Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35372e38302e302f32302d3234203d3e203232393038.roa
File:                     3230302e35372e38302e302f32302d3234203d3e203232393038.roa (raw, json)
Hash identifier:          Qia5P9KABcQbZFEmOQlA/CwWLg8CfXSJHBBCb1o7Hmo=
Subject key identifier:   67:2D:B6:15:38:28:30:F9:4B:39:01:F8:95:DC:18:3D:77:AF:39:D4
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       65804F12C1910561D4BF30F21865B161A0300A2B
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35372e38302e302f32302d3234203d3e203232393038.roa
Signing time:             Fri 27 Mar 2026 01:20:00 +0000
ROA not before:           Fri 27 Mar 2026 01:15:00 +0000
ROA not after:            Fri 26 Mar 2027 01:20:00 +0000
asID:                     22908
IP address blocks:        200.57.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 08:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:80:4f:12:c1:91:05:61:d4:bf:30:f2:18:65:b1:61:a0:30:0a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Mar 27 01:15:00 2026 GMT
            Not After : Mar 26 01:20:00 2027 GMT
        Subject: CN=672DB615382830F94B3901F895DC183D77AF39D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:fe:b8:b6:34:d4:a5:a6:4d:80:3a:34:ab:
                    8e:46:6a:07:97:e8:7c:0e:bd:97:a1:21:b6:d8:c5:
                    e8:f9:69:8e:37:16:21:55:8c:cc:ec:87:fa:80:df:
                    5e:ac:06:02:58:f5:03:f4:0f:80:76:d5:71:1d:31:
                    59:9b:e4:31:01:ce:9b:3d:04:59:32:33:32:1f:7d:
                    85:31:67:47:59:14:1c:bd:24:06:ab:4c:76:ef:7e:
                    8c:c9:fc:18:14:25:54:b0:f1:0a:b0:ee:32:59:1a:
                    ad:2f:41:00:b1:7d:ca:4f:0f:77:5a:92:f7:e9:93:
                    aa:f2:f6:36:d4:1b:b2:b9:52:55:56:5b:35:f5:1c:
                    d8:4c:50:19:31:c1:c5:c4:9d:e7:79:e9:8c:50:ff:
                    cb:9d:ff:4d:85:91:e2:b7:a6:ca:42:4c:8a:9e:eb:
                    96:d0:80:97:02:99:47:34:60:c9:a0:4e:c1:9c:ba:
                    32:2c:0d:7e:8c:66:78:3c:32:a3:e5:b5:6a:30:44:
                    f0:8f:cc:52:5b:f3:12:ae:77:a4:11:41:2a:a6:65:
                    0f:3b:02:02:a4:9e:88:29:b3:4b:7c:a9:a0:84:eb:
                    27:0e:87:68:5e:e9:96:4a:de:3e:d9:c4:49:f4:e3:
                    84:dc:a9:21:e1:6f:19:c5:4c:da:4f:23:09:cf:1d:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:B6:15:38:28:30:F9:4B:39:01:F8:95:DC:18:3D:77:AF:39:D4
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230302e35372e38302e302f32302d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:65:13:e3:d2:98:79:16:db:50:5f:95:31:d6:0e:b9:2e:1d:
         df:9f:c8:66:15:1f:f7:85:f8:d8:ce:5b:87:e8:5f:06:0d:53:
         db:5a:5d:1b:2d:c7:e0:86:be:98:6a:a8:29:60:21:f4:c6:c1:
         31:07:1d:33:71:8b:61:c0:b7:93:7b:94:4e:c6:bb:b0:1f:64:
         50:80:5d:cb:3c:1a:10:71:8f:99:11:37:d1:63:54:09:da:fb:
         e4:ab:9d:ad:26:ff:c5:e8:58:f8:f0:7f:57:9e:04:e1:1b:96:
         bb:87:63:a3:f6:3f:64:13:b6:a8:23:52:2b:78:67:d4:6a:b7:
         95:06:36:8c:53:c7:aa:0a:50:7c:6e:bf:0a:d1:eb:b1:f5:2f:
         c3:47:59:f6:ab:a0:39:84:b3:8e:e6:4d:08:1e:5d:e0:7d:a2:
         80:0d:16:a5:a2:22:88:02:ea:10:df:16:fc:4b:e0:e6:30:c6:
         cb:ae:d6:ae:70:a6:d1:bd:5c:c9:f8:cb:8f:bc:53:81:9b:e4:
         c8:d7:0a:23:1c:62:59:88:10:fb:c7:ba:a7:b6:dc:12:4e:d1:
         b6:84:00:99:c1:99:bc:c2:8a:9d:f4:2c:05:42:b4:f0:5e:1c:
         59:e5:e9:6f:27:72:68:38:69:0e:ff:52:78:7c:a8:f0:21:6c:
         10:8c:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:12 2026 by rpki-client