Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e362e302e302f31362d3234203d3e2036343030.roa
File:                     3138362e362e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          ngRt7z+u+86n8j96dl035FEsFCmGFltHJfkA1SzPh4Q=
Subject key identifier:   13:F4:0F:24:62:88:6D:D9:43:09:D7:B7:34:FD:70:11:0E:ED:3F:AE
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       7233E3739CAC278594FEDC7749A720421238D6B6
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e362e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:16 +0000
ROA not before:           Tue 07 Jul 2026 14:46:16 +0000
ROA not after:            Tue 06 Jul 2027 14:51:16 +0000
asID:                     6400
IP address blocks:        186.6.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:33:e3:73:9c:ac:27:85:94:fe:dc:77:49:a7:20:42:12:38:d6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:16 2026 GMT
            Not After : Jul  6 14:51:16 2027 GMT
        Subject: CN=13F40F2462886DD94309D7B734FD70110EED3FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:21:8c:85:92:90:d8:3a:fa:2f:51:82:cc:
                    1a:72:2c:82:3e:db:f4:7f:04:4b:e8:bb:5c:40:66:
                    b4:2d:70:13:14:3c:94:26:2a:1d:7a:a9:df:c2:ce:
                    1a:59:cb:8d:bb:65:da:95:cb:b7:ef:f5:81:66:2a:
                    00:33:b4:95:84:6f:2f:33:4f:af:f1:0d:8e:a0:2e:
                    13:b7:9a:c3:32:5a:04:b6:9f:d4:a2:fd:4a:af:4b:
                    b5:01:36:f0:b2:01:00:e9:0d:24:c9:41:51:17:e0:
                    6a:4e:7e:63:80:7a:e8:e0:76:aa:5f:b8:01:e2:46:
                    24:d8:12:05:60:a8:9a:5e:a6:be:31:27:bc:d5:05:
                    c9:ba:35:66:cc:d6:1b:69:f8:1a:45:6f:24:89:81:
                    81:56:bd:f3:d3:6e:11:04:81:f5:98:f3:88:65:26:
                    47:b0:03:d3:22:16:19:aa:7d:2a:ac:e7:e0:28:db:
                    b0:0f:92:47:d2:01:2f:59:79:2e:d7:99:eb:f3:a6:
                    6b:6f:7d:ef:14:47:88:43:32:84:3e:41:49:8f:7c:
                    46:cb:32:6f:bb:b0:c8:8c:13:ae:f5:78:8f:50:dd:
                    44:28:3d:d7:ee:cf:86:44:f7:b9:de:c4:a2:7e:e0:
                    a0:e6:57:0f:5a:54:46:17:49:86:ae:b7:35:8e:be:
                    69:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:0F:24:62:88:6D:D9:43:09:D7:B7:34:FD:70:11:0E:ED:3F:AE
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e362e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:4c:48:bd:1d:cb:60:c6:a0:91:c7:04:ad:2f:a5:8e:a0:
         3c:6d:82:d5:1c:f9:83:b7:6c:d7:cf:23:14:64:42:13:b0:e4:
         5e:68:4d:22:f0:e8:98:11:f3:fc:80:76:27:8a:3e:f5:4b:ac:
         00:98:64:cb:b7:dd:21:2b:34:8a:05:62:8d:1f:23:18:c3:e9:
         8c:51:7b:21:21:a2:0d:95:de:3f:ad:b7:e9:2c:15:70:24:b3:
         7a:b2:fe:2f:9f:f5:de:30:08:d1:6c:0a:59:26:3d:be:66:e4:
         83:fc:2a:9e:69:51:16:2d:f8:8f:a9:3b:51:38:50:e8:e5:f4:
         b1:70:09:bc:11:df:eb:4c:47:23:ae:2f:89:95:c4:48:28:f6:
         17:0a:3c:d7:48:95:55:01:f4:89:47:5b:ad:a5:11:9d:32:56:
         e3:0f:b4:52:53:13:23:f5:09:10:a5:d2:0a:09:26:57:ee:c9:
         e8:ce:86:99:86:73:a6:1d:88:a4:8a:53:68:1e:53:0d:2f:40:
         37:7c:6a:98:ec:e7:f7:d2:c9:7d:b2:10:bc:b5:35:4b:85:76:
         f1:24:1b:8d:81:f8:75:f7:b9:42:01:3c:1c:55:a2:79:70:5f:
         ef:1e:95:aa:1c:9b:c7:e2:4c:58:a6:95:14:e6:fa:ae:76:17:
         c9:f8:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:15:14 2026 by rpki-client