Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa
File:                     3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa (raw, json)
Hash identifier:          eK6xYsdTvTRFP5uvy14FJ9EhAlNT4eSVGWNZqLOjuPE=
Subject key identifier:   56:58:E9:ED:3F:CF:F1:72:05:9B:6F:FF:1B:F1:22:08:DE:EC:E9:00
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       617F72E301D5D034502260533AE8025403C4FDDF
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:16 +0000
ROA not before:           Tue 07 Jul 2026 14:46:16 +0000
ROA not after:            Tue 06 Jul 2027 14:51:16 +0000
asID:                     6400
IP address blocks:        190.166.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7f:72:e3:01:d5:d0:34:50:22:60:53:3a:e8:02:54:03:c4:fd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:16 2026 GMT
            Not After : Jul  6 14:51:16 2027 GMT
        Subject: CN=5658E9ED3FCFF172059B6FFF1BF12208DEECE900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:4b:9c:2a:bf:4c:e1:52:77:0f:e9:78:6f:
                    2c:fd:49:2d:48:63:4d:20:e1:6f:01:ca:be:a9:63:
                    ee:e7:a4:3d:d5:a4:cd:82:47:7b:1e:14:29:8b:b9:
                    04:8e:70:33:0f:0c:d7:46:4b:fb:48:d6:ec:5d:6f:
                    b0:4b:c0:bd:9b:00:be:6f:03:ef:14:d5:69:98:5c:
                    e8:46:b5:83:bf:53:50:33:89:a5:3c:14:0e:d4:76:
                    92:57:f5:ec:37:24:7c:aa:40:76:87:3d:cb:41:09:
                    ad:90:c6:f6:db:4a:66:1a:ce:f0:3d:d8:ef:79:85:
                    7d:0c:ff:dd:1a:b5:95:b9:f7:49:36:e6:d7:76:64:
                    cd:81:60:ae:0e:77:87:bf:5c:1f:3f:7e:61:cd:b2:
                    56:2c:cf:f1:c4:89:92:75:f5:ba:23:2a:4e:24:b6:
                    6a:cf:bb:54:12:c0:ac:33:9e:79:5d:64:c9:d1:6a:
                    30:40:7f:46:b6:32:92:ab:85:6a:1c:c6:23:fe:e3:
                    4f:ce:90:41:56:0b:15:c4:95:56:03:8e:e1:ec:7f:
                    ea:fd:67:b8:fb:b8:d8:d5:dd:a7:7b:9e:06:13:5d:
                    15:d1:28:38:fb:87:0f:05:11:d8:f3:77:c2:74:25:
                    ed:2f:24:1b:54:d1:c0:dc:0c:9d:39:9e:4a:f2:20:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:58:E9:ED:3F:CF:F1:72:05:9B:6F:FF:1B:F1:22:08:DE:EC:E9:00
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.166.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:08:b5:98:cb:53:34:da:40:73:13:a5:27:95:7f:da:b5:
         cb:65:43:2e:18:7f:26:11:fd:dd:f2:76:c8:b3:c4:17:48:8a:
         a4:f4:32:c8:c2:f4:4d:df:db:e6:9b:e5:a1:d5:4d:a7:48:37:
         5d:e7:76:59:48:a9:b1:de:61:f6:c4:6f:f4:ed:ad:65:45:d2:
         1d:5d:62:6b:5c:8e:fc:72:8c:62:40:6f:45:fa:58:5d:9e:6d:
         22:1c:95:52:c2:5a:b7:78:ca:e8:ad:00:0c:41:1a:79:a0:37:
         a0:80:1a:82:3a:d2:be:da:44:1e:01:cc:77:cb:f2:84:6b:b9:
         41:8c:09:b9:6f:f0:8c:57:38:3e:95:27:66:7a:42:0a:d6:30:
         ce:ba:0e:d0:61:62:21:1f:b4:02:52:40:4a:b4:ec:7f:76:78:
         02:2d:92:96:7e:38:9a:e9:b4:72:bf:4f:49:29:54:11:40:0c:
         53:e8:9b:99:d5:36:52:ef:2e:a7:d1:8f:06:ec:5e:61:db:86:
         aa:cf:e5:d7:b8:d6:03:ea:6d:b0:a1:ba:2e:55:4f:7f:23:4a:
         b4:13:e2:84:43:51:10:13:f1:45:5c:d6:25:67:dd:8c:65:e3:
         e4:a1:3a:d6:4b:c2:3f:59:c6:f8:20:c7:b5:4f:c8:95:d9:70:
         5b:4a:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:41 2026 by rpki-client