Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e302e302e302f31362d3234203d3e2036343030.roa
File:                     3134382e302e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          FfarV7ZoWJektnyhlKJ2z4eJaaOKRustsg0NA0K9wx0=
Subject key identifier:   D7:3F:66:3D:94:E0:1F:28:3B:7D:25:1F:52:F7:03:DD:D9:AC:BE:3B
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       4BB4745DC9F15FBECBFAE8334EC88B16219AE63D
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e302e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:47 +0000
ROA not before:           Tue 05 Aug 2025 14:29:47 +0000
ROA not after:            Tue 04 Aug 2026 14:34:47 +0000
asID:                     6400
IP address blocks:        148.0.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b4:74:5d:c9:f1:5f:be:cb:fa:e8:33:4e:c8:8b:16:21:9a:e6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:47 2025 GMT
            Not After : Aug  4 14:34:47 2026 GMT
        Subject: CN=D73F663D94E01F283B7D251F52F703DDD9ACBE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:05:4d:82:85:06:39:fa:31:e4:0d:2e:a6:
                    12:96:38:d7:c7:da:c9:a4:ac:e1:6e:b1:8e:be:27:
                    2a:d9:f0:b7:5b:92:2f:17:89:dd:f7:27:d6:45:cd:
                    0d:d5:4c:b1:be:b2:cb:a5:76:4b:71:a5:66:59:03:
                    13:90:44:97:f7:e6:c6:6f:e6:f3:e5:30:22:ae:33:
                    ec:86:a6:bb:aa:7a:a2:dd:fa:6a:58:fc:fa:b0:28:
                    cb:4f:66:be:1b:74:44:1f:95:bf:54:b7:da:af:0e:
                    ab:c6:a9:03:07:f8:e2:41:f2:90:80:ad:f4:98:7a:
                    c7:fa:0d:e3:ce:22:17:99:42:e8:2b:ce:c5:0e:6e:
                    b2:dc:53:9d:c4:55:81:93:5a:ea:82:5a:8e:2d:5d:
                    b0:65:ec:40:90:b3:a7:5f:c3:dd:93:11:cc:eb:c8:
                    cb:d7:ca:d1:58:51:a9:62:90:ba:6b:09:db:d2:38:
                    88:f0:ef:c7:e8:e2:b2:a5:01:0a:b5:57:c1:ab:4d:
                    7b:6a:b7:eb:80:95:a9:04:05:5e:08:ca:97:ee:40:
                    4b:8d:6e:b0:45:99:ba:f9:46:78:19:10:c2:ba:6a:
                    d3:29:26:c6:75:43:a8:de:ba:34:07:bc:e1:51:20:
                    d7:fa:e3:e2:18:c1:b5:a9:e6:19:bd:0c:46:2d:3f:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3F:66:3D:94:E0:1F:28:3B:7D:25:1F:52:F7:03:DD:D9:AC:BE:3B
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e302e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:11:4b:0b:b5:59:64:74:54:09:f8:4c:20:13:c4:d0:23:80:
         8b:64:fd:13:76:8e:7d:36:7c:e1:fb:7c:58:2a:52:b9:39:a5:
         7d:23:2b:93:47:6e:fc:4c:37:19:53:50:2d:16:ef:bc:1f:26:
         db:46:9a:53:bb:79:6a:ac:aa:3e:b8:d8:a1:e5:bf:2c:b1:02:
         43:79:bf:9f:07:43:36:f0:c3:b1:65:5b:f0:61:4f:3b:f2:ac:
         e3:b1:69:b7:a2:b6:6e:76:85:81:d3:fb:33:5a:91:bf:7c:db:
         47:d3:d4:c7:bc:8c:19:fc:a7:ca:9f:94:e0:00:58:2e:97:86:
         b9:93:77:57:ea:ab:42:ec:de:62:ff:27:b4:f4:36:fd:b7:2a:
         08:9e:df:be:db:29:f7:ec:cd:d5:ff:4c:3f:14:5e:23:4d:05:
         89:fd:93:24:8d:34:63:c7:3e:cb:4c:ff:0c:48:e5:71:de:8e:
         e3:ae:3f:27:af:95:b5:e9:3d:e4:78:1d:41:a4:a2:d7:fb:b8:
         3e:48:22:eb:fa:9d:93:7a:38:8a:6a:af:80:b6:17:45:41:20:
         94:bd:ce:ba:4f:cc:0c:77:78:06:a7:1c:65:fd:c8:82:0e:55:
         81:f0:cb:6b:4e:27:24:f7:84:6b:b4:84:de:10:d4:72:d0:2a:
         97:03:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:37:31 2025 by rpki-client