Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e36342e302f31392d3234203d3e2036343030.roa
File:                     36362e39382e36342e302f31392d3234203d3e2036343030.roa (raw, json)
Hash identifier:          7nwee1aMiT8jZTH5zH+jm18r9sWFRx+ZGlPA/Gql3QY=
Subject key identifier:   C5:AE:51:94:6F:A0:03:0E:E6:89:42:7C:59:38:32:10:11:CD:98:0F
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       315727B2483272D98B78D9B464A222CA02F7C1BF
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e36342e302f31392d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:20 +0000
ROA not before:           Tue 07 Jul 2026 14:46:20 +0000
ROA not after:            Tue 06 Jul 2027 14:51:20 +0000
asID:                     6400
IP address blocks:        66.98.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:57:27:b2:48:32:72:d9:8b:78:d9:b4:64:a2:22:ca:02:f7:c1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:20 2026 GMT
            Not After : Jul  6 14:51:20 2027 GMT
        Subject: CN=C5AE51946FA0030EE689427C5938321011CD980F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:fd:b9:88:e7:e3:b4:a4:76:8b:63:b8:df:
                    7e:94:b3:cd:93:7d:7a:52:6e:c5:97:21:a2:81:e2:
                    a4:96:77:57:7c:51:d0:50:c5:99:3f:ec:99:12:70:
                    99:61:fa:e5:9c:8f:b9:bd:66:cc:ca:ae:1b:84:6b:
                    90:d9:7c:8e:16:e4:ae:be:9d:46:3f:31:60:42:34:
                    a2:fe:f0:9e:10:19:97:95:9b:14:61:19:8e:08:67:
                    b0:93:dd:09:ab:8f:20:5e:5d:e3:c8:80:7b:3c:d6:
                    08:d5:83:01:64:0f:6f:2f:9a:7e:e0:7a:72:ac:0d:
                    be:bc:b3:06:bd:30:e0:26:3c:03:02:a1:b2:22:5a:
                    64:53:3e:fd:5a:f7:07:32:4f:42:ba:33:fd:73:3d:
                    5c:75:e4:a5:5f:61:bd:bf:a1:1b:2b:83:da:93:8e:
                    91:3b:17:64:22:05:d8:bb:e2:1d:26:e4:ee:ae:15:
                    53:f7:e3:c5:71:a6:eb:d9:52:80:2f:3f:d7:6b:52:
                    25:b9:74:a4:e9:9d:e9:e2:f8:d6:d8:08:ce:f4:cf:
                    28:6d:4e:c5:3c:87:2f:99:3a:1b:f9:61:fe:29:df:
                    1a:31:95:49:8b:c6:e0:e9:6f:e8:b4:9d:ea:1b:82:
                    db:26:48:32:95:7c:07:d8:eb:28:66:54:e0:14:31:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AE:51:94:6F:A0:03:0E:E6:89:42:7C:59:38:32:10:11:CD:98:0F
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e36342e302f31392d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.98.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:d3:b6:c6:27:22:ee:78:a5:f4:87:80:b8:b5:a7:a9:3c:c1:
         a7:a4:11:25:e8:36:1b:43:8d:46:f9:36:33:d5:8b:9f:e9:3f:
         87:09:44:55:dd:0f:5e:e6:30:6a:7d:3a:f7:fa:dc:41:c8:c7:
         fb:91:a9:db:0f:72:a0:6c:68:68:de:e8:32:b4:97:87:e1:01:
         79:be:47:da:1f:23:da:20:9a:ef:d6:d2:92:fd:8b:ac:52:b7:
         8d:de:f5:35:5d:a1:26:29:e6:d9:28:c1:b0:ee:44:51:c4:26:
         19:c3:30:f1:3a:21:c7:1b:87:27:2b:84:01:af:65:77:9a:cf:
         31:79:14:76:d1:f6:b2:c2:bb:39:bd:b0:7f:4f:bd:6a:b6:45:
         da:05:50:62:78:16:05:ee:e4:e1:14:b3:55:a7:ae:3d:a4:58:
         8c:3a:ed:38:9e:10:58:e3:a4:f0:8f:e4:cd:0f:18:d7:c7:8e:
         1e:fb:4d:8a:69:42:ae:bb:d5:78:3c:ee:1f:41:7b:11:89:6e:
         1d:db:e0:f1:0e:06:b1:33:60:51:5c:f1:b8:fe:69:59:17:ad:
         2a:04:b6:51:b5:a3:d4:be:cc:e0:85:3e:d3:c2:37:7d:2f:6b:
         9c:8b:ff:f7:1c:fd:15:2d:64:99:6a:7f:15:22:00:31:a1:6f:
         1b:79:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:30:07 2026 by rpki-client