Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e3139322e302f31382d3234203d3e2036343030.roa
File:                     3230302e38382e3139322e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          4OjZZrMi3mdFRSAx7tPIdtiGLPU8MRzgYZtUvY9Q0hQ=
Subject key identifier:   32:1D:19:2C:53:A5:A6:07:71:FA:1A:EF:56:95:B8:67:8A:43:E4:3B
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       53E2906DB3F14E35BA78EC2A187130F80B0E28A9
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e3139322e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:23 +0000
ROA not before:           Tue 07 Jul 2026 14:46:23 +0000
ROA not after:            Tue 06 Jul 2027 14:51:23 +0000
asID:                     6400
IP address blocks:        200.88.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e2:90:6d:b3:f1:4e:35:ba:78:ec:2a:18:71:30:f8:0b:0e:28:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:23 2026 GMT
            Not After : Jul  6 14:51:23 2027 GMT
        Subject: CN=321D192C53A5A60771FA1AEF5695B8678A43E43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:98:b0:39:5b:89:82:44:81:60:da:0f:ef:
                    86:88:1b:0f:21:44:a9:ab:aa:9a:ec:32:65:d2:40:
                    1e:93:91:23:b5:8e:bb:8f:1d:81:43:8a:99:5a:57:
                    ca:48:84:6d:96:64:3e:79:e3:a7:8f:83:18:fb:4f:
                    64:84:0a:2f:21:91:ab:2c:c1:c9:a6:bf:44:49:aa:
                    f8:b0:b3:8e:ac:a7:7f:9a:09:96:bd:a9:ed:62:13:
                    06:2c:c9:6d:f8:aa:13:fa:22:6a:c6:6a:39:94:de:
                    5d:1b:b6:07:99:f2:76:19:a0:13:09:51:21:25:99:
                    b7:8f:27:4d:b7:a9:64:c6:bc:d8:38:a7:18:5c:6b:
                    54:af:58:fd:a3:2e:f8:3a:f1:6e:62:99:2a:a8:d7:
                    08:43:84:7c:69:f2:86:46:53:64:d9:71:13:26:ab:
                    79:66:3b:73:a6:22:67:dd:36:02:44:bc:6f:33:4e:
                    c6:02:1f:79:35:1f:1d:71:b5:65:22:1c:e6:ca:14:
                    b5:6c:08:a0:5f:6d:4e:b7:57:47:78:c6:cc:24:09:
                    a7:f0:fd:8e:e6:b1:9e:e3:c8:f9:4e:af:64:bc:24:
                    91:7d:4a:3f:52:e5:a8:ee:49:6f:90:4b:19:87:ae:
                    9e:c6:a8:c8:8c:85:29:21:0d:7b:91:4b:71:b9:26:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1D:19:2C:53:A5:A6:07:71:FA:1A:EF:56:95:B8:67:8A:43:E4:3B
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e3139322e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.88.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         80:64:05:bb:76:7b:6c:1f:93:b4:53:05:51:e4:8a:73:d8:e8:
         27:cc:86:5a:1d:94:f3:8f:a0:ff:ab:3f:15:5e:6a:e4:af:0f:
         4a:e8:c2:78:99:29:e4:3f:05:68:f1:92:f8:7a:41:94:49:a5:
         a0:b1:d3:e3:7c:ba:8e:81:f5:f0:d7:3b:8c:c5:ff:0d:d1:9b:
         c0:da:64:29:02:c7:67:c5:44:6a:df:79:bb:6b:98:7e:ca:8a:
         b0:98:b2:05:f0:d0:46:35:95:68:99:20:39:3d:c5:61:01:01:
         07:d4:1c:91:cb:18:f8:a4:29:c1:6d:f8:ba:4d:e1:93:2f:b8:
         8b:6b:c6:09:0e:c4:ec:fa:ee:51:96:c3:2e:98:c4:ae:00:b0:
         18:58:1e:fe:b8:67:18:dd:b9:d4:a8:57:92:05:2a:b0:c7:bf:
         db:ac:99:0b:f3:3d:fc:c0:cb:b1:f7:13:aa:67:e0:36:10:02:
         a8:ad:70:bb:eb:36:fc:c6:2c:21:5a:c4:27:9a:fe:fe:56:9a:
         64:4a:18:f4:4e:c5:e4:f7:3a:29:5b:64:bb:0f:6a:c2:97:27:
         a2:19:39:0f:31:19:07:3e:74:fa:5d:06:2c:6c:a0:d8:21:fb:
         7c:4e:4b:13:e6:de:c8:7e:a0:ad:81:db:28:80:56:02:5f:35:
         96:7b:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:57 2026 by rpki-client