Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/323030313a313330383a3a2f33322d3634203d3e2036343030.roa
File:                     323030313a313330383a3a2f33322d3634203d3e2036343030.roa (raw, json)
Hash identifier:          HmHoTy0hd3qniZjw/2rBkP1SXvBJ9l95U/HjzQscews=
Subject key identifier:   D3:51:F7:F3:6F:89:18:21:50:07:89:D8:60:96:A4:72:61:F2:21:F7
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       1481B9D6419587C858559086C2F1B95F601FF792
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/323030313a313330383a3a2f33322d3634203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:42 +0000
ROA not before:           Tue 05 Aug 2025 14:29:42 +0000
ROA not after:            Tue 04 Aug 2026 14:34:42 +0000
asID:                     6400
IP address blocks:        2001:1308::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 12:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:b9:d6:41:95:87:c8:58:55:90:86:c2:f1:b9:5f:60:1f:f7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:42 2025 GMT
            Not After : Aug  4 14:34:42 2026 GMT
        Subject: CN=D351F7F36F891821500789D86096A47261F221F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:92:dc:39:4e:10:c8:79:d5:a3:ad:57:84:
                    85:86:a0:cd:4e:03:4f:26:2f:85:3d:9f:11:fc:93:
                    34:c6:51:d1:06:fd:1c:31:bb:cd:14:8b:f7:ae:3e:
                    28:6a:7b:c1:c3:eb:ff:b9:b3:5a:38:fa:d4:89:ca:
                    b9:51:d6:6f:ac:f0:31:6f:35:b0:40:fa:4f:d3:6f:
                    06:25:82:a1:cb:56:30:ab:53:fd:b5:44:65:f1:93:
                    14:16:a1:69:a2:0f:71:b0:90:78:89:7c:a5:c3:ea:
                    14:b5:9b:d2:fa:f1:a6:d9:1c:04:ba:c0:d9:8d:34:
                    2c:8b:a4:db:ed:3c:f9:6f:da:70:6d:87:4a:76:39:
                    d0:1d:10:ff:47:9f:c8:4c:76:d0:39:65:00:40:85:
                    e4:e1:ae:13:e2:2b:88:c5:39:d8:9b:e1:28:0a:6e:
                    79:df:ac:67:1a:5b:3b:ad:71:d9:9a:ad:e2:ae:d7:
                    10:fa:1e:c0:13:fe:d9:0b:5b:f3:1b:48:46:2c:2a:
                    7a:96:ff:de:56:63:03:76:ef:11:8a:8c:8a:f7:b1:
                    9e:79:04:af:dc:12:fb:ab:23:c7:44:ff:d1:ad:ac:
                    ec:52:5f:db:94:60:26:aa:2e:e2:d9:1c:f7:b1:6b:
                    bc:2f:58:d6:23:84:2a:05:7b:9c:d1:41:86:f0:d9:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:51:F7:F3:6F:89:18:21:50:07:89:D8:60:96:A4:72:61:F2:21:F7
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/323030313a313330383a3a2f33322d3634203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1308::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:30:59:32:f6:17:b3:d0:67:d5:97:a6:67:65:55:16:ac:aa:
         3e:dd:1a:57:cb:96:30:18:2b:90:7a:2d:f0:da:07:bf:ca:6b:
         18:80:32:cf:2b:ee:10:c8:ed:3a:cc:ec:1a:c6:89:78:48:a4:
         4f:ab:10:a8:98:21:0f:3f:e7:08:85:5c:24:a1:f1:53:75:82:
         00:4c:24:88:32:dd:f9:40:e6:17:5d:ee:16:3e:a0:54:87:45:
         a1:06:e8:37:27:72:ac:db:c8:a6:ba:07:a8:9a:0c:cd:07:17:
         64:4c:55:51:0a:4f:a0:3d:16:cd:e2:98:ff:d0:18:f4:97:4d:
         64:30:90:8a:99:d4:6c:d6:f5:45:08:7c:9c:d8:1b:56:9a:76:
         56:12:8d:bc:8d:c7:92:1a:f6:29:a0:4d:f7:04:8f:f9:a7:4d:
         4b:16:b5:3e:81:3c:04:b8:6b:9b:26:ea:49:8c:1d:a4:3e:d3:
         5f:42:ac:5d:33:ed:de:f1:28:08:23:45:b3:0b:39:95:a0:e3:
         06:db:42:65:f7:e1:f1:54:d2:12:4f:c8:2e:d5:0f:06:e7:4b:
         86:b7:65:9f:08:62:90:c1:eb:0c:73:ce:72:43:26:3e:8b:af:
         2f:4b:ae:e7:2c:ad:37:1c:1e:cb:a6:ce:8b:9b:72:95:7f:77:
         8b:6d:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:16 2025 by rpki-client