Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e302e302f31382d3234203d3e2036343030.roa
File:                     36362e39382e302e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          lg2RHwpixSMS8qfDaFu/+Jx81R3bS/bF5/0Kyw9u/L8=
Subject key identifier:   CB:21:F2:D1:A8:9E:4A:15:70:38:E6:16:95:E5:06:73:9B:91:00:94
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       7F64BEF51D5A5E903981300F1AAAF610A05494B0
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e302e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:22 +0000
ROA not before:           Tue 07 Jul 2026 14:46:22 +0000
ROA not after:            Tue 06 Jul 2027 14:51:22 +0000
asID:                     6400
IP address blocks:        66.98.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:64:be:f5:1d:5a:5e:90:39:81:30:0f:1a:aa:f6:10:a0:54:94:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:22 2026 GMT
            Not After : Jul  6 14:51:22 2027 GMT
        Subject: CN=CB21F2D1A89E4A157038E61695E506739B910094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:d0:c9:03:b1:e4:e8:9b:35:16:43:48:ab:
                    c7:86:af:3a:43:e2:91:c2:d2:ad:cc:3f:8b:0f:2a:
                    49:f5:63:2d:73:8b:38:b9:a4:76:c6:e3:b4:2b:4c:
                    87:38:96:1e:26:29:7a:c8:31:07:00:b2:89:25:a3:
                    96:b8:c7:4f:99:16:21:de:7d:dc:3d:f6:72:71:57:
                    59:6b:95:8c:35:14:42:29:13:39:4f:78:47:c8:40:
                    0b:12:99:30:69:c2:b8:26:94:f2:94:fa:7a:4a:4e:
                    c9:dd:fd:ac:91:74:d9:b1:5d:8a:91:ae:a4:63:52:
                    d5:90:ec:dd:be:a2:a4:7b:ec:83:20:55:76:51:87:
                    fe:5f:90:8e:9b:00:00:3d:8b:23:7c:af:cd:31:47:
                    56:4d:a9:0d:69:ab:39:d0:95:f9:d4:b2:19:f5:dc:
                    b3:53:b7:78:a7:9f:06:1c:6c:91:43:e9:03:a7:72:
                    07:4c:cc:8e:22:90:cc:5c:ec:45:f1:43:e6:90:bf:
                    ac:7f:59:83:79:6f:14:7e:34:55:33:bf:d7:22:61:
                    61:0a:02:99:53:88:75:0b:e6:1a:b8:59:b1:c4:42:
                    bc:f4:1b:07:f2:27:1d:9c:f1:2f:ad:65:e6:94:07:
                    83:d3:5c:79:e6:33:8d:a0:a6:a7:c2:ca:79:61:f7:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:21:F2:D1:A8:9E:4A:15:70:38:E6:16:95:E5:06:73:9B:91:00:94
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e302e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.98.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:09:4b:34:c4:96:b8:a3:e8:34:6e:d7:3f:13:81:9b:5d:
         33:9a:f5:ec:3a:e8:fe:67:08:5e:92:a1:3a:b5:03:f7:2a:b7:
         10:5f:8f:46:b3:56:04:89:1c:6f:db:d7:44:2c:c4:36:a6:7b:
         42:2f:2c:5e:c7:21:cd:ec:6b:b1:16:a8:6a:25:ee:ba:b9:d9:
         e8:2b:8b:f8:65:98:db:cb:f2:08:1c:82:42:a7:19:8c:50:22:
         eb:f5:78:f9:40:b4:76:c0:ff:27:cf:a9:7b:fd:18:43:34:6e:
         0e:94:30:07:4e:46:8b:8e:cd:f8:6d:43:b0:39:12:0d:25:7a:
         6d:be:89:b7:9b:eb:29:46:16:95:1d:23:5e:50:3d:fb:2b:14:
         cc:c7:7f:06:d2:9f:d7:81:4a:4e:60:31:4d:ba:75:cb:dc:fa:
         2e:70:94:a6:14:bd:a3:a6:12:7b:a5:6e:7c:9f:e0:8e:e3:6e:
         15:65:4c:fc:ec:74:f5:42:8e:dd:57:5f:54:73:67:bf:01:f9:
         3e:1f:7d:af:e9:50:3f:3a:66:4b:0a:b4:44:82:40:9e:01:cb:
         19:b3:c0:78:1c:74:31:06:97:9b:ea:43:c9:7b:ff:0a:12:1e:
         7e:6d:7b:e2:f7:ed:58:f1:83:44:cb:ff:33:72:b3:5f:cc:a3:
         1b:d1:6e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:15:30 2026 by rpki-client