Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e302e302f31372d3234203d3e2036343030.roa
File:                     3139302e3136362e302e302f31372d3234203d3e2036343030.roa (raw, json)
Hash identifier:          uRdHEH2t2BdXGG/07J6m9TIeVx2b/wRAiTsc19DyA0c=
Subject key identifier:   21:0A:83:85:06:20:63:1B:81:5A:A6:33:11:80:4A:99:3C:A1:35:0F
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       31B9DC541063C453094E02C841897FA8434E7846
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e302e302f31372d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:20 +0000
ROA not before:           Tue 07 Jul 2026 14:46:20 +0000
ROA not after:            Tue 06 Jul 2027 14:51:20 +0000
asID:                     6400
IP address blocks:        190.166.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b9:dc:54:10:63:c4:53:09:4e:02:c8:41:89:7f:a8:43:4e:78:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:20 2026 GMT
            Not After : Jul  6 14:51:20 2027 GMT
        Subject: CN=210A83850620631B815AA63311804A993CA1350F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:43:ce:2a:a7:8c:96:33:f4:a2:26:1b:c9:
                    8c:77:30:2f:dc:66:f6:09:df:04:e6:08:09:05:f0:
                    51:b3:3d:22:b5:2b:c4:2c:b0:3f:84:7f:85:3b:5e:
                    f1:fb:e9:9d:9a:50:62:cc:20:43:91:f6:66:0f:4d:
                    3b:76:80:a3:73:55:15:12:7b:4a:79:8f:17:78:dd:
                    01:0f:e7:b4:ef:18:c4:15:d9:70:33:45:9d:08:8c:
                    05:40:e1:9e:79:f6:9b:a1:dd:64:2b:21:2d:53:ce:
                    0f:66:a0:59:7a:63:08:d3:1b:f5:f4:3d:12:89:98:
                    d9:96:9c:a6:36:29:ec:83:1c:13:e9:ec:ec:50:bf:
                    c3:1f:4f:31:8a:90:90:94:70:2c:97:a5:ef:71:5c:
                    6e:ca:f6:5d:5b:42:0d:8b:5a:13:41:e6:77:8c:5b:
                    04:dc:ab:f2:92:a8:f1:9e:79:d9:dc:37:9e:77:a1:
                    ab:8b:07:d8:cd:a6:a8:04:75:98:c4:31:18:e8:0f:
                    ec:84:57:ff:ca:3f:4a:14:54:bf:56:e4:0a:dc:13:
                    74:b3:92:65:ec:da:81:d8:7f:1f:c2:43:1e:d1:e3:
                    c7:39:06:e1:eb:2d:e6:71:41:46:e5:50:7a:a7:37:
                    3f:fd:a7:e9:26:99:5d:b8:57:7e:17:c0:8c:3b:4f:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0A:83:85:06:20:63:1B:81:5A:A6:33:11:80:4A:99:3C:A1:35:0F
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e302e302f31372d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.166.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:9c:03:3d:a8:c1:b5:02:ba:a7:ef:50:dd:36:0f:eb:c7:
         fe:e0:7e:2d:1c:6f:dd:55:d7:49:5c:f7:82:91:16:96:a3:24:
         82:f5:97:d4:e2:65:3c:2f:ea:e1:87:de:84:8b:01:91:f8:94:
         fc:27:7f:6a:25:63:df:e7:49:3f:5c:05:9c:0e:98:50:18:4c:
         a1:03:e7:30:6e:65:ff:13:8d:7c:fa:b0:26:1e:88:ec:b0:a0:
         5c:35:08:84:07:be:54:3d:1a:b7:a6:ed:b4:32:4a:ca:92:05:
         e3:13:e9:77:5b:8e:0d:b8:d8:81:71:30:e7:cf:2f:a1:bb:88:
         a8:db:8e:5a:d4:45:7f:87:db:4a:a3:ed:41:3f:b6:44:35:18:
         d4:89:2b:c8:f2:89:8f:32:1d:c2:67:31:8a:19:d9:0f:2d:2c:
         18:b5:41:75:4f:d4:da:6d:c7:12:ad:79:08:15:00:b0:e6:99:
         9b:be:3d:04:72:58:aa:a4:ad:58:2b:f8:4b:2c:a1:6c:16:15:
         02:f6:1b:2a:13:e1:7d:38:48:b0:76:d0:46:3b:2e:c3:71:fe:
         1c:ed:a4:46:0f:b6:c7:f0:0a:3f:3c:dc:f8:11:4f:8c:e9:d2:
         a9:40:68:54:4f:fb:9a:01:85:21:bf:19:45:44:71:66:e0:b5:
         40:f6:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:57 2026 by rpki-client