Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3135362e302f32342d3234203d3e203138383232.roa
File:                     3139302e3135332e3135362e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          th3wrH1nDROCvUDHcWiReLLFvOroqJMLoC3GMo8b+pU=
Subject key identifier:   DA:61:AF:47:3E:1F:FB:A9:78:97:47:54:A8:03:25:AF:AD:4E:74:29
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       33720E8879FBF2003D35716D2833F0D65E4C66F9
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3135362e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:45 +0000
ROA not before:           Tue 02 Jun 2026 19:40:45 +0000
ROA not after:            Tue 01 Jun 2027 19:45:45 +0000
asID:                     18822
IP address blocks:        190.153.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:72:0e:88:79:fb:f2:00:3d:35:71:6d:28:33:f0:d6:5e:4c:66:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:45 2026 GMT
            Not After : Jun  1 19:45:45 2027 GMT
        Subject: CN=DA61AF473E1FFBA978974754A80325AFAD4E7429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:4e:2a:dc:37:14:20:1e:aa:af:7d:99:ae:
                    d3:03:a0:86:14:76:96:57:91:06:47:a8:0a:e2:69:
                    0f:d5:ef:70:17:41:34:4a:06:b0:93:e0:fd:1a:d8:
                    2f:75:4e:e8:a5:6b:e7:30:f6:d0:99:7a:68:1f:40:
                    05:34:bd:fd:a5:a0:49:ef:4c:c7:06:45:2a:c7:f9:
                    20:1a:f7:58:d5:ee:2e:47:1b:bf:c2:ef:61:21:eb:
                    03:49:66:16:46:ad:ea:d5:d1:7c:cb:c9:d0:aa:b8:
                    f4:ac:2a:bf:f8:1a:e6:e8:ce:3d:92:6a:99:37:25:
                    39:ac:01:24:27:ec:5d:ac:58:60:d7:9f:28:11:5f:
                    e2:31:9d:a5:83:40:4b:d2:8f:5e:5a:27:5d:2d:ad:
                    9e:f8:5c:36:45:9b:89:24:a5:c3:05:2e:d0:ba:b3:
                    78:ea:4a:b8:ad:a0:c4:d9:b4:ac:8f:45:c5:ed:45:
                    ac:92:40:fb:58:2b:8c:94:f8:f2:77:25:f4:09:b9:
                    7c:d0:72:f3:67:1e:fb:02:25:13:1f:1b:cf:d0:74:
                    2a:57:bc:be:04:e3:58:d2:33:51:96:f8:0e:72:ff:
                    f0:51:d8:14:14:93:72:2c:fb:24:fa:25:74:bb:7d:
                    be:e9:38:7a:9c:1e:33:b6:ce:67:dd:fe:76:cd:8e:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:AF:47:3E:1F:FB:A9:78:97:47:54:A8:03:25:AF:AD:4E:74:29
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3135362e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:52:4f:0e:aa:ae:37:36:ae:8f:0f:7a:2a:6a:8f:7c:56:
         74:17:8e:b1:ea:6f:74:14:89:33:78:56:f4:1b:69:df:e2:0e:
         70:d1:34:f0:c4:db:67:fc:af:c7:fb:22:d1:09:62:22:fc:61:
         ce:9f:93:28:69:cb:05:dc:37:f7:f6:8e:15:e4:6b:8d:5a:22:
         28:9a:b4:d7:28:e5:13:36:23:28:22:da:df:02:a8:e2:df:0f:
         00:0b:53:bb:60:e8:8c:70:ad:cc:3c:d0:f5:89:1e:63:e6:02:
         0c:65:31:ac:55:19:4c:f4:74:1a:99:1f:12:6b:a3:94:23:43:
         56:60:cd:ee:f3:d0:03:3d:cf:43:b8:4c:df:c8:39:a5:e0:97:
         09:ab:c1:0e:34:4a:cf:b3:19:46:0d:70:ba:a4:30:c7:33:46:
         8c:cb:86:ac:4b:16:d8:8d:e3:3d:09:af:be:e5:c6:7e:a3:95:
         c2:42:74:77:cc:da:6e:9c:51:d9:71:00:4f:07:3e:ee:20:81:
         40:49:28:cd:6e:ba:28:10:ac:4f:66:5f:5f:2a:a0:84:60:2d:
         06:c9:7b:41:34:5a:82:c8:dc:66:31:59:e2:b2:f1:79:20:33:
         e4:7b:6e:60:35:34:04:9f:19:bd:ae:fe:19:7e:f2:bb:68:90:
         23:40:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:54:49 2026 by rpki-client