Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38382e302f32312d3231203d3e203135303334.roa
File:                     3230302e36312e38382e302f32312d3231203d3e203135303334.roa (raw, json)
Hash identifier:          Mb5n1eQbKXmKkcImiqW6454LkXOJE1QGaHGYLK388KI=
Subject key identifier:   B1:5E:4E:D5:E5:15:CF:D5:E8:9B:A1:B4:E9:A0:91:45:31:F5:38:EE
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       6E70BA3803EDF31CBE7762B3930F39FB8BFBC35C
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38382e302f32312d3231203d3e203135303334.roa
Signing time:             Mon 01 Sep 2025 18:35:00 +0000
ROA not before:           Mon 01 Sep 2025 18:30:00 +0000
ROA not after:            Mon 31 Aug 2026 18:35:00 +0000
asID:                     15034
IP address blocks:        200.61.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:70:ba:38:03:ed:f3:1c:be:77:62:b3:93:0f:39:fb:8b:fb:c3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Sep  1 18:30:00 2025 GMT
            Not After : Aug 31 18:35:00 2026 GMT
        Subject: CN=B15E4ED5E515CFD5E89BA1B4E9A0914531F538EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:19:3f:02:d6:8c:87:8f:8a:52:0d:93:4a:
                    05:66:8f:e6:5c:0f:cd:f1:29:9a:13:33:dd:4d:b2:
                    c2:86:13:94:ee:91:81:1d:e0:e8:b6:ab:9c:14:a5:
                    8e:36:39:4d:1d:88:f7:47:c7:52:26:5f:07:59:ab:
                    1b:d6:58:e4:97:71:fa:bb:98:ab:9b:75:96:3e:42:
                    bd:78:3b:50:b9:09:0d:d1:1d:55:60:18:d4:6f:35:
                    c0:72:85:a7:99:66:6d:67:8c:22:b0:66:cd:2e:53:
                    ac:f5:00:ac:4b:12:98:b9:18:1b:5a:16:ca:54:97:
                    7f:2d:4b:42:a6:5c:4f:cf:2b:e3:3d:c1:00:69:f0:
                    58:3c:c0:dd:e2:45:8d:cc:72:79:47:2f:60:7c:5b:
                    02:e8:4d:d7:5f:01:51:70:1c:aa:36:b5:db:c0:10:
                    9f:22:0e:5e:b0:7e:db:ff:cc:de:3b:a5:fa:fe:d1:
                    cd:e8:e6:3b:85:ad:c9:ee:8e:42:aa:a0:82:49:30:
                    80:d7:1d:7a:c6:ca:54:d2:7a:a7:6e:a0:c5:84:a4:
                    64:15:df:6a:19:4c:db:d3:a6:81:f5:59:df:fe:a0:
                    d0:c4:4f:a2:80:a2:44:89:c2:79:32:42:d9:7b:a4:
                    61:78:b3:62:64:3c:7e:77:20:fb:b2:4f:ef:e9:db:
                    4a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5E:4E:D5:E5:15:CF:D5:E8:9B:A1:B4:E9:A0:91:45:31:F5:38:EE
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e38382e302f32312d3231203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:02:b0:1d:eb:6a:6b:79:01:6a:bc:94:e0:c2:8b:67:df:
         94:2e:34:cd:f3:06:08:60:8d:27:11:71:2c:c3:c2:3f:1b:ab:
         70:2e:e8:95:0f:78:27:ae:1d:b4:c6:b3:41:09:38:58:a2:e4:
         2f:7f:07:59:cc:36:0b:74:62:16:14:a0:18:b7:a4:66:46:bf:
         0c:8d:c9:67:de:66:2d:22:65:f2:f0:06:fb:ab:f1:3e:f8:d5:
         85:80:f5:b7:33:f1:54:be:32:5b:07:b8:62:98:a8:c1:37:74:
         c8:33:64:a3:b5:fd:34:cc:f5:ca:c5:89:f6:f1:c3:fb:e6:49:
         97:38:58:51:46:9c:20:d9:c3:33:78:f3:1a:8a:d5:96:96:8f:
         1a:c6:19:2d:ef:7a:dc:83:ac:ed:19:19:2b:d2:14:dd:c2:5f:
         ec:84:84:c6:77:34:ca:6b:92:56:9f:c9:4e:45:59:53:c8:1d:
         2c:79:e4:8f:14:66:24:3f:93:db:9a:80:39:31:c5:91:93:a1:
         d2:e0:6e:99:3d:48:ed:c2:21:51:dc:03:61:97:2e:66:bc:5e:
         2d:7d:31:98:1e:40:4d:cd:97:49:24:3b:de:ba:ad:12:37:25:
         af:a3:d1:52:72:b5:da:a9:38:48:c4:62:54:67:f4:7a:e6:e6:
         c7:bd:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:06:39 2025 by rpki-client