Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39362e302f32342d3234203d3e203135303334.roa
File:                     3230302e36312e39362e302f32342d3234203d3e203135303334.roa (raw, json)
Hash identifier:          QrKb6LDgtC6F7YsvS1qcvUynGTKMYQYqyTY1znC3IMs=
Subject key identifier:   5A:9C:53:FA:FA:16:8D:D7:68:49:65:8E:7C:F7:80:35:12:ED:4B:09
Certificate issuer:       /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
Certificate serial:       054175703990F94DFC9D91014D5D590EB03F18EE
Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39362e302f32342d3234203d3e203135303334.roa
Signing time:             Mon 01 Sep 2025 18:10:02 +0000
ROA not before:           Mon 01 Sep 2025 18:05:02 +0000
ROA not after:            Mon 31 Aug 2026 18:10:02 +0000
asID:                     15034
IP address blocks:        200.61.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:75:70:39:90:f9:4d:fc:9d:91:01:4d:5d:59:0e:b0:3f:18:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F
        Validity
            Not Before: Sep  1 18:05:02 2025 GMT
            Not After : Aug 31 18:10:02 2026 GMT
        Subject: CN=5A9C53FAFA168DD76849658E7CF7803512ED4B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2e:00:a9:0c:bc:d2:30:b3:69:db:18:24:d7:
                    32:85:66:7b:cf:9c:be:72:bf:cf:07:b0:57:bc:24:
                    34:99:2c:bb:09:5c:f1:6b:c8:1e:5f:f7:af:f6:e8:
                    13:b0:a7:13:b3:ce:95:1c:e2:01:bd:8c:cb:64:58:
                    a3:47:87:5b:dd:9b:4e:2f:50:06:b0:66:49:b5:05:
                    c6:9f:24:a7:b8:5e:e0:08:b6:da:d7:70:75:64:ac:
                    65:65:d3:22:d0:04:5b:ed:96:c3:50:36:bc:06:e4:
                    64:c4:3d:f3:32:c6:bc:02:9a:06:e2:c0:fe:9e:4c:
                    60:20:06:8b:08:db:5a:92:dd:53:a6:dd:77:e7:01:
                    c4:ab:3d:b8:00:5f:cf:e7:81:fc:ad:8d:20:14:61:
                    b9:a4:64:93:40:90:7b:84:91:98:85:d0:31:a0:43:
                    27:77:96:b8:51:f3:dd:fe:7a:71:9c:37:0d:b9:81:
                    74:c3:86:9b:f4:d8:02:a3:61:9d:ea:ae:55:b4:59:
                    72:ab:c9:d8:67:04:cc:46:eb:c4:ab:3b:46:da:1f:
                    56:5e:c6:c2:6b:76:4e:ca:b9:4e:22:c9:83:5d:3a:
                    d8:e3:3e:ff:c7:e4:f8:04:f3:4b:87:99:79:45:81:
                    09:ae:85:1f:df:9f:7b:f4:0a:d0:6f:1d:67:f4:a5:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9C:53:FA:FA:16:8D:D7:68:49:65:8E:7C:F7:80:35:12:ED:4B:09
            X509v3 Authority Key Identifier:
                keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e39362e302f32342d3234203d3e203135303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:d8:75:aa:df:50:ec:b6:4c:92:0d:93:b9:72:cb:a1:d3:85:
         28:4c:5b:ee:1f:75:04:64:fe:40:06:d4:34:c6:03:3f:20:14:
         19:52:29:2f:de:52:17:3e:03:79:e7:21:6f:c8:7b:c1:e2:46:
         29:1b:01:03:6d:93:17:93:62:19:ce:64:9c:11:ea:79:89:08:
         8a:e6:93:03:70:93:d7:61:9f:7b:5c:ec:76:c7:62:0d:71:d8:
         95:51:27:45:6e:c1:91:ac:53:a2:14:93:9a:76:20:32:c1:36:
         e7:81:d8:32:63:40:74:ec:2f:bd:34:48:d5:43:9c:20:54:66:
         2d:1c:2f:7a:60:d6:c4:95:85:3e:49:46:40:b6:d3:45:e2:b8:
         62:a4:aa:33:ca:26:7d:81:7c:f6:da:43:ff:db:08:6f:5f:8c:
         8b:21:d6:d2:9c:6a:48:84:bc:14:b9:63:2c:e4:45:73:8a:0a:
         88:c7:e7:a6:9f:3e:7d:90:63:10:3f:76:de:0c:f2:17:b4:df:
         a1:8f:1e:eb:1e:48:a8:cb:44:24:06:14:7d:9f:5a:9d:55:b1:
         99:0c:8c:77:a4:f1:5a:5e:67:35:54:ec:20:16:75:fc:fc:0c:
         1c:84:c0:f9:8d:37:f3:90:97:60:10:e5:bc:30:c5:03:6f:a3:
         67:1b:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:06:35 2025 by rpki-client