Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35332e3132382e302f31382d3234203d3e203232393038.roa
File:                     3230302e35332e3132382e302f31382d3234203d3e203232393038.roa (raw, json)
Hash identifier:          mzBlkvqsCTvF6G3DBASBoApEj4zx9G6IAOKi/n9/yew=
Subject key identifier:   1D:5F:D7:8A:52:4E:EB:BD:FC:A0:6F:CA:82:1E:C7:85:A0:09:FA:63
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       77EDC16967C78ADA40F20D1D799C98F426B26A08
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35332e3132382e302f31382d3234203d3e203232393038.roa
Signing time:             Fri 24 Apr 2026 17:39:57 +0000
ROA not before:           Fri 24 Apr 2026 17:34:57 +0000
ROA not after:            Fri 23 Apr 2027 17:39:57 +0000
asID:                     22908
IP address blocks:        200.53.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ed:c1:69:67:c7:8a:da:40:f2:0d:1d:79:9c:98:f4:26:b2:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Apr 24 17:34:57 2026 GMT
            Not After : Apr 23 17:39:57 2027 GMT
        Subject: CN=1D5FD78A524EEBBDFCA06FCA821EC785A009FA63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:5c:46:ac:5b:73:ae:89:5e:6b:d7:de:c7:
                    b7:d7:f2:4b:e8:42:22:11:6a:16:82:ee:83:37:b9:
                    f4:8b:4b:21:99:0a:63:eb:d5:c9:dd:66:65:c4:02:
                    a1:16:52:34:5a:16:34:57:50:4e:fc:20:26:be:49:
                    ca:90:48:7b:d6:3d:9d:43:cb:f8:ef:4c:94:32:6e:
                    f1:9b:32:4c:54:f1:e9:83:ab:6c:ff:a9:7d:56:39:
                    40:e8:e5:f3:78:9b:71:bb:46:12:3e:e8:be:82:98:
                    f3:08:4a:6c:89:e2:5f:1d:21:90:70:00:c7:7f:6d:
                    86:28:ed:22:a0:01:2f:44:f7:1c:ca:a0:f6:f2:09:
                    d5:b0:eb:45:79:6e:05:51:4e:ce:5e:eb:a8:d1:18:
                    3a:98:34:61:e3:c2:4d:41:a4:e5:17:ef:ef:ae:8d:
                    a1:4d:b0:74:ab:d7:01:c9:2b:b1:44:71:86:59:d4:
                    77:84:ed:7c:a6:55:66:6d:90:1e:ab:e9:e1:c1:fb:
                    38:57:e6:ae:08:3b:1b:3e:26:19:fe:0d:66:af:94:
                    2f:55:e8:4c:5d:01:8c:36:c0:1b:b8:c2:f2:3d:27:
                    f1:fc:cc:7d:d2:72:a7:09:cb:89:b5:99:f2:fb:55:
                    aa:2f:2f:6c:be:5e:c1:76:49:17:db:0d:dc:2b:9a:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5F:D7:8A:52:4E:EB:BD:FC:A0:6F:CA:82:1E:C7:85:A0:09:FA:63
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35332e3132382e302f31382d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:51:d2:b2:ea:85:c7:01:5e:38:4e:2c:4b:50:cf:2d:8a:65:
         1c:dc:2e:9d:11:fe:aa:6e:21:75:b0:91:70:f5:4f:07:c2:8b:
         43:0d:cd:f6:18:ad:30:c4:4f:5f:6e:bb:de:f2:8c:23:ff:86:
         d5:47:df:df:fb:d7:25:87:94:02:1c:0d:f0:8a:8a:b4:ce:0a:
         4f:2d:c7:51:13:97:a9:26:7c:06:45:80:4c:38:60:cd:b8:40:
         49:e6:fd:d2:c6:6a:b4:d3:ba:50:bd:dd:91:ed:a7:5c:4f:0c:
         1d:68:ac:4d:20:23:f9:3b:06:55:86:a4:d9:3f:2f:31:c9:20:
         25:1d:6e:21:72:2c:a6:a0:8f:9a:97:81:d3:bb:22:6a:86:3f:
         c2:1e:3c:1a:26:ae:00:4d:c8:3a:a8:28:8d:1a:23:c3:38:27:
         90:22:43:3a:17:62:45:f0:35:2c:8a:fb:a5:1d:5a:1f:ae:a2:
         ce:a1:a2:7f:3b:58:47:5b:aa:5a:af:6b:54:30:cb:79:4f:df:
         72:a7:2a:2b:76:36:ff:71:9e:77:61:4b:3f:65:ca:e5:78:a1:
         be:03:1c:6a:64:09:e7:f4:86:4b:5a:57:bc:ff:43:86:d4:c9:
         0e:0d:13:71:09:ca:45:ec:71:f9:c6:26:b4:3b:3e:04:12:84:
         43:31:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:29:13 2026 by rpki-client