Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e302e302f31392d3234203d3e2036343030.roa
File:                     3230302e38382e302e302f31392d3234203d3e2036343030.roa (raw, json)
Hash identifier:          QDR9Xe5x9lqMuSuvbftkbD91RoP0EAK20Ly8DQB+E1c=
Subject key identifier:   9B:4A:E4:51:76:0F:8A:79:5B:34:FD:FF:22:9D:80:FC:89:DD:CB:E5
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       7DFE13CAFE2520DA32B24807E47ADC714D022012
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e302e302f31392d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:43 +0000
ROA not before:           Tue 05 Aug 2025 14:29:43 +0000
ROA not after:            Tue 04 Aug 2026 14:34:43 +0000
asID:                     6400
IP address blocks:        200.88.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fe:13:ca:fe:25:20:da:32:b2:48:07:e4:7a:dc:71:4d:02:20:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:43 2025 GMT
            Not After : Aug  4 14:34:43 2026 GMT
        Subject: CN=9B4AE451760F8A795B34FDFF229D80FC89DDCBE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:15:44:86:77:1f:80:23:d0:64:f3:70:7c:
                    67:a7:93:6d:92:3e:2f:d7:dc:2b:40:48:f8:05:df:
                    28:11:c8:4f:d0:58:8c:c9:54:3f:33:c0:a2:79:b1:
                    f7:68:b9:46:d5:7f:d9:be:69:dc:d1:86:4f:23:4f:
                    9a:43:cb:8d:90:8b:8f:5a:85:3e:19:5a:aa:de:25:
                    fc:d1:0c:fd:9d:3c:74:e7:15:c8:47:51:8b:5e:c7:
                    9f:79:fa:aa:50:1e:65:6e:82:f9:54:72:2e:f4:07:
                    63:12:54:71:d0:01:ce:6d:12:21:e7:36:6d:d2:7c:
                    98:c9:43:4e:42:45:c2:65:af:43:8d:ca:d4:e3:23:
                    50:de:50:a2:83:47:8e:03:9c:c4:c4:80:6a:c6:6c:
                    8c:b2:0d:e9:3d:06:69:f1:75:ff:1a:45:3f:1d:e7:
                    bc:82:e3:28:5b:f2:7a:c0:3a:80:49:7e:ba:07:e2:
                    72:e2:6a:c5:7e:3d:9f:23:ce:e9:1c:12:e6:28:20:
                    27:38:a9:60:66:c6:44:a9:c4:b3:87:67:69:bd:f6:
                    d1:bd:b2:81:15:3c:93:22:6e:df:db:cb:9c:59:e7:
                    40:10:7d:3e:77:73:b5:0e:9f:76:98:64:8d:ad:ca:
                    2f:f4:59:15:ee:42:f0:4b:28:9f:47:ec:8e:2c:d7:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:E4:51:76:0F:8A:79:5B:34:FD:FF:22:9D:80:FC:89:DD:CB:E5
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e302e302f31392d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.88.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:37:92:35:d9:f6:d0:40:2c:4d:4b:4a:d9:5f:af:06:05:47:
         74:52:3c:5b:b2:82:c8:b2:ef:fa:8f:1e:7f:5e:80:b4:67:98:
         9c:bd:e4:7a:ab:80:84:2f:d7:dc:7c:bf:23:bf:7e:33:b4:5b:
         3b:3b:ca:8b:c4:8d:d2:86:d3:1a:bf:4a:3f:05:b3:f5:cb:2a:
         46:bb:b5:cf:40:56:0e:77:14:4c:ff:aa:a5:ed:c9:9e:38:66:
         4a:b5:82:d3:2b:27:9b:db:37:61:f4:30:31:76:6a:04:11:26:
         f0:21:ed:69:f9:8a:46:2a:27:16:86:d3:77:36:95:b7:26:52:
         6f:8f:a5:d4:8b:38:b7:84:cb:19:36:c7:f3:a4:d7:49:78:db:
         3b:6f:87:04:17:94:ab:cd:b6:50:80:3a:58:4b:b3:92:48:d5:
         be:2f:2a:6e:94:97:58:35:1f:e3:e1:3c:1a:ec:73:4f:1f:46:
         c6:85:b6:e4:8c:82:56:86:98:8e:44:c9:21:5f:4c:b8:ae:e3:
         e1:4d:96:66:f7:c8:1c:f9:97:cd:11:05:34:40:e1:d0:4a:14:
         e9:60:0f:93:e7:07:8d:a6:2c:dc:67:12:c4:6e:f6:6b:c3:a0:
         cb:98:1e:6e:af:4f:b7:32:db:d9:2c:1b:7e:7c:ae:f7:b5:9e:
         2e:9b:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:45 2025 by rpki-client