Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa
File:                     3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          NTQZfv4fr+CRdkbrxqCi6ut1fbqUoCJk4OvNRusiVDI=
Subject key identifier:   CB:A9:A5:7C:13:77:CA:68:D3:2E:28:36:F8:5E:8A:05:B5:E8:D6:0A
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       1C72C7B7F3F9743940B95A8C3381699E5BB2EC3A
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:58 +0000
ROA not before:           Tue 02 Jun 2026 19:40:58 +0000
ROA not after:            Tue 01 Jun 2027 19:45:58 +0000
asID:                     18822
IP address blocks:        190.153.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:72:c7:b7:f3:f9:74:39:40:b9:5a:8c:33:81:69:9e:5b:b2:ec:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:58 2026 GMT
            Not After : Jun  1 19:45:58 2027 GMT
        Subject: CN=CBA9A57C1377CA68D32E2836F85E8A05B5E8D60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:40:15:ec:32:36:42:07:59:ef:9e:96:38:
                    9c:62:67:d3:4c:5f:bc:e6:a6:48:d8:0c:b1:e6:97:
                    75:ca:1c:6f:41:a2:b0:29:ea:b8:2d:87:fe:c9:dc:
                    e4:c5:54:a5:7a:2c:af:7a:07:48:8b:07:d2:60:c2:
                    94:62:97:55:76:b2:7f:a0:2d:52:1a:82:53:18:2e:
                    69:ac:19:70:f6:59:be:de:3f:85:6d:bd:8d:4e:03:
                    83:ea:75:de:21:b7:d2:0e:ec:c8:46:65:98:f0:d1:
                    66:22:6d:5a:3d:54:75:a3:f7:cb:a1:fa:1f:5b:af:
                    9d:42:f3:da:c8:49:8e:3d:e4:e1:b1:07:29:cc:99:
                    19:37:1f:4f:95:14:65:71:d4:ae:99:da:f0:95:fe:
                    9e:e3:1a:03:5f:62:43:79:c7:46:8e:ac:af:70:49:
                    f2:b7:e2:27:37:13:7e:cc:7d:5f:e9:6e:86:84:1e:
                    56:a0:76:f7:f8:7c:93:5a:5e:9c:69:72:b4:c6:9c:
                    56:c9:95:d8:37:83:bd:39:92:2e:4b:41:0e:93:c4:
                    ee:d3:44:0a:3d:0a:44:85:7b:42:5d:9e:e1:dc:a5:
                    70:08:0f:f8:51:c9:be:eb:db:f0:ca:6f:ac:9a:f8:
                    b4:d1:94:72:8f:a4:38:3c:c6:4d:1e:f3:54:e1:58:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:A5:7C:13:77:CA:68:D3:2E:28:36:F8:5E:8A:05:B5:E8:D6:0A
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:fa:85:c5:a5:75:70:98:3c:dd:db:35:cd:d0:84:2a:1b:ae:
         21:9c:86:0b:60:12:b1:59:9b:8a:ab:fd:a1:b5:b2:c4:40:6b:
         dd:bf:7d:81:c8:d9:a4:e2:79:f7:0f:92:59:d0:dd:a7:cf:36:
         47:47:53:eb:39:1e:e1:d3:01:ef:c0:9f:45:1d:e6:5a:d2:12:
         df:a5:c5:1a:e4:7f:31:28:49:df:11:ed:65:ba:c2:42:75:93:
         aa:4b:8f:e9:88:a8:12:b8:36:88:2a:da:b9:40:dd:ee:c1:61:
         1a:77:ad:56:70:9c:42:43:7e:54:5e:b3:2a:2c:73:ac:69:0a:
         86:0f:d8:6f:4d:f1:0e:d8:a8:f9:32:99:61:bc:cc:61:50:c4:
         40:ea:0f:c2:74:b8:36:9a:91:6e:94:b1:1b:d6:32:1d:0e:2f:
         f2:50:af:ce:78:df:7f:c7:a5:04:2c:4c:4c:29:bc:9d:ff:40:
         2a:f9:2c:28:7a:da:c5:f3:33:3f:8d:96:32:47:06:7e:d9:a2:
         0a:53:4a:8c:c3:7c:12:16:c6:b4:d9:01:01:e1:ad:8d:f7:27:
         1f:a3:89:c3:02:11:8f:2e:36:4a:03:55:3e:62:27:bf:2d:3d:
         d1:62:0e:34:a9:07:3b:b4:93:44:0a:58:2a:58:78:45:6d:94:
         dd:33:50:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:54:32 2026 by rpki-client