Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37332e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e37332e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          HbA7AvN0BzOu3xP+iqIeMFn+vxrCcW0PP/gItqAI3nY=
Subject key identifier:   13:38:4C:A8:92:6C:73:AF:75:FD:1A:0D:02:49:A7:30:E5:4D:32:50
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       43EE36DAD72D2A97A370A8639E4DF73F44EC1E8D
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37332e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 01 Sep 2025 18:30:00 +0000
ROA not before:           Mon 01 Sep 2025 18:25:00 +0000
ROA not after:            Mon 31 Aug 2026 18:30:00 +0000
asID:                     15034
IP address blocks:        200.61.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ee:36:da:d7:2d:2a:97:a3:70:a8:63:9e:4d:f7:3f:44:ec:1e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Sep  1 18:25:00 2025 GMT
            Not After : Aug 31 18:30:00 2026 GMT
        Subject: CN=13384CA8926C73AF75FD1A0D0249A730E54D3250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:20:c0:64:9f:e0:64:96:29:dc:e8:75:06:
                    c0:e1:40:e4:20:a0:9c:01:03:b0:94:7c:e0:bc:51:
                    ed:76:3c:1c:17:84:a1:cc:7d:66:32:bf:d4:51:36:
                    7a:e1:20:be:84:24:7f:f0:5d:4b:8d:6d:a4:c0:38:
                    ed:16:09:b8:50:63:63:f7:3b:69:6a:1d:cc:c5:e8:
                    da:5e:e3:ae:16:75:26:cb:03:32:e9:06:ab:94:50:
                    4e:88:dc:86:b9:1a:bd:94:a6:6f:93:cf:f7:46:a7:
                    ab:e6:7c:2a:ac:4e:79:e5:df:c5:0d:4d:0f:1e:59:
                    96:dd:81:43:0f:c8:d6:bc:f7:52:4c:3b:df:d7:eb:
                    b1:66:c5:1f:3d:ba:12:71:8f:af:8c:3e:4e:bd:71:
                    01:ee:25:58:5b:80:c3:bb:48:f7:be:af:12:4d:1b:
                    09:79:ec:fa:05:4c:bf:d0:10:3a:b7:2f:45:fb:cb:
                    be:cf:3f:58:6e:9b:02:2f:4f:ab:53:1d:95:cd:2c:
                    f8:2e:81:b6:86:72:e5:ad:a3:d1:18:a3:39:ab:37:
                    95:eb:ed:30:40:96:35:e1:92:9b:fb:01:15:14:d1:
                    52:1d:50:c4:12:25:08:9c:47:d9:42:46:71:c9:24:
                    6e:b1:09:a0:f6:62:53:bd:9b:1a:6d:67:77:62:6e:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:38:4C:A8:92:6C:73:AF:75:FD:1A:0D:02:49:A7:30:E5:4D:32:50
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37332e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:6c:2e:0a:aa:cf:93:ec:09:87:6a:1f:0a:04:30:b5:25:52:
         60:0c:d3:12:8f:f1:26:dd:e9:5f:c0:33:1d:ee:77:99:65:aa:
         d9:bf:68:a5:50:af:5b:3e:ef:14:b6:8f:97:24:c3:03:bf:1a:
         8f:87:32:53:ed:4f:f0:ee:bd:e1:ea:65:84:ad:87:02:69:8d:
         62:fd:89:95:b4:2a:8b:0e:96:ed:39:8d:4c:5f:58:e9:ef:a4:
         ae:54:42:3d:44:1f:87:d0:b8:6c:4e:c6:72:d6:01:73:8e:50:
         e2:27:b7:27:ee:85:e7:72:3c:b4:55:46:6f:0a:5c:ac:c1:8e:
         63:52:c8:08:b2:9a:9c:5d:a5:53:15:d5:cc:a9:36:67:ca:50:
         7f:8a:a8:a5:ba:1f:4b:e8:8b:55:fc:aa:01:91:26:ee:6f:01:
         9e:df:53:6f:90:01:ee:0a:6d:dd:8d:ec:25:d4:10:e4:61:17:
         6f:ed:c1:0d:11:ed:1f:3f:ab:e2:f2:11:f2:00:93:c5:cc:eb:
         96:cf:34:56:83:82:13:3d:37:ab:ee:9f:b2:2a:14:25:c8:fb:
         63:9c:b2:c1:07:a1:62:46:02:9a:81:b8:f2:55:ce:89:b1:be:
         bc:28:ee:d9:f8:6e:e9:b1:19:90:9c:05:1b:a4:9f:54:7d:f2:
         60:a9:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:06:38 2025 by rpki-client