Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e302e302f31392d3234203d3e2036343030.roa
File:                     3230302e38382e302e302f31392d3234203d3e2036343030.roa (raw, json)
Hash identifier:          Rk13xKTYL0HzHsIci9t55UAzW/NvwAMv0I/Kns85wQw=
Subject key identifier:   A5:D2:41:D8:B0:79:37:8C:BB:95:2D:27:9B:A3:1A:3D:62:AA:8B:3B
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       11BF6A1F83D4C67923BC4026C1590C500C327980
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e302e302f31392d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:23 +0000
ROA not before:           Tue 07 Jul 2026 14:46:23 +0000
ROA not after:            Tue 06 Jul 2027 14:51:23 +0000
asID:                     6400
IP address blocks:        200.88.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bf:6a:1f:83:d4:c6:79:23:bc:40:26:c1:59:0c:50:0c:32:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:23 2026 GMT
            Not After : Jul  6 14:51:23 2027 GMT
        Subject: CN=A5D241D8B079378CBB952D279BA31A3D62AA8B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7a:73:a1:26:c5:c6:11:6c:9d:e0:b7:f0:68:
                    30:7f:5e:47:9c:68:ed:d5:62:be:ea:84:c1:eb:1d:
                    00:ac:80:d4:79:83:cd:e9:06:6f:5d:37:3a:61:fb:
                    8b:4e:5e:10:4f:89:ab:6d:08:18:a2:8b:f6:46:4d:
                    95:fc:dc:0b:f6:eb:15:75:b6:04:b5:0b:92:30:16:
                    13:1d:fd:bb:7b:f6:de:50:e6:9f:ab:c0:9a:c5:35:
                    41:7c:84:54:8a:73:30:0c:b2:d2:95:31:c5:3b:2d:
                    fb:93:fc:87:6e:81:15:2e:29:96:25:d8:e3:fc:50:
                    03:79:bc:4e:db:91:88:f8:5d:eb:32:8c:e1:9d:3e:
                    da:67:a5:6b:21:51:36:9c:22:18:51:f8:7d:7b:e0:
                    95:65:2f:eb:e3:e5:98:be:82:89:9e:6c:9e:67:87:
                    4c:f8:78:20:d2:3c:b0:3d:70:82:1c:a2:31:6e:68:
                    94:c3:12:63:ff:ad:1b:c8:89:8e:98:f3:fc:99:4e:
                    5b:e8:0f:71:62:79:92:b0:93:64:39:93:2c:33:aa:
                    d4:ee:a2:e0:c8:97:ff:0f:72:ee:5f:2e:d0:a1:b6:
                    a7:51:cc:d9:34:37:0f:13:19:15:3e:19:55:67:14:
                    86:3f:42:cf:44:32:3d:00:77:a0:1f:2c:3e:6c:65:
                    5a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D2:41:D8:B0:79:37:8C:BB:95:2D:27:9B:A3:1A:3D:62:AA:8B:3B
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e302e302f31392d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.88.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:99:2f:58:9b:3e:0e:cb:49:40:28:c2:36:2b:36:8c:5f:df:
         69:fd:16:85:a0:05:98:d1:5d:39:b4:c0:6e:3a:b6:b6:b7:8b:
         da:17:e7:82:e6:1b:19:55:8e:44:8e:61:2e:01:a6:2b:dd:7a:
         8c:3e:f0:e9:1c:36:6a:76:e8:b6:30:17:8d:f3:cb:a6:10:01:
         08:af:d9:1e:e1:b6:88:7b:e7:c6:64:6e:ab:f2:29:8b:e9:0d:
         ff:e9:73:9f:86:92:1d:3a:93:cf:f2:8f:4a:9e:29:a2:19:29:
         9e:ad:4b:85:43:e3:c0:5a:1b:42:39:79:28:a1:55:c5:6d:2d:
         a6:46:6c:85:b2:b1:30:de:33:57:a4:26:5d:85:45:20:9c:f5:
         28:e8:0e:40:99:ed:8d:7a:b0:c0:96:da:7d:78:34:62:98:ad:
         8a:ba:2d:3f:c8:dd:06:47:21:8a:f4:1a:7a:9e:a2:e0:91:24:
         c1:9f:29:6f:d4:19:11:25:0f:ba:4d:6b:9e:03:20:60:2f:83:
         a3:65:4c:7e:10:70:e4:c9:73:57:e9:43:18:37:ca:9f:85:e5:
         00:a3:38:c6:12:3b:ad:e0:df:8a:74:60:d7:96:a0:84:ad:9a:
         cb:03:c3:8a:94:3f:85:3e:d9:d3:52:1f:d0:49:88:61:ec:64:
         15:45:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:18 2026 by rpki-client