Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa
File:                     3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa (raw, json)
Hash identifier:          HyEfOH93NOXVi65LUEFnNGlyxFlQUvXNaG6fytjh4Ag=
Subject key identifier:   C4:83:47:BC:8F:52:FC:7F:F2:F4:CD:87:16:68:D7:48:EF:27:40:E9
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       4D935B071AC9ADD75EFB81B67929BBEA298A03F4
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:47 +0000
ROA not before:           Tue 05 Aug 2025 14:29:47 +0000
ROA not after:            Tue 04 Aug 2026 14:34:47 +0000
asID:                     6400
IP address blocks:        190.166.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:5b:07:1a:c9:ad:d7:5e:fb:81:b6:79:29:bb:ea:29:8a:03:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:47 2025 GMT
            Not After : Aug  4 14:34:47 2026 GMT
        Subject: CN=C48347BC8F52FC7FF2F4CD871668D748EF2740E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:74:cb:ac:90:6b:9c:fa:d2:46:c7:fd:4c:
                    d0:97:5f:54:4b:75:22:a9:01:6f:dd:3e:20:87:dd:
                    56:c7:22:8c:ff:bc:bc:77:73:76:d0:b0:0b:10:35:
                    09:8b:9f:6b:90:f8:5f:9d:87:a7:6b:45:48:64:de:
                    3a:57:df:88:98:bc:e6:17:59:2d:01:e2:25:c2:57:
                    bd:4d:44:ae:54:a1:95:ae:77:72:80:72:f5:e2:4c:
                    b4:02:96:13:3b:9c:8e:9a:10:da:1f:1e:c4:af:1c:
                    d9:b7:13:fa:53:6f:b0:6c:07:02:a2:bc:69:70:1b:
                    19:7d:2f:f2:50:e6:43:aa:10:34:a0:84:f8:a4:42:
                    a9:df:f7:58:e1:a5:9c:78:17:3b:0d:d1:79:98:5c:
                    fe:59:22:90:a3:dc:f0:69:ea:f5:45:db:96:2c:03:
                    41:ea:71:85:dd:36:f0:92:bc:e3:bf:99:b7:94:e2:
                    fe:6d:76:be:ee:66:27:2a:34:b5:0d:53:80:28:8b:
                    d4:d4:a9:df:fd:d9:af:8a:b2:4f:e1:e7:ef:bf:00:
                    08:d9:7e:a0:5a:2e:b3:f4:6d:59:6a:58:9e:7c:a4:
                    38:00:26:48:c0:6d:59:d4:c8:8d:96:1e:85:74:6f:
                    59:2d:2a:da:1d:d7:cf:89:76:f0:3e:1c:6f:c3:ab:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:83:47:BC:8F:52:FC:7F:F2:F4:CD:87:16:68:D7:48:EF:27:40:E9
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136362e3132382e302f31372d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.166.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:1d:27:b9:12:a2:c2:8b:06:7d:6e:be:c6:73:d1:c1:18:
         f4:b8:93:e9:4f:4f:3f:7c:21:2b:d9:40:b6:8c:97:c4:77:5b:
         83:b5:58:10:db:d1:5b:06:fb:f0:95:fe:6a:32:e3:79:cc:24:
         9d:9b:bb:0b:d0:1e:16:27:e4:0a:85:d7:e8:ec:8f:f1:f5:c5:
         a3:5b:b1:2b:a4:1a:c5:12:3e:bf:0b:04:d0:ee:d2:a3:91:a3:
         a6:99:a4:c7:c9:92:6a:e7:65:0f:de:18:de:c2:19:77:9f:0f:
         52:f3:3d:ce:85:e9:a4:d8:c8:6f:91:6a:d4:f0:f2:79:a3:27:
         41:70:47:6a:64:5b:fe:a0:74:41:39:f7:fe:25:16:4f:62:e7:
         ac:89:c9:f9:4b:38:cc:ae:37:29:1b:bb:c1:e8:7c:be:a5:3c:
         0b:ac:3d:e7:6b:2b:00:58:a6:cc:2c:65:16:11:3c:af:40:d0:
         2c:1e:61:4a:02:42:1f:8d:28:1e:05:48:92:2a:f2:99:28:08:
         0b:ba:9d:b0:fb:a8:b3:f0:4c:6e:aa:e8:61:a4:ab:f2:7c:05:
         06:68:3f:6f:fa:56:7b:b3:66:71:6c:a1:a9:74:b9:46:04:2a:
         3b:73:d7:7a:29:14:11:af:82:df:1a:f8:70:ca:ad:20:f1:f9:
         34:ae:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:45:04 2025 by rpki-client