6e:4a:92:38:ca:45:d4:ac:ea:46:9e:28:dc:e5:
                    ba:76:d6:02:7d:95:d7:93:84:2c:98:68:98:85:ba:
                    81:5e:9f:fa:03:e1:3d:4f:9d:7b:bd:74:05:03:56:
                    50:d0:f6:fa:50:12:99:7c:b2:58:8b:a3:70:67:e9:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C2:78:69:12:98:E3:1C:4B:69:30:C8:9B:72:07:3A:08:63:12:0B
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35332e3132382e302f31382d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         31:12:58:ed:c9:d1:cb:1c:c3:72:22:ed:10:47:eb:2e:eb:0c:
         f9:6b:3b:0d:e1:58:1b:a4:99:20:0f:39:e9:50:a3:10:df:3b:
         e8:96:e4:cd:f2:d4:50:72:97:e1:89:70:c4:03:81:ae:8a:fd:
         99:7b:11:58:f3:ef:92:72:5e:f3:af:5c:65:7b:6d:67:c6:3f:
         a4:aa:75:c0:d0:c1:6c:38:5d:1b:96:7b:98:81:07:04:a8:67:
         ef:74:09:fd:36:fb:6e:6c:c5:f2:0b:6a:40:01:ec:69:73:6e:
         c5:27:3d:fc:61:92:04:61:8b:d4:1a:0d:1a:5f:a3:33:57:4a:
         8a:5e:a5:b8:07:b3:ce:08:41:22:10:14:69:e8:99:36:9a:45:
         66:33:16:16:e2:f3:e8:e4:06:68:d3:09:f5:ef:d1:e2:c7:a0:
         60:e6:8d:05:df:f7:96:51:73:02:cc:99:22:60:9b:da:c3:9d:
         ed:94:a7:bf:a3:15:48:21:6d:87:b7:a9:11:6c:ce:57:2d:ad:
         d2:8b:4e:4f:1d:27:a7:8e:2b:a4:52:90:42:c2:94:77:1c:90:
         b2:1b:c1:8e:52:a8:42:bd:6d:1b:a1:af:22:d7:40:94:45:70:
         25:6d:95:38:60:5a:dd:e7:00:45:59:fe:17:f7:a1:a6:19:03:
         91:e6:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:28:08 2026 by rpki-client