Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38322e302f32332d3233203d3e203135303334.roa
File:                     3230302e36312e38322e302f32332d3233203d3e203135303334.roa (raw, json)
Hash identifier:          CkPpx10+Z6ZbnUA45yOh4WuIRySNRavzG9dlkFjKKoE=
Subject key identifier:   8C:F9:22:0D:3F:B6:A1:0E:E8:9B:0E:80:60:65:B3:89:B8:22:65:EE
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       53F4B8F5902ADA27423E9261A59D41A3FE458C51
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38322e302f32332d3233203d3e203135303334.roa
Signing time:             Mon 01 Sep 2025 18:35:00 +0000
ROA not before:           Mon 01 Sep 2025 18:30:00 +0000
ROA not after:            Mon 31 Aug 2026 18:35:00 +0000
asID:                     15034
IP address blocks:        200.61.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f4:b8:f5:90:2a:da:27:42:3e:92:61:a5:9d:41:a3:fe:45:8c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Sep  1 18:30:00 2025 GMT
            Not After : Aug 31 18:35:00 2026 GMT
        Subject: CN=8CF9220D3FB6A10EE89B0E806065B389B82265EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:97:a4:47:b5:35:db:ab:5c:9b:e0:11:0c:
                    d1:f4:17:40:16:e5:07:ba:60:df:c3:04:47:42:ea:
                    42:1d:48:19:0a:fa:78:be:12:4b:51:d8:d3:19:44:
                    ad:a7:28:15:d4:ee:2b:82:08:1f:97:7f:f1:de:25:
                    9f:0b:28:88:38:63:ab:30:d4:08:03:cd:06:34:63:
                    7d:68:95:bd:4d:50:a4:9a:65:92:32:af:10:05:66:
                    aa:c3:e9:ea:e2:54:61:7b:9a:48:01:b7:f0:17:15:
                    4c:6b:6d:24:cb:49:b7:cd:04:d5:aa:4d:31:d6:13:
                    9d:06:af:f8:63:ef:2a:8a:40:0f:f4:70:21:7d:3b:
                    1b:87:23:e1:17:86:4e:16:d9:db:89:af:b2:f0:35:
                    49:43:03:d0:2d:d1:5a:eb:77:65:ba:7c:ce:13:e8:
                    97:d6:13:e1:cd:8b:be:b4:db:5d:2d:51:fa:12:0f:
                    36:46:61:cb:ba:b9:89:16:9f:e6:5d:0b:c0:90:86:
                    36:bc:92:2d:23:4f:17:72:f0:9f:ab:2c:f5:56:47:
                    b2:5f:64:b5:2f:78:e5:2d:14:3d:01:be:68:29:8c:
                    59:08:29:27:9f:87:5f:35:ce:00:83:d9:3e:6c:a9:
                    e9:05:9e:f4:6e:f4:38:33:d7:79:51:89:11:7c:b6:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F9:22:0D:3F:B6:A1:0E:E8:9B:0E:80:60:65:B3:89:B8:22:65:EE
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38322e302f32332d3233203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:27:a7:e1:c6:b5:1f:f8:3c:8d:30:d2:67:61:18:e1:dc:d6:
         ef:a8:90:92:16:96:a2:2e:93:60:92:f4:ce:ca:f4:c5:9e:88:
         d4:ed:aa:86:53:52:6a:eb:e8:e1:57:c4:29:66:90:ef:75:d0:
         6a:c3:f8:66:92:74:ae:23:02:69:70:ab:9d:56:d1:e5:79:b0:
         34:bd:86:25:53:37:7f:fc:49:a7:bf:2a:84:1d:41:d6:ad:d7:
         4a:41:97:4e:38:a4:ed:41:a6:32:48:71:6e:80:43:d1:b5:b8:
         9c:9c:0d:af:b2:e6:76:f9:0b:a6:b7:d4:9f:22:53:e9:2b:d2:
         7e:1c:f1:f4:7e:eb:59:84:f5:df:c3:1e:4f:a7:0a:01:e5:e5:
         3d:dc:58:83:80:47:ef:0f:70:a0:a2:2f:06:ff:f2:9f:45:60:
         6d:79:51:ce:a6:c2:0c:bd:46:7a:0a:e5:9c:3e:0f:39:82:b9:
         0e:67:bc:db:aa:20:f2:66:83:70:20:c5:6b:64:0f:bd:78:7f:
         6a:2e:98:b4:60:36:35:54:9e:29:8a:30:0a:ba:b6:27:58:c3:
         9c:dc:7b:e4:04:bb:1c:d3:53:09:db:3b:72:6a:48:3c:c5:7d:
         43:d7:01:b7:02:98:8a:27:74:d2:d5:09:04:6c:a7:0f:31:9b:
         49:3d:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:06:38 2025 by rpki-client