Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F39D69AC478472E524B89672E9EECDFA8C7C1FB42080BC9285B106C2F627ADC/0/3230312e3231372e3234382e302f32312d3234203d3e203631343630.roa
File:                     3230312e3231372e3234382e302f32312d3234203d3e203631343630.roa (raw, json)
Hash identifier:          x++akb3TFfvhLv1oKfXeIPOEWmyj9p7XDfrvp9u2OXs=
Subject key identifier:   4B:84:4F:27:A3:E5:6D:11:39:95:C6:FF:DF:38:87:49:B1:3E:64:F3
Certificate issuer:       /CN=1DB4B36361776824818082F0A6C4D91746BD5B29
Certificate serial:       3B79675C42064A1AA4E31FA14FA398E018F93818
Authority key identifier: 1D:B4:B3:63:61:77:68:24:81:80:82:F0:A6:C4:D9:17:46:BD:5B:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DB4B36361776824818082F0A6C4D91746BD5B29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F39D69AC478472E524B89672E9EECDFA8C7C1FB42080BC9285B106C2F627ADC/0/3230312e3231372e3234382e302f32312d3234203d3e203631343630.roa
Signing time:             Fri 06 Mar 2026 15:33:10 +0000
ROA not before:           Fri 06 Mar 2026 15:28:10 +0000
ROA not after:            Fri 05 Mar 2027 15:33:10 +0000
asID:                     61460
IP address blocks:        201.217.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F39D69AC478472E524B89672E9EECDFA8C7C1FB42080BC9285B106C2F627ADC/0/1DB4B36361776824818082F0A6C4D91746BD5B29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F39D69AC478472E524B89672E9EECDFA8C7C1FB42080BC9285B106C2F627ADC/0/1DB4B36361776824818082F0A6C4D91746BD5B29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DB4B36361776824818082F0A6C4D91746BD5B29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:79:67:5c:42:06:4a:1a:a4:e3:1f:a1:4f:a3:98:e0:18:f9:38:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB4B36361776824818082F0A6C4D91746BD5B29
        Validity
            Not Before: Mar  6 15:28:10 2026 GMT
            Not After : Mar  5 15:33:10 2027 GMT
        Subject: CN=4B844F27A3E56D113995C6FFDF388749B13E64F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:00:b0:fe:7d:15:7e:75:85:1b:34:25:1f:
                    24:53:cf:0e:db:9b:c2:a7:04:f8:7a:f3:3b:91:90:
                    7c:a0:2f:6e:41:0c:7f:6f:4e:e2:18:b4:67:5c:df:
                    4b:e3:3b:2e:a0:68:46:91:18:2d:15:d5:1f:b8:f3:
                    a9:6e:e6:38:aa:8f:42:ee:9e:8b:05:d7:28:86:9b:
                    41:13:f7:8e:31:f1:08:21:9f:58:f1:84:cb:03:d3:
                    06:26:46:06:2f:f2:91:68:d0:9a:93:05:86:cb:c0:
                    56:68:b9:50:32:94:86:3d:93:ca:18:b5:e7:7a:29:
                    3e:91:1b:62:54:58:20:23:25:e0:d4:d6:9a:65:f8:
                    bf:bd:45:ab:1f:4f:f5:bc:8a:d4:41:8c:ae:b9:6b:
                    01:db:25:7e:24:f3:8b:b8:ec:ee:be:97:ec:9b:e6:
                    45:72:37:30:32:f3:4c:f8:24:4c:0d:2a:9e:66:54:
                    c8:5e:7c:22:1a:a8:39:95:8a:ab:c2:43:99:b7:ca:
                    f4:49:99:7e:b8:fd:22:57:78:75:41:32:4e:0a:73:
                    6d:0b:3f:59:9e:a3:09:f2:42:fa:a0:b0:5d:14:50:
                    dc:65:0e:2e:2d:9d:5b:d2:91:77:b7:04:95:93:59:
                    ed:56:8e:dd:24:11:42:d2:c5:00:c4:42:b2:e1:ff:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:84:4F:27:A3:E5:6D:11:39:95:C6:FF:DF:38:87:49:B1:3E:64:F3
            X509v3 Authority Key Identifier:
                keyid:1D:B4:B3:63:61:77:68:24:81:80:82:F0:A6:C4:D9:17:46:BD:5B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F39D69AC478472E524B89672E9EECDFA8C7C1FB42080BC9285B106C2F627ADC/0/1DB4B36361776824818082F0A6C4D91746BD5B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DB4B36361776824818082F0A6C4D91746BD5B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F39D69AC478472E524B89672E9EECDFA8C7C1FB42080BC9285B106C2F627ADC/0/3230312e3231372e3234382e302f32312d3234203d3e203631343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:db:98:3e:b2:79:bb:ae:14:09:7c:c3:1a:c8:ca:5a:3a:60:
         cc:bc:94:29:b6:7d:14:53:d6:97:55:9f:66:f0:e8:00:37:fe:
         5a:56:16:f5:99:d0:bc:92:be:24:7b:d3:4a:f6:1a:4f:9f:ea:
         24:a0:00:a3:67:03:9d:29:08:a9:21:ea:e8:0b:65:74:12:b9:
         40:4e:8a:9b:9e:67:f0:5b:b3:64:3d:35:5c:df:96:9a:e8:45:
         36:b7:65:65:95:4c:15:66:58:9e:fe:c2:d0:62:a4:e4:7d:9b:
         4d:d6:6c:fd:e9:77:06:12:e0:39:fb:2b:fd:59:41:28:d0:71:
         c2:b4:a8:4a:00:ba:af:76:bd:0d:be:86:b4:47:cc:27:dd:00:
         7f:ce:51:a5:f0:15:8b:a5:6f:4a:03:a0:90:84:44:e1:0b:9e:
         6d:85:dd:c3:20:ac:48:d7:f0:e8:c6:39:d2:37:20:e9:d2:c6:
         a0:dd:05:6b:17:22:ac:f2:51:9a:d2:ec:58:0c:3f:0b:cf:e9:
         10:fd:50:7d:00:2c:14:d5:6d:31:c1:88:f2:b7:47:78:bc:b2:
         46:1b:75:6e:cd:c9:78:67:b1:4f:a6:da:31:0a:3d:89:96:5b:
         39:37:bd:16:01:69:be:87:48:f9:55:51:70:c1:c0:ab:6b:f4:
         f9:e9:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:56:02 2026 by rpki-client