Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e32382e302f32342d3234203d3e203436303731.roa
File:                     3230312e3137352e32382e302f32342d3234203d3e203436303731.roa (raw, json)
Hash identifier:          +pTz1iBmOsZmP0CI29B8LWMTNpuLHQ/1aFVhtrkAvKg=
Subject key identifier:   16:07:48:C0:BD:70:0C:1B:78:83:C7:1D:1D:AD:38:45:02:47:1E:5F
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       32B887ECC88F27FD0882C6F83C61D2C18738AD84
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e32382e302f32342d3234203d3e203436303731.roa
Signing time:             Tue 07 Jul 2026 20:05:00 +0000
ROA not before:           Tue 07 Jul 2026 20:00:00 +0000
ROA not after:            Tue 06 Jul 2027 20:05:00 +0000
asID:                     46071
IP address blocks:        201.175.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b8:87:ec:c8:8f:27:fd:08:82:c6:f8:3c:61:d2:c1:87:38:ad:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 20:00:00 2026 GMT
            Not After : Jul  6 20:05:00 2027 GMT
        Subject: CN=160748C0BD700C1B7883C71D1DAD384502471E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:71:9c:46:82:9e:dc:72:17:8d:94:15:83:
                    cc:8a:61:85:92:54:5b:be:e4:02:68:f9:eb:54:a9:
                    24:09:49:d8:06:46:ea:f6:90:16:65:80:86:9a:98:
                    ed:66:11:04:08:7a:ae:97:51:ec:9e:32:3e:52:30:
                    8f:04:5e:db:9b:37:63:a8:e2:75:66:8d:98:3f:9e:
                    b0:57:f7:46:53:d7:56:5e:23:36:7c:4d:26:18:80:
                    59:22:5f:50:88:54:87:bf:93:af:3d:d5:8e:6e:c8:
                    b5:d3:00:f0:df:52:9a:c3:ec:81:7b:6c:e2:60:5f:
                    33:51:b1:c1:0c:91:ed:ec:ce:75:90:51:c0:3d:ac:
                    6c:b4:ec:af:82:50:3f:ff:b4:d4:cf:67:2b:d6:42:
                    a6:78:40:c5:31:2b:3c:e3:1f:2b:c6:69:fc:c9:38:
                    89:37:8e:3e:20:d0:ac:0d:5d:11:08:7d:ae:b4:32:
                    ea:70:bc:35:3e:81:39:df:99:56:0c:d7:77:4b:e9:
                    b8:2b:1e:21:3b:68:36:fd:d7:9b:8c:21:53:10:00:
                    01:87:e9:40:66:07:44:e4:af:dd:d4:b8:b8:b5:fb:
                    7b:0e:8b:a4:74:7a:74:0f:d2:70:ef:e4:6a:41:bc:
                    fc:4e:5e:33:77:40:05:58:7b:72:11:c8:3d:88:f8:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:07:48:C0:BD:70:0C:1B:78:83:C7:1D:1D:AD:38:45:02:47:1E:5F
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e32382e302f32342d3234203d3e203436303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:5f:b0:cb:b2:c8:4e:a2:ce:19:4b:a6:c5:82:a9:1e:80:
         26:c4:db:42:d2:c8:e4:dd:37:13:d7:d1:47:19:75:f6:b4:0b:
         54:41:47:61:fe:9e:e1:31:fc:b8:5a:88:c4:18:52:46:61:a3:
         5c:f4:c9:4d:35:86:4d:2e:40:de:e0:74:50:09:1c:77:ed:47:
         ca:55:16:ef:0b:94:d7:87:b3:6a:30:43:62:7f:42:be:b8:69:
         b9:df:c4:a6:e3:c1:41:29:81:82:1f:76:c4:6c:e1:ab:ea:a7:
         34:5a:4a:d0:f1:44:ce:fd:9a:f7:34:9d:e6:ef:e2:e8:b3:20:
         48:08:b6:86:95:fb:8c:b7:01:2a:80:f3:d9:1b:09:3f:24:eb:
         92:64:93:13:6b:ce:b2:36:64:4e:2d:fc:51:25:96:7c:cd:c4:
         d4:38:dc:2d:45:ec:a1:ac:89:11:b6:e4:c1:0c:4a:20:16:a3:
         99:3e:96:2f:2d:9a:c0:8b:d3:09:9e:51:3a:5d:87:6f:04:a3:
         c3:c4:38:ad:fa:36:ea:32:47:f6:f4:19:94:e7:aa:87:8f:66:
         7a:e8:5a:1e:e4:50:ee:02:1d:fe:7c:21:78:5b:e5:5c:e4:47:
         cf:8e:28:33:76:a8:37:7a:42:fa:12:b6:34:bf:69:75:07:96:
         4e:92:76:15
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMriH7MiPJ/0Igsb4PGHSwYc4rYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlGNTFEQTZDNEIxOEU4MENBQ0U1ODkxNjMzMUMyMTJF
MDI4NjBDNDAeFw0yNjA3MDcyMDAwMDBaFw0yNzA3MDYyMDA1MDBaMDMxMTAvBgNV
BAMTKDE2MDc0OEMwQkQ3MDBDMUI3ODgzQzcxRDFEQUQzODQ1MDI0NzFFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VHGcRoKe3HIXjZQVg8yKYYWS
VFu+5AJo+etUqSQJSdgGRur2kBZlgIaamO1mEQQIeq6XUeyeMj5SMI8EXtubN2Oo
4nVmjZg/nrBX90ZT11ZeIzZ8TSYYgFkiX1CIVIe/k6891Y5uyLXTAPDfUprD7IF7
bOJgXzNRscEMke3sznWQUcA9rGy07K+CUD//tNTPZyvWQqZ4QMUxKzzjHyvGafzJ
OIk3jj4g0KwNXREIfa60MupwvDU+gTnfmVYM13dL6bgrHiE7aDb915uMIVMQAAGH
6UBmB0Tkr93UuLi1+3sOi6R0enQP0nDv5GpBvPxOXjN3QAVYe3IRyD2I+NNzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFgdIwL1wDBt4g8cdHa04RQJHHl8wHwYDVR0j
BBgwFoAUSfUdpsSxjoDKzliRYzHCEuAoYMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjFGNEQ4RTMxODIwOTg0MUE3QzNGNTU2QzlCM0FEQTZE
MzNCMjI5MDE4MjAyQUFCMUNBRkE0NkI2MEI4NzcwLzAvNDlGNTFEQTZDNEIxOEU4
MENBQ0U1ODkxNjMzMUMyMTJFMDI4NjBDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUY1MURBNkM0QjE4RTgwQ0FD
RTU4OTE2MzMxQzIxMkUwMjg2MEM0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzYxRjREOEUzMTgyMDk4NDFBN0MzRjU1NkM5QjNBREE2RDMzQjIyOTAx
ODIwMkFBQjFDQUZBNDZCNjBCODc3MC8wLzMyMzAzMTJlMzEzNzM1MmUzMjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMwMzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmvHDAN
BgkqhkiG9w0BAQsFAAOCAQEAWf5fsMuyyE6izhlLpsWCqR6AJsTbQtLI5N03E9fR
Rxl19rQLVEFHYf6e4TH8uFqIxBhSRmGjXPTJTTWGTS5A3uB0UAkcd+1HylUW7wuU
14ezajBDYn9Cvrhpud/EpuPBQSmBgh92xGzhq+qnNFpK0PFEzv2a9zSd5u/i6LMg
SAi2hpX7jLcBKoDz2RsJPyTrkmSTE2vOsjZkTi38USWWfM3E1DjcLUXsoayJEbbk
wQxKIBajmT6WLy2awIvTCZ5ROl2HbwSjw8Q4rfo26jJH9vQZlOeqh49meuhaHuRQ
7gId/nwheFvlXORHz44oM3aoN3pC+hK2NL9pdQeWTpJ2FQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:15 2026 by rpki-client