Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3235352e302e302f31362d3234203d3e2036343030.roa
File:                     3134382e3235352e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          DWk9u6kGDRpalWj5+ueP1douoxB96McSlmdC+87Uku8=
Subject key identifier:   B1:4B:0B:D2:E7:A8:54:9D:09:88:15:DA:08:0C:CA:56:0D:38:F3:A4
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       097146530F5A880F16421F54753548741C9217DE
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3235352e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:24 +0000
ROA not before:           Tue 07 Jul 2026 14:46:24 +0000
ROA not after:            Tue 06 Jul 2027 14:51:24 +0000
asID:                     6400
IP address blocks:        148.255.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:71:46:53:0f:5a:88:0f:16:42:1f:54:75:35:48:74:1c:92:17:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:24 2026 GMT
            Not After : Jul  6 14:51:24 2027 GMT
        Subject: CN=B14B0BD2E7A8549D098815DA080CCA560D38F3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:51:82:37:b6:f8:24:06:2f:dc:0a:bc:2d:
                    11:e6:d5:f7:98:a4:82:53:63:b2:2f:92:e2:7e:58:
                    21:7d:b9:70:96:cc:99:ad:e4:ce:08:f9:f5:84:31:
                    70:ed:1f:f0:6a:0b:4d:62:41:32:9a:d7:a1:0b:c7:
                    18:da:f8:ee:53:26:89:d8:e6:f7:e0:8b:fd:b4:5f:
                    49:41:de:07:dc:9d:c3:df:a7:4b:42:3c:3c:ff:1b:
                    cf:d3:c6:92:0d:86:97:35:32:95:e8:af:98:e6:0f:
                    2d:1d:92:f3:a3:dc:69:d1:54:a1:ac:f7:7c:e4:bf:
                    37:10:3f:18:80:9c:04:6b:90:1a:6e:13:25:af:aa:
                    44:f9:27:59:61:5e:82:bf:b8:0a:b4:59:1e:4a:fe:
                    80:bb:9b:ef:40:c6:06:45:13:ee:68:a6:80:55:c8:
                    91:5b:a6:af:af:30:fe:0a:2a:e2:96:6f:98:2f:bf:
                    61:cb:67:02:6d:51:bd:b0:70:53:ce:95:44:6d:be:
                    99:ae:4c:db:cf:65:e9:b2:cc:6b:60:cd:78:7c:f8:
                    ac:c6:ad:9d:e5:2e:9b:8d:be:a6:2b:33:76:ed:53:
                    c4:21:a6:d4:fe:49:6c:64:99:07:d8:81:ac:66:3e:
                    42:83:ad:ff:6b:b2:10:31:17:d3:0b:b4:c5:41:35:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:0B:D2:E7:A8:54:9D:09:88:15:DA:08:0C:CA:56:0D:38:F3:A4
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3235352e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:e2:b4:b3:80:82:99:82:7b:0e:3d:79:a8:ad:21:b8:f6:
         a8:3b:f2:1f:b9:83:a7:13:a0:de:c8:59:42:6e:47:81:f7:87:
         7c:be:14:15:58:ec:99:97:73:07:98:ce:2a:4d:c8:d6:88:a1:
         00:a1:2e:af:0a:d1:8c:90:1f:f1:19:b2:43:1a:ed:da:65:9d:
         c4:c6:a2:fb:ee:cc:69:ec:d1:a6:e2:09:1b:4c:90:c5:db:53:
         df:ca:c7:41:0b:95:34:79:db:37:5d:6d:cc:5c:e3:aa:58:da:
         fe:7a:87:0a:07:30:76:34:60:9c:bf:64:51:b8:26:28:94:bb:
         1e:a1:28:da:27:d8:8e:66:cd:fb:40:70:80:a8:24:61:f0:c0:
         2d:4f:4c:bb:ac:63:09:61:65:88:16:c7:60:33:bc:da:a9:a5:
         2c:7f:b3:3a:f5:b6:cd:64:ec:3b:ba:bb:85:65:2b:6c:d8:e5:
         6e:62:d3:4f:06:cf:95:86:6e:5b:25:5e:72:32:62:9e:4e:0a:
         45:91:62:6a:d2:5c:6f:11:e1:29:d5:7b:eb:1f:16:5a:20:17:
         da:77:dc:d0:be:2d:c3:ab:80:b3:b1:5e:a8:b3:00:57:65:04:
         f9:21:cf:5d:f4:72:4c:52:74:59:6d:28:7d:63:92:52:be:d0:
         76:0b:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:26:42 2026 by rpki-client