Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3139322e302f31382d3234203d3e2036343030.roa
File:                     3139302e38302e3139322e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          KBhBgW+TUZ9MAu/a/iR7spttV6g5/ta8U/WmHxs3/WU=
Subject key identifier:   85:99:2F:72:C3:EF:07:D2:27:00:40:BE:9A:2F:38:58:A8:73:10:BC
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       2E09060793717393C112BEC5D13A297202B4021F
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3139322e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:42 +0000
ROA not before:           Tue 05 Aug 2025 14:29:42 +0000
ROA not after:            Tue 04 Aug 2026 14:34:42 +0000
asID:                     6400
IP address blocks:        190.80.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:09:06:07:93:71:73:93:c1:12:be:c5:d1:3a:29:72:02:b4:02:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:42 2025 GMT
            Not After : Aug  4 14:34:42 2026 GMT
        Subject: CN=85992F72C3EF07D2270040BE9A2F3858A87310BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:ea:cd:c1:e0:de:7e:82:c5:56:fc:24:63:
                    b8:9f:86:b5:e0:f8:cc:9a:7b:87:96:ed:f7:9a:f4:
                    00:c3:f3:f7:60:3e:6b:dd:14:6b:9d:97:4f:58:20:
                    37:64:6e:6f:80:5f:4f:d8:55:17:98:35:59:84:ab:
                    5b:44:c1:5b:bd:ce:ca:6b:e0:a4:9a:2a:c7:e7:4d:
                    cf:f4:06:a6:20:b9:7b:b8:06:fb:49:af:36:87:18:
                    c5:4d:84:79:67:46:42:ba:3a:33:64:fe:48:a0:2a:
                    10:82:09:36:d2:b3:f7:4f:ea:f8:2c:89:57:91:ab:
                    be:be:3d:b5:9e:e4:12:84:4f:50:eb:d1:39:3e:87:
                    a2:be:1a:0b:1f:b5:87:b7:99:58:ac:8d:15:02:59:
                    0b:3f:e3:33:af:40:9a:77:22:38:cf:53:2a:fb:d5:
                    36:31:b1:39:7b:86:5b:ec:83:af:13:10:64:3c:21:
                    18:2d:88:aa:f0:ce:f6:5d:9f:46:6b:4c:f2:43:92:
                    a9:12:7e:f6:9f:40:2f:b6:bc:fd:fa:03:be:f6:9d:
                    f7:c2:a9:ff:4d:4a:c9:0f:28:c2:bd:f6:22:ae:e2:
                    82:44:96:1c:56:b8:f1:7b:4f:7e:4b:72:da:b1:c1:
                    c8:ff:fc:54:9a:46:ed:34:c7:72:db:ac:04:68:a1:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:99:2F:72:C3:EF:07:D2:27:00:40:BE:9A:2F:38:58:A8:73:10:BC
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3139322e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.80.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:70:2f:2a:31:73:8d:30:87:5e:14:20:c5:a0:c2:ce:d6:
         1f:8d:6a:59:01:b0:9d:4e:3f:4f:cc:c2:ce:65:79:7e:cf:35:
         0f:17:b1:ed:b8:9d:82:6a:06:a7:33:7a:8d:84:85:e2:d4:73:
         fd:70:3b:3e:c8:89:b8:b6:e1:35:81:d8:23:8a:bc:c9:cd:bf:
         f7:d4:5f:b4:d1:7b:c7:d1:35:0c:17:3f:6f:93:79:4c:d8:e9:
         84:c4:b8:4c:34:4d:36:27:26:ea:31:a5:6f:d9:6b:31:9f:26:
         9f:ae:2b:49:a0:9c:5c:aa:87:08:d2:2b:18:41:46:35:55:5d:
         5f:80:df:eb:8e:83:b4:39:ad:d7:1a:66:e0:dc:4e:c6:40:f9:
         b2:3c:49:54:d4:71:0a:22:ee:c0:32:03:d3:28:ef:72:ca:1f:
         c2:f6:1d:6f:da:0a:a4:f5:fa:8e:c9:5d:94:c9:cb:5b:43:29:
         e7:a5:29:98:79:9d:93:67:ff:57:dc:02:43:62:7c:ad:e6:16:
         49:6d:11:cb:db:76:b6:e0:88:05:d5:d1:1c:99:ac:de:41:b2:
         d7:b4:9a:14:16:d3:52:13:c9:19:12:07:b8:2e:86:c9:8d:99:
         60:01:e3:8d:ec:0c:4b:12:63:ce:6e:b6:eb:83:31:82:16:57:
         ae:ca:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:08:48 2025 by rpki-client