Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3130312e302e302f31362d3234203d3e2036343030.roa
File:                     3134382e3130312e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          BAJi0AIsuUF7JUlj/R5uIrz5ybP941IAkEoKrHB16QM=
Subject key identifier:   59:83:49:F8:ED:8F:C0:A1:7B:6C:F7:6F:DE:01:F4:1A:57:9E:AA:90
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       31D26F92FC9368D9011E88BC64B70909C9ACAC83
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3130312e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:17 +0000
ROA not before:           Tue 07 Jul 2026 14:46:17 +0000
ROA not after:            Tue 06 Jul 2027 14:51:17 +0000
asID:                     6400
IP address blocks:        148.101.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d2:6f:92:fc:93:68:d9:01:1e:88:bc:64:b7:09:09:c9:ac:ac:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:17 2026 GMT
            Not After : Jul  6 14:51:17 2027 GMT
        Subject: CN=598349F8ED8FC0A17B6CF76FDE01F41A579EAA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:3e:3a:0e:a3:09:e5:0c:77:c5:8c:81:ac:
                    44:f5:bf:a2:79:f5:fb:19:df:99:31:75:af:30:18:
                    63:11:dd:1e:13:2b:50:29:5a:01:42:47:24:3e:bd:
                    fe:3e:a8:f8:ab:8e:05:f3:62:cd:ad:f6:13:66:bd:
                    bb:53:56:ff:c6:c0:60:dd:7b:15:69:b2:63:6e:ff:
                    02:9b:f0:78:99:c6:3f:f1:bb:22:bf:f5:2a:a6:0f:
                    4f:5b:24:08:95:46:6a:a1:91:a5:46:54:56:c2:d9:
                    3d:fb:0e:ff:78:82:44:2e:00:18:d6:d8:f4:d5:3f:
                    ce:9b:39:da:28:a0:75:31:3d:22:2b:ed:fb:d9:d1:
                    c3:ef:a4:4f:b6:2d:75:d2:79:17:09:db:bf:0a:96:
                    e8:c2:f4:1d:08:3c:86:76:97:a5:d5:8d:f4:21:b9:
                    35:df:28:e9:d5:75:c3:00:6f:2b:78:03:e7:9d:90:
                    38:6b:a7:c7:af:f3:1b:43:19:98:3b:20:5a:8b:75:
                    62:12:18:19:65:67:c5:37:a4:bb:c5:23:d2:c8:f9:
                    40:3e:9e:d2:55:05:ec:38:e6:b5:e4:ee:5d:b3:ed:
                    40:22:44:7a:19:58:7e:50:7e:89:47:9c:ae:b7:2c:
                    4d:ef:9d:52:28:d8:9b:23:44:ae:b3:8d:ce:ac:4e:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:49:F8:ED:8F:C0:A1:7B:6C:F7:6F:DE:01:F4:1A:57:9E:AA:90
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3130312e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:8b:52:62:52:01:92:35:6c:83:66:dc:50:49:32:bc:78:
         8d:e2:f9:04:b4:a9:95:b4:c5:60:21:9a:55:68:51:dd:4d:46:
         e1:c8:41:99:61:c9:fc:6c:af:24:37:68:e2:10:cf:24:f7:94:
         49:dc:94:f3:f0:ef:35:d1:c3:8d:5d:14:ce:06:7e:5a:51:cf:
         d9:dd:98:e3:87:5e:d4:28:42:f7:69:c1:88:b7:91:46:26:8d:
         f8:a2:c4:9b:9d:0c:9e:be:54:a2:cd:0f:c0:d3:f2:d3:d8:50:
         bb:ce:ac:a5:98:a2:3c:9a:ff:0c:9d:c8:48:62:98:c0:2e:c6:
         f6:b7:96:88:9f:f2:11:fb:ab:26:0d:5a:32:fc:b0:c3:dd:53:
         2e:88:b2:dc:b8:e7:e8:c7:2b:db:6a:bc:d6:31:c4:72:77:06:
         56:dd:18:0d:97:2c:d1:7b:83:9b:48:25:14:34:8d:1c:3f:7f:
         2f:e2:c4:50:8b:47:7e:db:1a:c5:dd:49:6c:a7:cf:37:c1:66:
         e0:0e:d0:c4:dd:3b:ca:ca:52:07:7d:97:af:2c:9d:64:2d:83:
         e5:06:ed:7d:9b:70:3f:9b:bd:c1:61:a2:8d:73:c5:31:e4:c8:
         78:2f:6b:1d:7f:84:b2:bf:da:e0:31:8c:d2:57:e8:b5:d9:56:
         7b:97:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:15:36 2026 by rpki-client