Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3132382e302f31382d3234203d3e2036343030.roa
File:                     3139302e38302e3132382e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          8hwbZaH+XBQuWJdJoUBk+pqII7ovGg4qg9WhLH/Pm3Y=
Subject key identifier:   CC:C5:A1:38:94:2B:AC:E8:F9:84:64:3F:FA:35:F7:0B:54:27:E4:59
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       08E39D881D2EFB065A5537DBBF7B1F925D2A9971
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3132382e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:46 +0000
ROA not before:           Tue 05 Aug 2025 14:29:46 +0000
ROA not after:            Tue 04 Aug 2026 14:34:46 +0000
asID:                     6400
IP address blocks:        190.80.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e3:9d:88:1d:2e:fb:06:5a:55:37:db:bf:7b:1f:92:5d:2a:99:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:46 2025 GMT
            Not After : Aug  4 14:34:46 2026 GMT
        Subject: CN=CCC5A138942BACE8F984643FFA35F70B5427E459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:65:a7:75:dd:1d:c3:a7:11:d4:33:0e:0e:
                    e5:6b:c4:4e:61:3d:38:09:95:7e:29:a2:da:a3:ee:
                    2e:1c:2d:e6:b8:82:09:95:fa:73:a5:fd:1c:4c:a1:
                    1f:88:96:12:ff:a1:0c:c5:bb:cd:54:f6:25:36:b5:
                    f9:ef:bf:08:e1:df:3f:f4:92:1a:48:a6:ac:e8:f7:
                    8c:7b:03:7a:ec:3e:05:44:2c:c8:18:ae:86:fe:53:
                    1c:30:3c:47:a4:e1:e4:c2:cd:90:76:e0:18:a1:1e:
                    9c:d4:59:5b:36:73:6e:ae:db:9c:74:34:ef:a8:76:
                    e5:01:71:61:e5:ec:09:05:9d:17:45:e2:99:66:8e:
                    4c:f6:4b:e6:c3:fc:8f:2f:68:a4:6e:3f:d1:a0:6a:
                    dc:03:bf:86:f7:b7:f1:6d:b7:2e:31:d7:ff:81:0b:
                    42:5f:19:cf:e5:c2:de:86:9b:56:20:e6:aa:16:6b:
                    cc:60:25:23:da:6c:ed:13:e9:ce:63:eb:16:07:9e:
                    91:f5:42:0b:8a:21:f5:f4:62:d0:66:be:15:7e:f9:
                    30:5c:89:ac:58:94:04:e6:75:52:88:70:ed:82:5a:
                    12:de:83:7c:ae:4b:ba:1a:12:73:26:0d:5c:3c:6b:
                    52:16:03:53:7e:ae:f2:90:d4:30:e6:fb:e1:27:38:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:A1:38:94:2B:AC:E8:F9:84:64:3F:FA:35:F7:0B:54:27:E4:59
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3132382e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.80.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:51:1e:f5:fb:40:55:fa:16:6e:bb:9e:29:5a:09:25:0b:
         51:ca:c3:b8:e1:e7:5b:f0:40:32:82:11:0e:83:f6:3a:f3:f5:
         8a:e2:06:59:f5:5a:9c:1e:32:09:7f:2c:e1:bb:fe:ef:46:05:
         50:a3:82:41:ea:49:f3:95:c1:9a:f8:4b:93:10:37:2f:28:fb:
         ba:f9:13:c9:7a:11:d0:fb:4c:c8:4e:24:6a:b2:2a:76:8e:77:
         71:2b:d9:cc:76:82:ec:30:87:fc:ec:d4:be:f7:d1:30:00:19:
         c9:2e:ec:f4:4a:3b:27:fe:7d:be:8b:c3:8b:f3:86:65:18:ac:
         80:aa:30:01:b2:aa:5b:16:7b:e5:f6:12:98:e5:58:d7:77:db:
         95:27:48:e4:55:75:b1:8f:ab:de:9b:a5:25:f6:bd:68:f6:35:
         96:02:85:c5:31:d6:a4:be:d7:d6:a6:2f:56:97:fa:20:e8:ba:
         12:cf:31:9d:2a:03:59:1c:e4:aa:97:0f:41:10:e6:88:48:8c:
         f7:b3:70:84:e2:a5:49:4f:a6:d5:de:b9:ca:c8:a5:48:a8:ab:
         e9:9d:a2:10:d1:30:63:6f:a5:19:d1:3d:bb:ee:e5:ca:d1:ce:
         70:50:e9:87:6c:63:46:73:44:3b:12:85:38:c6:0f:2e:79:f4:
         b1:bc:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:36:23 2025 by rpki-client