Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e36342e302f31382d3234203d3e2036343030.roa
File:                     3230302e38382e36342e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          E9Z8kwDWlQzw+G18OKeFGif73VNEbR07e0iqf3RDRTU=
Subject key identifier:   A2:E2:13:76:D0:A6:3D:BC:68:07:EF:AF:1C:0E:57:B8:69:C6:47:E8
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       55C748FE3CFC16275ADF2D3B69054C3902214407
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e36342e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:44 +0000
ROA not before:           Tue 05 Aug 2025 14:29:44 +0000
ROA not after:            Tue 04 Aug 2026 14:34:44 +0000
asID:                     6400
IP address blocks:        200.88.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c7:48:fe:3c:fc:16:27:5a:df:2d:3b:69:05:4c:39:02:21:44:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:44 2025 GMT
            Not After : Aug  4 14:34:44 2026 GMT
        Subject: CN=A2E21376D0A63DBC6807EFAF1C0E57B869C647E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:e9:a1:a4:c2:d3:bb:3a:7b:1d:92:11:7f:
                    6c:45:18:a7:80:27:6e:a5:ac:84:7d:a2:20:87:70:
                    f0:dc:3c:b2:b5:ee:aa:62:0b:08:47:80:bb:6d:7f:
                    54:5b:02:23:d7:9e:80:5c:71:8e:3a:ed:ed:46:7e:
                    65:fd:14:c2:04:3f:a9:8f:11:81:b0:a1:1d:9f:be:
                    73:9e:32:46:cb:24:cf:78:30:92:8e:73:27:3c:78:
                    de:79:3f:85:3b:1f:bd:cd:2c:a4:19:1e:2e:4f:1b:
                    ed:96:c2:c9:b7:7b:a1:1a:21:af:dd:47:03:bd:ba:
                    c7:8b:82:15:13:31:2e:d2:49:86:14:97:7f:dd:f2:
                    1d:35:e6:f2:5b:95:de:72:8e:dc:55:18:f9:6f:ea:
                    43:52:e1:00:6c:eb:76:ca:04:74:01:49:a8:38:0b:
                    c2:02:c6:95:4f:cb:8d:cf:7a:0f:d1:1a:7f:4f:2b:
                    a6:16:4e:17:5f:de:31:dc:a5:c2:d1:3f:43:c6:5c:
                    33:5b:11:e1:16:df:6d:8f:4a:d5:78:91:ee:72:b4:
                    49:49:f8:da:c7:40:64:17:f8:2c:81:e8:3f:b4:e0:
                    e9:06:31:45:89:97:da:a1:7a:f4:5b:d6:e5:3f:fb:
                    61:8a:55:d0:91:35:38:5c:7f:25:4f:98:91:b2:dd:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E2:13:76:D0:A6:3D:BC:68:07:EF:AF:1C:0E:57:B8:69:C6:47:E8
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e36342e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.88.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:6f:da:d4:f6:0d:99:23:f5:57:0c:9f:00:56:ab:ec:b9:
         cc:d8:37:3d:da:f5:3c:2c:9b:65:5a:9f:c9:62:60:28:70:0b:
         dd:08:9c:e1:7f:66:8a:11:40:f7:16:2a:44:b5:b1:cd:e9:be:
         99:b9:1d:4a:21:83:c5:bd:fc:a0:47:2a:a3:54:7f:db:79:74:
         2e:ed:4d:ff:7a:d3:37:1c:b9:a6:94:93:7c:19:ef:c1:e2:29:
         91:9e:a3:b6:6b:65:30:23:89:0b:6d:0a:b8:b4:5b:02:ab:22:
         fd:b4:e3:20:47:a1:0c:bc:f4:fc:f4:14:31:f6:48:9e:c7:c4:
         70:24:bf:86:94:b6:e5:5c:8d:ec:ef:01:a4:ea:ff:dc:b0:b3:
         ee:6f:b6:c6:7f:7b:ed:c3:59:30:1d:d8:10:53:4f:66:19:e5:
         01:b8:f8:af:2d:bd:ed:d3:86:95:9c:c1:b9:2f:01:74:e6:98:
         b5:0a:3a:a8:16:6f:43:a1:97:03:b7:b7:57:05:ae:87:cf:8d:
         50:81:ae:76:d2:e6:4c:63:10:b8:d7:0b:ea:c8:14:13:ef:c1:
         14:db:d5:98:67:b8:27:01:ea:47:42:da:bb:ae:22:f0:fa:2c:
         65:76:3b:c2:17:50:f5:d3:16:a7:33:11:9a:10:fb:d4:4e:89:
         cf:c7:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:10:55 2025 by rpki-client