Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e36342e302f31382d3234203d3e2036343030.roa
File:                     3230302e38382e36342e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          RMpXztC/t8KK5B8GFBRxrUWC7jsiaspph1lRxXpquz8=
Subject key identifier:   B7:93:EB:AB:7A:F1:26:FF:F0:86:24:FA:0D:0F:77:A7:CB:79:9E:C5
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       3A0E3905782ED665E6B4E053E7B3060C5775D5
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e36342e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:22 +0000
ROA not before:           Tue 07 Jul 2026 14:46:22 +0000
ROA not after:            Tue 06 Jul 2027 14:51:22 +0000
asID:                     6400
IP address blocks:        200.88.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:39:05:78:2e:d6:65:e6:b4:e0:53:e7:b3:06:0c:57:75:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:22 2026 GMT
            Not After : Jul  6 14:51:22 2027 GMT
        Subject: CN=B793EBAB7AF126FFF08624FA0D0F77A7CB799EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:36:c7:8e:13:68:3a:23:ea:aa:9f:53:5d:
                    7c:04:4c:f8:63:f8:43:18:b0:bb:37:ad:37:19:3c:
                    1e:1b:8b:af:b3:cf:73:2b:84:7e:a9:3f:3c:97:76:
                    1e:6e:28:09:75:55:32:c9:ea:ad:87:3b:5f:6c:a4:
                    15:cb:d6:0a:5a:57:f0:b9:a6:7f:65:f5:b2:49:71:
                    dc:9c:16:78:af:cb:49:78:be:a6:50:73:e9:ed:32:
                    c4:92:4d:3f:ce:19:08:62:6c:c6:48:26:c2:d5:bd:
                    c7:f2:d7:b4:54:e9:5c:ec:be:2e:0c:3c:b1:e8:99:
                    d9:28:78:b7:42:7c:3b:28:b5:bf:44:d3:be:dd:b6:
                    5c:19:8c:0d:91:b3:83:c7:6a:55:15:87:ef:f9:5c:
                    f5:74:09:7c:51:4b:a8:5f:8f:b7:7f:fb:c4:47:bd:
                    b6:99:a5:43:19:e5:b6:1d:d3:49:c3:c7:70:80:10:
                    de:fd:d6:a1:10:b4:c4:f8:86:fa:d7:79:51:e2:3b:
                    07:ac:09:e5:3c:51:7c:d5:ee:41:b9:0c:9f:6f:a6:
                    c2:73:ba:b0:8e:5f:ed:cf:5c:52:76:bc:15:bb:36:
                    78:4f:95:fb:81:a3:4e:09:fe:cb:ce:63:21:24:4c:
                    43:32:46:b7:d5:84:66:ae:f6:9c:0d:5e:6c:8c:ec:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:93:EB:AB:7A:F1:26:FF:F0:86:24:FA:0D:0F:77:A7:CB:79:9E:C5
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e36342e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.88.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:a1:1a:ca:72:14:33:59:58:85:a5:70:0f:a2:18:a3:fc:
         24:6d:ef:e3:0b:b6:21:62:07:23:6e:99:3d:ac:09:84:a9:67:
         5f:31:b0:ce:18:50:69:b6:72:04:30:de:94:45:e7:44:a2:aa:
         ee:5b:5d:8a:e2:41:bc:a0:6f:4b:40:0d:46:a6:f6:91:a7:75:
         bb:a1:4f:57:6f:b9:0b:c9:73:91:4b:da:b2:9b:ad:cb:32:fa:
         a4:ad:1d:f1:95:83:2b:94:bb:0e:92:9b:d1:d2:39:34:ac:db:
         82:0c:19:63:1e:30:ef:80:81:f5:b4:07:16:89:bb:8f:be:a9:
         3c:6b:2c:c4:ed:73:10:17:48:df:3b:4c:34:ef:ee:28:86:27:
         6c:27:21:c8:89:6d:d8:f4:26:96:4c:23:f7:7d:87:5c:be:3e:
         b8:21:4a:3e:6f:6b:5d:89:e5:04:8e:19:89:6b:50:fc:31:3c:
         ec:83:d4:c5:53:a1:29:14:dd:8c:91:a2:cf:17:09:2d:b6:1d:
         6b:29:18:31:c7:7a:af:38:9b:88:0a:38:4e:86:b3:00:2e:76:
         f0:31:04:19:c9:d8:bb:32:ae:b9:74:7c:46:c1:12:90:aa:1e:
         26:3d:1d:75:b6:47:01:05:5d:7a:68:05:c9:b1:26:c2:4b:2c:
         ad:83:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:08 2026 by rpki-client