Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3130312e302e302f31362d3234203d3e2036343030.roa
File:                     3134382e3130312e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          43ovA4M1lZ0pkhmXXsgwowMgL4lp8+jShrB846HVCzU=
Subject key identifier:   AC:8D:5E:10:8B:D2:37:B1:8D:91:A3:52:A9:DB:08:5C:FF:91:1C:BC
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       461BB62E73CF0565225E321B382E25EC1E843265
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3130312e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:50 +0000
ROA not before:           Tue 05 Aug 2025 14:29:50 +0000
ROA not after:            Tue 04 Aug 2026 14:34:50 +0000
asID:                     6400
IP address blocks:        148.101.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1b:b6:2e:73:cf:05:65:22:5e:32:1b:38:2e:25:ec:1e:84:32:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:50 2025 GMT
            Not After : Aug  4 14:34:50 2026 GMT
        Subject: CN=AC8D5E108BD237B18D91A352A9DB085CFF911CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e4:44:01:92:c0:4f:61:64:e2:4f:d5:38:28:
                    75:e2:f7:d5:3c:74:7d:5d:99:62:4a:b3:1d:93:f0:
                    90:e9:f8:85:ac:1d:a1:77:63:8c:39:fc:15:58:cf:
                    67:71:25:fb:91:3e:ff:84:bf:43:f0:29:e0:5d:97:
                    c4:f3:d8:bc:af:93:9f:f7:5d:64:e8:44:ae:d4:20:
                    5e:c0:8f:03:1e:55:0a:c1:c8:47:4f:1c:c2:df:91:
                    a2:3c:5f:78:7f:0e:e4:9a:d4:ea:ef:d1:67:09:74:
                    be:08:89:e7:59:b1:fd:09:97:21:5a:28:65:a0:65:
                    27:f2:0b:fd:ed:f4:f1:0f:47:66:88:c1:df:3a:ee:
                    5a:2a:06:57:dc:66:6b:88:49:a1:46:3c:e8:b5:cd:
                    63:77:93:84:cd:68:78:fa:be:39:81:59:a2:36:63:
                    e4:1d:79:c1:1d:af:de:17:53:0f:af:43:37:1c:62:
                    f6:ef:92:a0:a4:4d:03:7b:60:c9:4b:0c:bb:09:6d:
                    da:5b:f1:bd:db:3d:46:37:ed:99:a4:8e:50:d3:53:
                    b2:7f:92:73:84:13:70:b5:f2:37:c5:82:fa:d3:1b:
                    a2:0e:17:80:0b:0e:f5:9f:15:86:88:17:c5:a3:d6:
                    1d:1f:b3:02:f5:46:00:f1:8b:c6:72:6f:db:7a:dc:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8D:5E:10:8B:D2:37:B1:8D:91:A3:52:A9:DB:08:5C:FF:91:1C:BC
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3130312e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:16:fb:05:6e:1b:19:16:35:fe:23:ea:bb:f5:06:d7:7f:
         f2:fa:1d:05:ab:23:71:00:be:bc:fd:e0:09:fd:91:2c:9b:dd:
         c4:79:f9:ec:f2:3d:f3:2c:6b:ec:10:7c:bc:b2:0c:e8:a4:fd:
         4b:d9:d0:58:b2:2a:e2:90:75:6b:ef:98:02:4c:b2:0c:c9:1a:
         f2:2e:a8:9f:77:71:82:79:3a:47:b1:50:3a:31:13:58:30:43:
         19:81:7f:9b:4c:a8:92:cd:d8:94:64:2d:19:82:f7:b7:09:49:
         ba:33:e2:28:83:ca:55:9b:4b:21:11:17:b2:1b:00:2d:83:83:
         d6:c6:ff:7b:bf:8f:5e:49:b4:09:1b:81:47:5f:85:d4:d9:3a:
         d7:c0:e3:b5:3c:6e:11:91:8c:69:dd:10:f6:8e:5b:ff:77:a3:
         aa:c5:2c:54:ae:06:11:37:df:bb:18:26:92:4f:a3:4c:0a:de:
         4b:d5:14:0b:5a:fb:0e:33:bb:64:c7:3c:c3:9e:48:90:20:5f:
         46:75:2e:25:c4:4d:d3:09:cb:59:08:e7:ce:b0:a3:55:7e:75:
         ff:0c:33:9a:8f:01:53:8e:b2:b6:fb:19:67:0c:21:a8:78:d8:
         ea:b9:ce:ee:c9:36:2d:29:87:20:78:64:b8:e8:d6:1d:ef:8a:
         16:f1:5e:bb
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIURhu2LnPPBWUiXjIbOC4l7B6EMmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFERjgzMTdBMEVDNkUzQTVFNjA3OEMxODkyMDc4REQy
NzBEQkJGRTAeFw0yNTA4MDUxNDI5NTBaFw0yNjA4MDQxNDM0NTBaMDMxMTAvBgNV
BAMTKEFDOEQ1RTEwOEJEMjM3QjE4RDkxQTM1MkE5REIwODVDRkY5MTFDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5EQBksBPYWTiT9U4KHXi99U8
dH1dmWJKsx2T8JDp+IWsHaF3Y4w5/BVYz2dxJfuRPv+Ev0PwKeBdl8Tz2Lyvk5/3
XWToRK7UIF7AjwMeVQrByEdPHMLfkaI8X3h/DuSa1Orv0WcJdL4IiedZsf0JlyFa
KGWgZSfyC/3t9PEPR2aIwd867loqBlfcZmuISaFGPOi1zWN3k4TNaHj6vjmBWaI2
Y+QdecEdr94XUw+vQzccYvbvkqCkTQN7YMlLDLsJbdpb8b3bPUY37ZmkjlDTU7J/
knOEE3C18jfFgvrTG6IOF4ALDvWfFYaIF8Wj1h0fswL1RgDxi8Zyb9t63Oa/AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUrI1eEIvSN7GNkaNSqdsIXP+RHLwwHwYDVR0j
BBgwFoAUgd+DF6DsbjpeYHjBiSB43ScNu/4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUY5N0U1QzE4QjZBQkE2RUMxNjU3RDUxQTRCMzc1MDJF
MjY2REU1NEU0NzhENkZFNkExMzVCMUYyNjI5RUQ2LzAvODFERjgzMTdBMEVDNkUz
QTVFNjA3OEMxODkyMDc4REQyNzBEQkJGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MURGODMxN0EwRUM2RTNBNUU2
MDc4QzE4OTIwNzhERDI3MERCQkZFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlGOTdFNUMxOEI2QUJBNkVDMTY1N0Q1MUE0QjM3NTAyRTI2NkRFNTRF
NDc4RDZGRTZBMTM1QjFGMjYyOUVENi8wLzMxMzQzODJlMzEzMDMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzQzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlGUwDQYJKoZI
hvcNAQELBQADggEBAEwTFvsFbhsZFjX+I+q79QbXf/L6HQWrI3EAvrz94An9kSyb
3cR5+ezyPfMsa+wQfLyyDOik/UvZ0FiyKuKQdWvvmAJMsgzJGvIuqJ93cYJ5Okex
UDoxE1gwQxmBf5tMqJLN2JRkLRmC97cJSboz4iiDylWbSyERF7IbAC2Dg9bG/3u/
j15JtAkbgUdfhdTZOtfA47U8bhGRjGndEPaOW/93o6rFLFSuBhE337sYJpJPo0wK
3kvVFAta+w4zu2THPMOeSJAgX0Z1LiXETdMJy1kI586wo1V+df8MM5qPAVOOsrb7
GWcMIah42Oq5zu7JNi0phyB4ZLjo1h3vihbxXrs=
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:38:59 2025 by rpki-client