Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3139322e302f31382d3234203d3e2036343030.roa
File:                     3230312e3232392e3139322e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          mq0Pws0RVVb42jw7Y8rJaKTY6xK8mD/qFN+GBFqElsk=
Subject key identifier:   EE:53:A0:B3:5F:C5:8C:49:0D:03:81:B0:9E:66:64:05:AA:49:D2:0D
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       319244FE396643D7F6C0F7E41BD01FEE28210293
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3139322e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 05 Aug 2025 14:34:43 +0000
ROA not before:           Tue 05 Aug 2025 14:29:43 +0000
ROA not after:            Tue 04 Aug 2026 14:34:43 +0000
asID:                     6400
IP address blocks:        201.229.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:92:44:fe:39:66:43:d7:f6:c0:f7:e4:1b:d0:1f:ee:28:21:02:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Aug  5 14:29:43 2025 GMT
            Not After : Aug  4 14:34:43 2026 GMT
        Subject: CN=EE53A0B35FC58C490D0381B09E666405AA49D20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:02:93:10:bb:18:8e:aa:66:c1:6b:af:fb:cd:
                    47:95:72:6b:46:f4:10:58:d8:2a:32:2d:cf:eb:8c:
                    9b:cb:e4:13:c7:63:d1:e0:76:93:2f:ce:bb:cb:5c:
                    20:d3:f6:80:42:d4:ad:2b:9e:b0:3c:7a:b7:6e:dc:
                    03:bf:00:06:f3:51:d1:eb:01:b9:48:f7:4c:ce:78:
                    c7:5b:7a:6e:4a:fb:d6:3e:55:7c:2b:b6:72:32:32:
                    ef:e8:48:b1:65:37:0a:a7:cc:05:e0:b2:4d:33:c0:
                    a9:92:fd:df:7b:ce:29:68:85:20:f6:4c:df:f2:5d:
                    99:97:a4:7e:1b:e6:61:00:5d:ab:83:22:61:e1:74:
                    2f:09:a9:63:b0:7a:5e:a9:1b:f0:f4:26:6a:0d:9f:
                    08:ab:7d:44:4e:2e:3d:81:10:1f:31:8c:fa:75:3d:
                    9a:5a:7b:db:cc:da:f9:9c:8e:a4:24:d3:de:14:69:
                    db:db:56:65:e5:16:b3:16:e3:b8:9b:b9:13:75:15:
                    5c:a6:50:33:ad:a8:60:dd:b3:8d:eb:33:cc:43:17:
                    09:6a:05:65:28:99:9f:7e:1c:25:14:69:86:d1:76:
                    16:3c:b3:b7:cd:2a:40:b4:84:80:99:a5:ba:6d:88:
                    b1:ef:b5:30:3c:8f:70:3a:13:ae:ef:ef:13:f7:e0:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:53:A0:B3:5F:C5:8C:49:0D:03:81:B0:9E:66:64:05:AA:49:D2:0D
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3139322e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.229.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8e:ff:20:24:2c:da:d0:6a:72:2b:bd:77:87:9d:08:92:29:32:
         f4:1a:27:cf:fe:63:90:e4:fc:81:59:3e:75:12:9b:0f:a6:54:
         9a:ac:25:80:03:90:61:83:a7:6a:79:d6:0c:95:af:27:9d:27:
         ed:1a:48:34:5b:42:80:6b:12:f0:2b:88:14:31:c4:80:bd:c8:
         67:17:e0:8b:f5:c4:3d:48:8d:32:aa:45:d9:bb:9c:67:55:85:
         f2:f9:b6:a1:d6:31:ab:1d:85:6f:90:3b:51:e9:b5:81:a1:e5:
         07:07:ae:70:cd:bc:ef:89:7b:7c:fc:2e:7d:b4:30:9c:28:29:
         cf:36:ec:93:e8:1b:e7:95:a0:ca:01:ba:be:8d:48:b9:cb:ea:
         15:6e:0a:c8:f0:cf:91:fa:97:17:7d:50:79:cd:86:b4:b1:73:
         e4:9e:0d:e9:2e:f6:3e:f0:6b:ad:11:4b:26:f2:a0:92:ed:08:
         15:b5:ff:0c:02:f7:b1:00:66:ec:47:e7:aa:5b:13:e4:c4:79:
         d9:f9:f6:9b:f5:91:6f:41:9f:55:eb:40:87:2d:7b:c5:61:22:
         b3:37:e8:36:e7:59:57:af:b7:f2:5d:9b:15:01:b2:77:14:d1:
         a2:b4:4f:ab:1a:84:a0:89:44:fe:27:22:b2:69:cb:8b:bd:04:
         b9:5e:76:7d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMZJE/jlmQ9f2wPfkG9Af7ighApMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFERjgzMTdBMEVDNkUzQTVFNjA3OEMxODkyMDc4REQy
NzBEQkJGRTAeFw0yNTA4MDUxNDI5NDNaFw0yNjA4MDQxNDM0NDNaMDMxMTAvBgNV
BAMTKEVFNTNBMEIzNUZDNThDNDkwRDAzODFCMDlFNjY2NDA1QUE0OUQyMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ApMQuxiOqmbBa6/7zUeVcmtG
9BBY2CoyLc/rjJvL5BPHY9HgdpMvzrvLXCDT9oBC1K0rnrA8erdu3AO/AAbzUdHr
AblI90zOeMdbem5K+9Y+VXwrtnIyMu/oSLFlNwqnzAXgsk0zwKmS/d97zilohSD2
TN/yXZmXpH4b5mEAXauDImHhdC8JqWOwel6pG/D0JmoNnwirfUROLj2BEB8xjPp1
PZpae9vM2vmcjqQk094UadvbVmXlFrMW47ibuRN1FVymUDOtqGDds43rM8xDFwlq
BWUomZ9+HCUUaYbRdhY8s7fNKkC0hICZpbptiLHvtTA8j3A6E67v7xP34N57AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7lOgs1/FjEkNA4GwnmZkBapJ0g0wHwYDVR0j
BBgwFoAUgd+DF6DsbjpeYHjBiSB43ScNu/4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUY5N0U1QzE4QjZBQkE2RUMxNjU3RDUxQTRCMzc1MDJF
MjY2REU1NEU0NzhENkZFNkExMzVCMUYyNjI5RUQ2LzAvODFERjgzMTdBMEVDNkUz
QTVFNjA3OEMxODkyMDc4REQyNzBEQkJGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MURGODMxN0EwRUM2RTNBNUU2
MDc4QzE4OTIwNzhERDI3MERCQkZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlGOTdFNUMxOEI2QUJBNkVDMTY1N0Q1MUE0QjM3NTAyRTI2NkRFNTRF
NDc4RDZGRTZBMTM1QjFGMjYyOUVENi8wLzMyMzAzMTJlMzIzMjM5MmUzMTM5MzIy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNjM0MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsnlwDAN
BgkqhkiG9w0BAQsFAAOCAQEAjv8gJCza0GpyK713h50Ikiky9Bonz/5jkOT8gVk+
dRKbD6ZUmqwlgAOQYYOnannWDJWvJ50n7RpINFtCgGsS8CuIFDHEgL3IZxfgi/XE
PUiNMqpF2bucZ1WF8vm2odYxqx2Fb5A7Uem1gaHlBweucM2874l7fPwufbQwnCgp
zzbsk+gb55WgygG6vo1IucvqFW4KyPDPkfqXF31Qec2GtLFz5J4N6S72PvBrrRFL
JvKgku0IFbX/DAL3sQBm7EfnqlsT5MR52fn2m/WRb0GfVetAhy17xWEiszfoNudZ
V6+38l2bFQGydxTRorRPqxqEoIlE/icismnLi70EuV52fQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 02:08:25 2025 by rpki-client