Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e32342e302f32312d3234203d3e2037303439.roa
File:                     3230302e36312e32342e302f32312d3234203d3e2037303439.roa (raw, json)
Hash identifier:          5dnCLICyleBbYMXu8b8Cm19hCYoheIfloWAw0FdNQOU=
Subject key identifier:   0A:62:5F:BA:98:91:23:36:D1:0B:3D:70:4A:78:A1:C3:DC:1E:FB:DA
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       786079E13023F4579E82A8DA0661885E6526EDDB
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e32342e302f32312d3234203d3e2037303439.roa
Signing time:             Fri 27 Mar 2026 14:36:17 +0000
ROA not before:           Fri 27 Mar 2026 14:31:17 +0000
ROA not after:            Fri 26 Mar 2027 14:36:17 +0000
asID:                     7049
IP address blocks:        200.61.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 03:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:60:79:e1:30:23:f4:57:9e:82:a8:da:06:61:88:5e:65:26:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Mar 27 14:31:17 2026 GMT
            Not After : Mar 26 14:36:17 2027 GMT
        Subject: CN=0A625FBA98912336D10B3D704A78A1C3DC1EFBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:73:18:e6:2b:c0:e5:e9:e3:48:18:c3:8d:
                    6b:43:14:a8:a9:09:19:4a:80:d2:4f:c0:d2:5e:42:
                    20:f9:16:a8:20:4e:b4:ee:87:98:01:5c:0d:ed:0d:
                    2a:75:46:d6:fa:ef:ae:e3:6b:e5:85:af:70:a0:d0:
                    70:72:3b:26:db:8e:50:b5:62:35:8e:46:be:a3:02:
                    9c:3d:51:de:83:34:c6:4b:ae:39:f4:e6:54:8a:a8:
                    e1:21:f6:f9:f0:31:35:4e:aa:f9:cd:f5:c2:54:59:
                    73:03:04:c3:1b:46:1e:a3:69:f2:76:15:a2:2c:15:
                    6f:f7:1e:7d:ad:96:3d:09:c1:21:e9:b5:25:d7:3a:
                    c1:24:dd:0e:ca:b9:d4:f2:41:b0:45:17:c5:c2:0d:
                    99:94:74:3e:38:a6:53:0e:67:21:0d:51:ea:34:f3:
                    8f:df:50:e8:1f:72:92:bf:fa:ee:c8:91:34:39:93:
                    1b:1b:c2:02:25:8b:29:04:6c:f7:d8:c6:1f:60:cd:
                    0b:48:40:2e:ef:fe:21:c3:70:f1:f1:ba:38:98:e5:
                    37:14:cc:80:14:3d:79:f0:c6:fa:04:7a:8b:17:1f:
                    61:62:c8:79:f5:1c:30:a2:f2:75:2d:26:13:56:41:
                    fa:ca:dd:c0:bd:6e:ec:14:32:0e:b3:29:52:0e:5a:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:62:5F:BA:98:91:23:36:D1:0B:3D:70:4A:78:A1:C3:DC:1E:FB:DA
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e32342e302f32312d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:56:4e:1a:d9:36:6f:c1:43:99:a8:64:bd:9c:6e:90:32:69:
         8c:3b:24:98:23:9a:76:35:a2:f8:09:16:70:4d:63:5a:47:d7:
         46:20:e5:29:4e:70:70:fa:49:88:6c:99:6c:1a:44:82:67:01:
         c2:ef:65:f6:33:46:0a:60:85:0c:12:cf:61:ae:c2:08:99:98:
         44:af:b0:04:70:9e:38:5b:19:b2:f4:8c:17:80:91:ab:17:28:
         f0:db:05:df:c9:78:43:4d:23:3e:18:2b:73:05:68:90:75:61:
         9a:94:ca:a5:95:94:10:5e:55:05:2b:d0:b0:d3:94:42:ba:56:
         b8:d6:74:b6:1d:f5:9c:d5:63:a6:63:62:01:20:a8:ea:b4:57:
         25:ce:31:fe:a1:fb:c7:28:8d:bb:c3:70:01:a4:09:34:51:6a:
         ad:f8:c9:62:67:eb:8b:94:8d:5f:1b:5a:99:5c:58:27:e0:55:
         3e:6c:f4:b3:c0:53:5b:9f:7a:b5:53:71:6a:ed:76:7c:26:63:
         90:67:d2:b6:fc:89:33:f5:22:bc:9e:d5:77:12:a8:53:dc:7f:
         9d:82:ee:ae:cf:92:71:53:3d:f3:f1:b0:d3:61:28:22:c0:df:
         c2:ca:c9:40:d1:95:a6:81:22:32:53:f4:47:b8:35:6a:cb:f4:
         ed:b1:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:44:14 2026 by rpki-client