Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e33322e302f32302d3234203d3e203232303131.roa
File:                     3230312e3137352e33322e302f32302d3234203d3e203232303131.roa (raw, json)
Hash identifier:          fFP0N1R6DozyGBW5mhW+2ZOpbO+oWZuTYVUDjRiDSMU=
Subject key identifier:   9B:BA:7A:85:BD:80:07:E2:C6:98:B4:8E:FB:07:2F:02:C6:33:06:E4
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       796F25EA3214D9C925877A012ED98665953E1CAB
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e33322e302f32302d3234203d3e203232303131.roa
Signing time:             Tue 07 Jul 2026 19:40:00 +0000
ROA not before:           Tue 07 Jul 2026 19:35:00 +0000
ROA not after:            Tue 06 Jul 2027 19:40:00 +0000
asID:                     22011
IP address blocks:        201.175.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6f:25:ea:32:14:d9:c9:25:87:7a:01:2e:d9:86:65:95:3e:1c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:35:00 2026 GMT
            Not After : Jul  6 19:40:00 2027 GMT
        Subject: CN=9BBA7A85BD8007E2C698B48EFB072F02C63306E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:77:b0:d1:5c:f6:da:2c:ab:4e:70:d3:58:
                    3c:e9:88:95:83:a2:a3:4c:f2:6d:a9:f2:17:3e:32:
                    88:42:00:94:e0:3a:2e:4a:9d:9d:15:eb:a1:17:5a:
                    fe:88:fe:bb:55:d9:4c:22:f6:6d:4c:12:37:7d:49:
                    8f:07:77:4d:84:7e:c9:c4:bd:25:e0:08:72:01:89:
                    d1:15:e5:28:52:1d:5a:72:da:77:36:a2:e8:21:6a:
                    ed:fc:b6:3f:88:29:a5:6d:78:fa:05:40:b8:8c:94:
                    49:1f:29:4d:b4:46:00:4d:f7:16:b9:3e:93:fc:11:
                    f9:d6:75:51:78:0b:b2:50:48:b6:3c:79:71:fb:3c:
                    3e:08:69:46:38:75:89:d5:65:ea:9d:6a:67:c4:50:
                    5d:d9:96:23:a0:75:99:0a:bf:9c:9f:b0:9a:16:08:
                    8d:1b:1c:21:ea:05:1f:d1:fc:3f:7f:bb:0a:f9:f6:
                    53:25:5f:09:f1:40:7b:d6:7d:27:fd:b1:8e:3c:f2:
                    06:ca:6d:8f:06:3c:36:be:6b:ca:f0:73:a9:a3:9a:
                    46:3e:1f:af:6b:d4:de:89:a0:15:f8:d2:7d:b0:15:
                    32:13:70:01:a0:f7:0f:45:16:6f:42:3b:f5:10:4e:
                    5d:45:6b:a5:23:da:ea:57:5f:54:aa:57:d1:1e:1d:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:7A:85:BD:80:07:E2:C6:98:B4:8E:FB:07:2F:02:C6:33:06:E4
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e33322e302f32302d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:e1:e9:63:dd:13:b6:1f:10:30:c0:e2:98:f0:14:de:c9:f7:
         35:2b:50:d8:dc:4b:a9:85:52:b8:df:b4:71:83:f5:eb:e1:3e:
         e8:6a:5c:e2:18:d7:3a:94:7a:e5:74:cb:4e:49:8d:3e:1e:08:
         d0:58:9e:4e:b4:e6:aa:ca:a1:3e:50:5d:c1:5d:8f:fa:f8:ae:
         01:c9:1d:20:8a:b4:80:ff:c3:30:44:f0:6f:ff:23:41:ca:48:
         9d:e7:3b:5c:dd:ad:3a:b2:0b:30:21:12:ec:74:ae:16:65:7a:
         b2:60:aa:19:14:50:68:46:0b:68:fb:ed:dc:bb:00:9b:cc:a9:
         08:8d:47:de:53:c3:c9:f1:d4:04:a5:f9:31:c7:07:05:ee:99:
         c1:df:73:ed:11:e8:7a:6a:15:27:5f:a0:4d:66:c8:c6:34:6b:
         99:51:b4:22:21:bb:2f:1a:f7:25:80:c4:c5:d5:1f:02:ba:fa:
         c9:14:96:f1:91:4c:4d:3b:01:cc:56:fc:96:00:53:1f:49:59:
         88:76:34:d3:b8:3f:2c:fe:8e:8f:9c:22:40:32:8e:ee:ed:82:
         a7:07:56:aa:3f:61:63:85:86:62:e8:82:72:cb:9e:04:ea:98:
         e4:cd:04:3e:11:6e:e0:4d:07:1b:e9:08:b4:0b:b4:38:b2:05:
         27:97:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:37:54 2026 by rpki-client