Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3136362e302f32332d3233203d3e203138383232.roa
File:                     3139302e3135332e3136362e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          1ejRXtecHk2IbkwTNnuYxPEWcu6/4lxRI+qfpTWp/ng=
Subject key identifier:   A3:35:56:DE:FC:22:EA:32:32:6F:86:DF:E6:47:2A:18:98:39:FC:38
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       3028049E04352BC7BA9EBBF0053EFF58F4A68E5D
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3136362e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:57 +0000
ROA not before:           Tue 02 Jun 2026 19:40:57 +0000
ROA not after:            Tue 01 Jun 2027 19:45:57 +0000
asID:                     18822
IP address blocks:        190.153.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:28:04:9e:04:35:2b:c7:ba:9e:bb:f0:05:3e:ff:58:f4:a6:8e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:57 2026 GMT
            Not After : Jun  1 19:45:57 2027 GMT
        Subject: CN=A33556DEFC22EA32326F86DFE6472A189839FC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:05:12:3d:0b:f6:3a:01:ca:b7:3a:06:ba:
                    9c:87:4b:08:c8:ad:e1:11:85:75:12:4d:b6:4e:1a:
                    53:f9:5c:74:d3:58:0b:40:0c:97:ee:fd:fe:0d:49:
                    d6:f3:d6:f1:75:0b:41:c8:1c:a8:0a:1b:49:f2:36:
                    fe:5b:b9:54:d4:4e:78:d4:99:33:98:e3:09:56:c1:
                    89:ed:9a:63:d9:04:d4:12:86:8f:62:d6:64:6a:42:
                    dd:ae:9c:67:38:c6:8a:29:f2:76:f4:ae:e8:7e:18:
                    52:e0:5a:71:0d:a6:59:67:63:81:ef:43:33:4a:8f:
                    a8:10:ab:56:38:32:48:2d:3b:21:91:06:f1:d2:67:
                    cb:cb:f8:0f:49:52:f2:18:57:07:06:61:e8:f6:18:
                    fb:c8:3d:32:4c:85:25:66:6a:33:59:e8:9b:c9:8f:
                    ad:7b:c4:ce:dc:f7:93:67:42:18:9a:2c:e2:82:6a:
                    f2:3e:57:b0:6e:25:ac:76:dd:4c:62:ad:01:d0:b2:
                    b7:43:e0:9c:ec:28:99:be:03:74:3e:21:8b:8e:6d:
                    a1:6e:85:15:a2:cb:c0:ea:47:cd:5c:52:10:d8:ad:
                    be:00:1b:2d:90:b8:a8:dc:52:d8:3c:a8:5f:4b:b0:
                    53:d1:e5:9b:3f:c5:9f:02:cf:f8:48:0c:a3:1f:f5:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:35:56:DE:FC:22:EA:32:32:6F:86:DF:E6:47:2A:18:98:39:FC:38
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3136362e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:b7:68:f9:6c:f9:f9:36:e2:ee:9d:a5:2f:49:dd:bc:e0:eb:
         6e:22:33:c6:2f:ee:73:7f:85:0e:66:db:09:bc:2e:a9:11:40:
         e8:69:91:96:32:3e:d2:50:5c:15:8b:8a:8e:0b:a8:c5:cd:83:
         43:a3:0b:92:dc:66:ad:1b:ad:16:c9:e1:aa:26:31:45:34:b6:
         47:c4:d1:37:1d:0e:5a:bb:bf:bd:6b:67:3a:ae:41:94:5f:18:
         f5:b8:e7:cc:40:2d:0e:c1:4a:c4:08:96:9f:e3:31:36:22:c2:
         0f:7c:1b:d8:03:ce:88:f6:17:de:4e:a1:8f:e9:93:4f:5a:1e:
         06:b7:7d:d0:8b:33:18:14:2b:47:51:74:06:52:09:98:db:36:
         1f:ee:08:94:62:9a:ec:c4:a9:e5:46:96:4d:14:8f:82:a2:43:
         dc:07:ff:60:2c:de:80:ed:05:97:f0:a9:3c:57:5a:f4:23:5f:
         4f:e0:32:1c:5a:48:53:69:b0:c7:76:98:c7:c5:0d:71:20:31:
         72:84:d2:47:23:87:c0:1d:f3:bb:e4:1e:0e:dd:fd:31:f8:33:
         6b:59:90:ad:3b:41:c0:ab:1f:28:e4:4f:d1:a0:d1:c4:53:c5:
         b8:12:98:fd:6a:4c:62:5f:18:a6:8f:b4:f6:ab:32:9d:e2:c7:
         72:6b:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:13:59 2026 by rpki-client