Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3137392e36312e31362e302f32302d3234203d3e2036343030.roa
File:                     3137392e36312e31362e302f32302d3234203d3e2036343030.roa (raw, json)
Hash identifier:          Z6sSU2TgaupZ8W0e/9o/IOsB4LQogiEz7Dbq7FCueIs=
Subject key identifier:   DB:D9:31:D9:E7:01:B5:E2:E6:F8:E3:77:7C:5A:9B:7A:68:4E:45:D1
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       2528C95E1BAF4B8734E64FEB80941C2683AA8238
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3137392e36312e31362e302f32302d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:42 +0000
ROA not before:           Tue 05 Aug 2025 14:29:42 +0000
ROA not after:            Tue 04 Aug 2026 14:34:42 +0000
asID:                     6400
IP address blocks:        179.61.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:28:c9:5e:1b:af:4b:87:34:e6:4f:eb:80:94:1c:26:83:aa:82:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:42 2025 GMT
            Not After : Aug  4 14:34:42 2026 GMT
        Subject: CN=DBD931D9E701B5E2E6F8E3777C5A9B7A684E45D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:e9:44:40:f6:d0:0f:03:23:65:8a:d4:07:
                    ec:02:0c:54:e1:c1:57:ef:4f:95:dc:90:dc:6c:22:
                    61:2a:f4:b6:a9:ef:a8:4d:25:b4:20:65:14:1b:e6:
                    78:df:e2:1a:fb:e0:09:b4:ac:0e:3d:2f:ed:05:af:
                    8c:29:66:c2:eb:d6:57:1f:18:c8:77:78:d9:ec:29:
                    99:2c:9c:48:85:4d:b7:1f:66:e5:0e:de:9b:cc:3e:
                    64:d8:50:4b:1c:78:ea:35:f4:56:99:c4:52:4e:ca:
                    86:89:95:76:9b:99:1e:26:68:b6:f4:91:4a:a6:5f:
                    b3:ef:d9:23:10:af:77:b2:f3:0a:8f:36:30:e7:86:
                    66:e9:3a:18:76:0b:f1:4f:af:9b:ac:dc:b7:03:93:
                    07:9e:47:82:42:e0:52:9f:39:f0:24:b9:b4:62:fc:
                    af:18:cd:76:3a:31:b4:56:14:b3:b3:b7:83:27:06:
                    08:55:c8:ab:68:2f:11:c0:7b:34:0a:eb:45:56:06:
                    15:ee:d4:f8:cd:34:70:7e:c4:de:bf:be:ad:5a:53:
                    2b:7e:6a:5d:71:af:78:e7:29:0a:5b:6d:e4:85:15:
                    b4:f3:40:96:a5:55:e5:bf:a8:6a:16:7b:6a:f4:0f:
                    4f:3c:c7:79:6b:3c:e9:b8:23:eb:d8:a0:66:9c:d0:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:31:D9:E7:01:B5:E2:E6:F8:E3:77:7C:5A:9B:7A:68:4E:45:D1
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3137392e36312e31362e302f32302d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:d1:bb:53:19:be:68:66:32:16:1f:af:8e:08:ae:c6:3a:
         7f:c8:58:74:90:9f:d2:59:d8:95:90:8d:f4:9e:dc:02:90:34:
         9c:cb:4d:b1:22:06:24:3d:d7:a4:63:cc:cf:11:05:03:28:6d:
         f1:56:ed:19:ee:fa:9f:9a:15:81:ed:c2:f6:33:92:51:14:fc:
         f6:b1:0c:28:ab:79:45:d7:eb:d7:07:fc:45:0e:1b:b6:8e:7e:
         12:db:3d:ed:6c:13:20:65:18:b5:94:10:0e:cd:c9:d3:da:22:
         48:69:3e:fc:f6:9d:cf:54:54:32:48:26:00:62:38:9a:4b:8a:
         51:4c:46:d9:c1:45:da:07:56:68:d1:b1:d3:79:76:8f:ee:ab:
         95:ee:52:6f:de:b0:66:4c:11:e7:19:ce:93:1a:4d:55:4a:cc:
         d2:fc:84:79:26:1c:6b:da:78:6d:ac:7f:b0:3e:f3:b7:20:b0:
         94:35:d6:29:3f:9e:70:0b:8a:ba:51:d5:f9:98:0d:b5:52:46:
         94:38:ab:da:49:d5:d7:c9:1e:75:9e:26:c9:1a:d0:15:84:d7:
         d0:f8:8a:eb:e0:52:73:82:84:c9:8b:ec:45:c7:a9:15:68:5c:
         07:3a:9b:3c:aa:8a:d4:bf:5f:44:4e:de:e1:00:20:b5:9b:24:
         6b:be:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:14 2025 by rpki-client