Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e302e302e302f31362d3234203d3e2036343030.roa
File:                     3134382e302e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          q4QVVzyTaYhDwrkqUayfZbBsKa8uPsVpoxg1T/OEoHM=
Subject key identifier:   59:FC:E8:98:BB:51:3F:32:DF:50:15:08:64:42:D6:C9:73:68:48:2B
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       2C1833388073BAFDAA8670F29469BBB8F3DDDDF0
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e302e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:17 +0000
ROA not before:           Tue 07 Jul 2026 14:46:17 +0000
ROA not after:            Tue 06 Jul 2027 14:51:17 +0000
asID:                     6400
IP address blocks:        148.0.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:18:33:38:80:73:ba:fd:aa:86:70:f2:94:69:bb:b8:f3:dd:dd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:17 2026 GMT
            Not After : Jul  6 14:51:17 2027 GMT
        Subject: CN=59FCE898BB513F32DF5015086442D6C97368482B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:eb:f6:45:db:76:c9:81:be:6d:51:f5:42:
                    d7:7e:ba:76:4c:42:a1:59:a4:73:51:95:4d:75:02:
                    6b:73:18:1a:14:e4:a6:b5:12:80:2f:a2:61:07:27:
                    81:46:73:71:75:41:2e:5c:cb:f0:ba:89:cf:b6:c6:
                    b3:87:c9:5a:eb:77:04:54:fe:7a:08:02:4a:ae:1a:
                    a9:50:e4:6e:25:10:3b:f7:99:26:f7:ba:32:19:7c:
                    89:4d:0d:c4:d8:22:4a:9e:03:f4:f9:af:30:eb:f2:
                    4a:15:e8:3f:b7:d3:25:c6:fa:79:41:55:e3:65:ee:
                    b4:c3:ae:78:67:c3:db:16:46:33:1e:60:30:bb:b1:
                    58:0d:ec:68:5b:36:54:2d:6b:3e:df:97:44:76:d6:
                    78:a2:f2:d9:a7:56:0b:7e:11:54:7a:0b:b2:18:eb:
                    ec:a6:1c:5b:b8:b3:25:20:b4:a1:30:34:33:c8:8e:
                    e1:b3:43:e7:bd:5f:1b:d9:9e:46:66:e1:0b:b5:65:
                    2c:00:3c:e7:68:ba:0e:a6:fa:59:0f:52:04:5b:f3:
                    f5:28:24:20:9e:23:e0:f5:1c:2b:18:33:ae:63:8c:
                    07:35:ec:de:d1:4e:81:c0:6d:d7:fc:77:44:df:2c:
                    0c:ff:fb:1e:16:48:88:6c:30:72:ed:fd:be:18:20:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:E8:98:BB:51:3F:32:DF:50:15:08:64:42:D6:C9:73:68:48:2B
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e302e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:22:1f:56:a0:15:de:17:e1:81:a8:84:a8:de:39:51:6e:8f:
         d8:40:ae:50:b2:aa:4b:dd:65:20:8e:1f:62:86:d2:0a:24:c5:
         e4:5e:b2:ab:23:f7:ff:39:44:53:b7:a0:3c:af:78:25:95:db:
         be:00:41:08:b0:2f:3f:f1:2e:a9:d6:3c:33:0a:fc:5e:22:1e:
         04:af:c1:0b:88:a4:90:f0:dd:69:c5:2c:ff:f3:85:2a:b4:1c:
         2f:95:72:2b:39:33:14:f6:c4:10:a6:19:7f:40:11:b0:0e:10:
         bc:86:c7:01:db:a7:9e:e3:49:0c:bc:42:76:8f:d8:7a:9a:cb:
         d6:25:da:6e:ae:d2:bb:58:99:70:be:db:15:96:2e:65:fb:9b:
         65:35:54:a7:4c:d5:cc:09:fc:7f:e4:aa:86:00:99:6e:f8:08:
         56:5e:14:7a:8f:04:3b:cb:d5:8c:0b:30:c9:c6:91:38:69:ce:
         ab:e7:45:e5:14:66:e9:f7:22:9b:1c:81:28:b3:a9:99:9d:12:
         a0:fe:e2:1d:1a:9e:1b:bf:b4:1c:bc:ed:51:a5:5d:5d:1f:79:
         bd:b9:d7:d7:e8:3b:1a:a3:03:f4:bd:9a:fb:cc:af:b0:31:0d:
         ed:3b:f5:b3:83:9a:aa:dc:8b:22:78:fd:12:fd:93:9c:3b:c4:
         62:f1:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:28:58 2026 by rpki-client