Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e37362e302f32322d3234203d3e2036343030.roa
File:                     3139362e332e37362e302f32322d3234203d3e2036343030.roa (raw, json)
Hash identifier:          0hCNzMYuRzE/fQBF666EFC/lJ1qjGrchF89iz/XPzcQ=
Subject key identifier:   A6:E6:29:5C:47:78:62:A5:76:0E:0D:00:37:99:5C:BC:3C:F4:BA:54
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       7A318447A1E892245EEA5BC9208F62AF45E86B19
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e37362e302f32322d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:41 +0000
ROA not before:           Tue 05 Aug 2025 14:29:41 +0000
ROA not after:            Tue 04 Aug 2026 14:34:41 +0000
asID:                     6400
IP address blocks:        196.3.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:31:84:47:a1:e8:92:24:5e:ea:5b:c9:20:8f:62:af:45:e8:6b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:41 2025 GMT
            Not After : Aug  4 14:34:41 2026 GMT
        Subject: CN=A6E6295C477862A5760E0D0037995CBC3CF4BA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:39:3c:9c:5e:89:89:35:62:01:56:95:46:
                    53:ad:85:06:23:97:3c:6e:26:4b:3f:0a:c0:de:db:
                    1a:55:6d:88:b9:15:98:b1:3c:9b:ea:e9:f6:23:1b:
                    3a:8d:14:59:42:a2:9e:cc:b8:b9:2c:76:f3:d6:71:
                    74:b7:60:88:35:11:9b:0f:50:4d:8b:71:79:ce:6e:
                    5d:38:61:b9:3d:fb:16:03:78:59:e0:68:5e:39:69:
                    e4:37:05:6c:03:bb:09:a9:64:2d:88:24:8d:2a:96:
                    d9:d4:2e:9a:f1:86:8d:45:4e:f6:b8:38:c1:59:2f:
                    e9:48:38:a9:ca:14:3e:29:94:1d:80:1b:c8:dc:d6:
                    1e:1a:ed:ec:7e:93:0e:e2:18:a7:88:f1:84:78:53:
                    13:ff:1b:74:a9:0e:41:4a:c9:74:74:b4:ea:99:76:
                    6a:ec:00:ba:34:f5:23:88:cc:77:84:43:b3:ba:14:
                    fd:b5:6e:dc:13:4c:dc:17:62:fe:6a:e9:ab:2f:c5:
                    5d:4c:61:58:e8:78:c2:40:ca:cc:96:ca:ba:cf:f6:
                    50:ca:13:25:7a:d4:b7:86:c0:71:a0:06:05:ee:c5:
                    35:5a:f4:ad:26:25:21:d4:ba:02:1a:7e:84:f3:f3:
                    a7:44:3f:79:d8:41:d2:bc:4f:bf:2e:49:99:64:42:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E6:29:5C:47:78:62:A5:76:0E:0D:00:37:99:5C:BC:3C:F4:BA:54
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e37362e302f32322d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.3.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:34:96:bb:bf:e8:5c:af:74:e7:9f:96:c5:45:52:89:35:ef:
         8f:a0:d1:49:be:78:0c:8e:ba:01:5c:73:c5:39:47:72:0d:0f:
         9b:9b:c6:22:c8:ca:70:63:cd:25:85:f2:67:0a:c8:0d:2d:a0:
         a5:14:7c:04:1c:7a:d3:24:c9:6a:0f:84:9e:06:c5:fe:6e:2f:
         6e:4d:c9:6a:e0:82:61:63:ce:40:3d:8a:a3:31:68:1c:04:52:
         65:8b:d6:fd:4c:73:67:8f:57:17:8c:ca:25:8d:ac:94:ac:ce:
         b5:0d:87:e9:57:61:cc:ba:7f:af:8a:4e:83:c1:b4:cf:6d:35:
         3e:bc:48:85:bb:a1:83:b5:f6:6c:7c:a7:8d:5b:30:54:b2:9e:
         64:ab:3f:b1:da:89:37:f8:46:e9:fc:31:9b:e8:15:3f:b0:32:
         1e:ce:a4:59:6b:4e:a5:3f:de:90:4a:3d:1d:90:67:98:fb:ad:
         95:20:a3:3b:e5:94:37:91:c9:09:ca:58:4b:15:e4:cf:39:38:
         2c:eb:d3:14:55:e8:36:2d:18:6a:eb:d1:24:8a:e6:a6:71:8c:
         ff:4d:f1:da:a4:fc:01:bf:a7:d3:de:c7:53:f8:c2:38:67:cc:
         ea:7e:3e:21:fb:3e:ce:80:61:64:b9:52:59:9d:b7:06:a6:5b:
         0c:b2:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:38 2025 by rpki-client