Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa
File:                     3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          zUa+UlpchI2UIbe/KIxmNfEtO8YAUJe2SKaOjW7hNKU=
Subject key identifier:   16:13:0E:EA:67:E6:76:8F:F7:09:1B:AB:DB:01:4E:7E:FA:52:08:AB
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       7881BE7E15682D515D58ABCEC27AE8D005D8CD9B
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:18 +0000
ROA not before:           Tue 07 Jul 2026 14:46:18 +0000
ROA not after:            Tue 06 Jul 2027 14:51:18 +0000
asID:                     6400
IP address blocks:        201.229.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:81:be:7e:15:68:2d:51:5d:58:ab:ce:c2:7a:e8:d0:05:d8:cd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:18 2026 GMT
            Not After : Jul  6 14:51:18 2027 GMT
        Subject: CN=16130EEA67E6768FF7091BABDB014E7EFA5208AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:e3:10:a5:64:93:e6:80:a9:24:e2:1c:5a:
                    f6:a3:12:4b:46:f7:b6:d9:40:b7:30:8c:3c:f4:6d:
                    cc:e8:2f:bc:a3:52:46:d1:33:7b:19:a7:6a:4a:9b:
                    f2:03:50:c4:37:a1:fc:b0:e5:43:43:c7:cd:a3:50:
                    aa:b2:e6:c3:75:e7:12:eb:2e:d8:bc:eb:f5:fa:6d:
                    5d:b6:2c:5d:96:55:03:8e:3e:c5:28:3f:83:67:d5:
                    d8:98:18:ac:11:ad:15:22:94:b8:45:2a:c0:b4:f0:
                    8d:7e:49:68:a5:8a:c3:24:ba:1d:19:de:d8:ac:20:
                    37:db:30:2c:db:65:98:83:e3:72:c8:b3:61:81:58:
                    01:6b:2d:e8:ce:90:7c:c9:a8:4e:3a:c0:33:ed:dd:
                    14:aa:03:c7:ec:8f:79:e1:cb:ec:98:2e:60:da:fe:
                    a8:f6:30:be:45:68:9a:8f:60:a0:a2:e0:bc:f8:90:
                    f1:ba:db:19:92:b2:32:ba:9e:aa:9e:9c:5b:e6:cb:
                    db:41:09:8c:04:b4:be:94:4e:73:66:35:2f:d6:90:
                    5c:4e:06:06:04:7b:3f:a5:2b:21:aa:f4:6b:d0:b8:
                    3a:6f:d4:07:1b:30:08:45:e4:59:cb:f9:0c:e9:15:
                    19:36:19:11:1c:b8:a7:21:5b:f3:f4:8d:12:2d:0e:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:13:0E:EA:67:E6:76:8F:F7:09:1B:AB:DB:01:4E:7E:FA:52:08:AB
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.229.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:83:88:37:18:8e:bb:47:c6:17:b5:db:32:7f:a1:d1:9e:99:
         12:d7:a7:ef:9a:1f:14:02:7a:d2:c8:a7:f1:e9:82:c1:88:1d:
         05:7e:ff:4b:57:ac:70:f2:e2:73:ab:40:43:f7:fe:70:12:b0:
         4e:39:4e:38:cc:ac:d5:65:71:c4:f2:5b:d2:d8:8d:b1:5d:c9:
         28:7f:16:13:b0:be:24:51:15:0e:84:93:d5:53:9b:51:97:f5:
         f9:9e:87:f0:62:3f:cb:4f:a4:fd:fb:61:ed:26:ac:6a:c6:79:
         c8:6e:ed:ba:1b:b9:61:3c:4b:51:7d:17:89:c4:79:2d:6d:e2:
         1e:09:8b:d3:4d:83:b9:5a:4e:7b:90:8e:ca:98:e6:5b:ff:ac:
         b0:77:d8:ad:4a:4a:fe:e9:71:6a:1a:b2:87:dd:4d:70:ff:21:
         48:ff:30:26:32:e2:36:33:90:16:e5:a3:50:dd:39:92:30:35:
         da:86:53:1c:c2:11:e6:53:21:65:82:2c:47:c1:56:fd:f0:ee:
         5a:40:1c:6f:19:96:ab:a9:06:8c:64:9c:3f:fa:27:bb:0e:51:
         0f:c6:6f:2a:a6:94:8b:c8:07:bc:85:c5:3b:1d:4a:ed:8d:84:
         84:00:cf:52:5e:dc:cb:35:17:4b:95:65:45:e8:2b:53:4c:b5:
         b7:78:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:47 2026 by rpki-client