Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e33322e302f31392d3234203d3e2036343030.roa
File:                     3230302e38382e33322e302f31392d3234203d3e2036343030.roa (raw, json)
Hash identifier:          vftn1qakuqerNJNl+qiVNZHWC3Y7TCDrczFZo66qp3I=
Subject key identifier:   C7:7E:00:9D:EB:70:D1:36:CA:96:EE:DC:B6:2D:F3:AA:5B:94:24:10
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       7B4ACE34895A816613910E335EE9B4DA94CFDA76
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e33322e302f31392d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:45 +0000
ROA not before:           Tue 05 Aug 2025 14:29:45 +0000
ROA not after:            Tue 04 Aug 2026 14:34:45 +0000
asID:                     6400
IP address blocks:        200.88.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:ce:34:89:5a:81:66:13:91:0e:33:5e:e9:b4:da:94:cf:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:45 2025 GMT
            Not After : Aug  4 14:34:45 2026 GMT
        Subject: CN=C77E009DEB70D136CA96EEDCB62DF3AA5B942410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:f2:94:71:d2:d5:66:81:4b:79:9b:76:e0:
                    72:24:4a:9f:09:ed:5b:2a:69:f1:e1:9e:33:f0:0a:
                    2c:c5:e0:bc:b5:b5:38:db:19:a6:d4:36:0e:39:32:
                    bb:88:c2:45:9b:7a:ea:62:3d:a8:72:2a:6a:5f:cb:
                    45:bb:2d:5a:70:be:33:13:cc:3a:75:47:0c:6b:2c:
                    08:b1:50:4c:10:18:81:54:67:6c:9a:fd:19:95:c8:
                    40:6a:54:0a:93:d3:1e:10:81:33:82:e0:39:75:a1:
                    29:65:bd:d3:ec:bb:87:7f:52:c3:48:1b:6f:74:14:
                    c8:6e:61:12:b1:16:2a:27:8d:03:63:2c:d9:66:68:
                    29:0c:8b:2b:42:07:47:67:9a:b5:33:0c:f3:bf:ab:
                    ca:5c:ba:e2:48:11:f7:54:7b:63:15:21:2d:43:15:
                    bc:0c:6c:cf:0a:61:04:ef:0a:c9:40:d0:60:a5:94:
                    fb:73:a1:a2:2e:9f:d0:06:86:93:d7:4f:3d:33:74:
                    fb:e2:85:75:67:8d:c3:6f:02:7a:2c:d9:59:f6:52:
                    04:97:e0:17:88:56:f7:af:5a:bb:e3:fd:fd:f7:15:
                    07:20:fe:1d:ab:6a:6d:95:4c:b0:44:d7:0a:d3:ae:
                    9c:de:bf:35:43:5a:9b:01:d8:6d:77:ef:4f:00:6c:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7E:00:9D:EB:70:D1:36:CA:96:EE:DC:B6:2D:F3:AA:5B:94:24:10
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e33322e302f31392d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.88.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:57:ba:f0:1d:e3:b7:4a:22:cb:17:ac:90:d9:3d:35:2b:61:
         b5:50:aa:21:1e:c8:5a:5c:bb:db:ab:b3:e3:8d:bf:a1:4a:f2:
         49:5d:a9:f2:c1:75:1d:31:0f:ab:55:2f:be:7e:43:d1:47:fc:
         f8:4b:59:d2:81:1a:88:5a:c1:61:a8:a9:c8:b0:75:f9:a9:c5:
         2e:d3:1c:26:ed:53:28:28:c0:5c:73:31:5f:ef:c9:52:62:fe:
         01:a0:20:76:08:00:57:49:8a:53:15:4e:9c:92:72:9b:da:b0:
         82:0b:f6:fa:cf:04:e7:93:4e:6f:d9:fc:b8:86:b5:d2:f4:46:
         9b:76:2f:8e:84:a7:56:2c:ed:f3:24:44:e9:e0:68:9f:b8:83:
         a3:05:ba:18:ca:aa:16:30:b0:e3:79:ce:fe:3b:be:5c:43:4e:
         2c:97:fc:eb:f2:b3:96:9e:2d:f3:4a:3d:9a:f4:75:82:ae:e3:
         af:5a:7b:f8:a0:db:15:cd:43:cd:86:17:47:8d:7c:43:1f:2c:
         22:28:0c:fb:94:4d:41:94:49:c3:ec:ba:e8:4b:8f:b4:5b:82:
         05:92:75:4f:21:2c:f0:d4:90:e0:52:83:4c:5f:f0:3f:70:ab:
         b7:fe:db:5d:68:8a:3e:f6:32:23:46:74:36:6a:b7:c4:a8:0c:
         94:5c:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:22 2025 by rpki-client