Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3234203d3e2036353335.roa
File:                     3138362e3137322e302e302f31342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          VTXrCS7r5R4jaX2flITpmHTl8vOqr1Cr/nje4SJU1N4=
Subject key identifier:   78:31:FE:B9:29:5F:B5:06:AA:A1:9A:97:F1:BD:38:6A:BB:AD:72:30
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       7A4006B1A92CF4D52416F8E2012ED7ABA31AFA67
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3234203d3e2036353335.roa
Signing time:             Tue 19 Aug 2025 05:25:01 +0000
ROA not before:           Tue 19 Aug 2025 05:20:01 +0000
ROA not after:            Tue 18 Aug 2026 05:25:01 +0000
asID:                     6535
IP address blocks:        186.172.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:40:06:b1:a9:2c:f4:d5:24:16:f8:e2:01:2e:d7:ab:a3:1a:fa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Aug 19 05:20:01 2025 GMT
            Not After : Aug 18 05:25:01 2026 GMT
        Subject: CN=7831FEB9295FB506AAA19A97F1BD386ABBAD7230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:91:22:b1:d5:4b:f8:92:04:34:f4:07:4e:
                    97:b9:f5:0b:c1:a8:10:9b:6d:c5:13:7c:f4:f0:cf:
                    f4:58:cb:82:83:39:8b:c1:33:17:8c:a7:fb:51:0b:
                    d8:64:a0:50:88:dd:89:85:30:1c:f2:98:4a:57:e0:
                    e3:a4:d9:0e:f2:4f:21:a7:1e:7b:2f:2b:38:75:3f:
                    25:6a:c5:45:e9:96:f8:27:b3:34:21:d7:fb:4a:3b:
                    40:38:95:94:1a:62:26:7d:ed:54:63:9e:da:0d:89:
                    a0:c0:5f:9c:62:9f:e6:0e:d3:dd:56:3e:50:47:a5:
                    54:36:cb:fe:8e:ed:e8:b3:89:08:4a:3f:7a:a3:25:
                    cf:e8:83:62:45:5b:bf:6f:ec:22:fe:2c:c0:d6:18:
                    22:53:47:50:59:e6:c0:14:01:f9:fc:37:e1:79:18:
                    52:bb:5d:85:3d:2d:cd:28:bb:a5:f2:50:a8:d5:c4:
                    36:f0:b9:b1:62:d1:87:b7:2b:d9:34:02:5d:22:f1:
                    be:df:5e:3a:59:96:0d:de:32:45:90:3c:1d:4a:86:
                    be:d8:11:60:18:52:8f:84:86:49:90:23:81:0e:50:
                    3b:5b:8c:bf:15:c0:95:3b:b1:a4:8d:73:f3:b8:84:
                    c3:0f:04:43:11:23:09:d4:2c:f7:8d:91:36:4f:59:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:31:FE:B9:29:5F:B5:06:AA:A1:9A:97:F1:BD:38:6A:BB:AD:72:30
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:84:fb:47:a8:fc:1e:95:78:30:56:48:59:ca:4a:29:74:
         7a:d0:9f:58:10:57:a6:7c:1c:69:f6:7a:ad:af:d9:8b:1e:3f:
         be:b6:6e:80:b7:7f:37:c9:e8:98:a0:87:38:51:16:25:07:e3:
         f9:20:28:15:02:57:6b:b4:ef:c4:de:bc:51:4c:ee:13:42:81:
         30:49:ea:53:7d:78:15:a2:73:35:0c:fd:80:28:68:06:a8:06:
         c9:38:7d:a6:a7:1e:e4:52:0e:6b:c5:4d:2f:91:b7:e8:cd:28:
         86:52:37:9e:e8:e4:83:46:ef:9f:a9:35:c4:dc:b7:7b:f1:53:
         f4:fd:06:a5:21:3d:2d:e2:16:9d:f8:35:a1:f4:cb:4f:ab:66:
         35:dc:b6:de:59:c8:26:5e:40:b2:ef:01:ea:6c:07:90:c6:ef:
         e3:1c:40:9d:eb:7c:ac:35:d4:15:b0:ad:39:6e:cc:26:b7:60:
         e4:53:95:73:1e:04:4c:27:a7:47:3e:fb:3f:10:ab:2c:fd:c3:
         86:6c:8f:73:cb:b2:97:67:9e:9d:40:ed:82:cd:14:b7:88:47:
         16:07:c0:86:59:32:eb:49:80:ca:22:9b:6b:90:7f:8e:e0:fc:
         31:cd:1a:9d:10:5f:ea:7b:2a:8a:67:d4:9a:fd:cb:66:af:19:
         0d:b5:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:55:06 2025 by rpki-client