Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e37372e3232342e302f32302d3234203d3e203232393038.roa
File:                     3230302e37372e3232342e302f32302d3234203d3e203232393038.roa (raw, json)
Hash identifier:          eCIB/YU9m9EBFsVf+bBCN6EOowPjs9xMseAi3TaGjAw=
Subject key identifier:   62:23:04:D0:92:0D:33:76:88:C5:24:89:16:25:17:BA:8F:F4:6F:CF
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       762E48C0A44AC0D303DC446E77CFDAC9989F2852
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e37372e3232342e302f32302d3234203d3e203232393038.roa
Signing time:             Tue 07 Jul 2026 19:40:00 +0000
ROA not before:           Tue 07 Jul 2026 19:35:00 +0000
ROA not after:            Tue 06 Jul 2027 19:40:00 +0000
asID:                     22908
IP address blocks:        200.77.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2e:48:c0:a4:4a:c0:d3:03:dc:44:6e:77:cf:da:c9:98:9f:28:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:35:00 2026 GMT
            Not After : Jul  6 19:40:00 2027 GMT
        Subject: CN=622304D0920D337688C52489162517BA8FF46FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:2a:f3:c9:0f:ba:58:f9:5f:0e:96:de:c2:
                    02:ce:aa:f9:8f:70:54:68:92:73:91:a7:19:42:b7:
                    18:57:53:59:8f:d4:5a:1c:f1:0f:96:89:f3:73:ba:
                    80:b2:9a:50:61:b1:fd:fb:d2:72:cd:c8:3c:e5:14:
                    f5:66:ab:38:2a:a7:2c:5d:15:0e:46:7d:88:58:72:
                    a5:e3:8c:88:96:69:77:cc:13:53:a9:00:bb:a4:4c:
                    e5:a2:da:63:75:80:81:fe:27:1c:fa:6e:68:c0:d9:
                    a3:54:bf:59:71:93:57:7b:01:fa:c4:00:d0:83:b7:
                    52:f6:81:8d:9a:86:39:b6:14:14:e2:bc:29:34:e5:
                    2a:37:c2:c0:ff:79:50:69:ab:b7:10:af:b1:f2:3c:
                    4d:eb:52:e4:17:c1:95:ab:f5:50:0f:ea:1f:c3:e6:
                    55:15:b2:6d:38:20:6e:87:02:39:10:98:4c:8a:b4:
                    66:52:c1:86:c8:e1:77:8a:fd:45:79:d9:f6:43:3f:
                    b2:a1:e0:cc:57:b3:f4:95:d0:3c:39:c5:64:d3:82:
                    e2:dd:c9:29:e1:35:5d:eb:b6:3d:09:8f:41:8d:0c:
                    04:83:8a:59:19:a0:7f:2c:a5:db:3b:e1:69:0e:5e:
                    0c:00:06:3f:70:dc:aa:49:60:60:d0:e8:57:8a:44:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:23:04:D0:92:0D:33:76:88:C5:24:89:16:25:17:BA:8F:F4:6F:CF
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e37372e3232342e302f32302d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:8d:19:66:36:cd:d2:05:83:04:9a:dd:0d:6d:28:b7:1f:
         3f:2d:b8:16:f9:e4:6a:a5:58:41:18:91:62:dc:7d:12:00:08:
         68:6b:53:0f:ae:3e:47:23:cc:ac:2c:53:50:b6:07:d6:f6:a8:
         59:04:44:87:31:d5:50:69:d7:4c:8e:f6:41:cd:bd:ca:de:ca:
         06:2a:1e:23:eb:ec:ad:74:52:b0:97:2d:cf:28:5c:8c:34:dc:
         ac:5a:8d:70:a5:00:90:ed:6e:0e:76:95:ef:90:18:76:63:56:
         ed:13:3f:fd:96:7a:1c:5b:7d:0c:1b:b0:e2:e8:73:de:d2:08:
         ed:d0:f6:35:a2:88:a2:56:8c:71:29:22:27:24:5f:22:46:cd:
         48:9c:72:47:46:c0:6b:60:c5:14:5e:d7:60:74:0d:98:be:09:
         1e:92:f8:2a:30:fa:75:a3:26:ef:31:b4:4e:ec:ac:f3:bc:56:
         93:c4:a7:d4:b2:d1:52:ce:56:0b:be:f9:cb:41:2d:05:02:ec:
         4e:77:7a:0d:bb:dc:34:ab:57:31:86:59:e3:a8:3d:eb:e3:3b:
         e4:54:e3:b5:d3:91:86:b0:89:a7:a2:54:c9:21:f1:0d:bf:e9:
         59:c8:67:a4:e7:f2:e8:f4:05:34:94:c5:d2:63:98:1b:c7:89:
         ff:55:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:51:40 2026 by rpki-client