Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3136382e302f32342d3234203d3e203138383232.roa
File:                     3139302e3135332e3136382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          5O7bnzDeFaiCdo55PJAu9yAlA/j8KiTyDuewFiuYp8U=
Subject key identifier:   17:F2:34:1F:73:26:CF:95:C4:56:F1:91:FE:E8:C7:91:2E:72:B1:A5
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       3936663DE638615C141DC1EFA1F9C136B4D51FEB
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3136382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:56 +0000
ROA not before:           Tue 02 Jun 2026 19:40:56 +0000
ROA not after:            Tue 01 Jun 2027 19:45:56 +0000
asID:                     18822
IP address blocks:        190.153.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:36:66:3d:e6:38:61:5c:14:1d:c1:ef:a1:f9:c1:36:b4:d5:1f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:56 2026 GMT
            Not After : Jun  1 19:45:56 2027 GMT
        Subject: CN=17F2341F7326CF95C456F191FEE8C7912E72B1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:32:f3:65:c7:63:a5:2e:2a:b2:4e:5a:ed:
                    cb:81:66:89:88:71:42:f1:9c:a1:1d:2e:62:13:02:
                    4e:e3:94:5e:30:f2:23:fe:54:79:ea:42:34:29:65:
                    45:ef:15:a8:b3:d2:93:8a:ca:20:b4:55:4f:b8:03:
                    c9:bd:3d:5d:a5:67:7c:46:5c:5c:70:3e:f5:c3:99:
                    ad:3f:8c:29:b8:2f:05:f2:93:1e:27:91:7f:42:e7:
                    6f:31:50:6a:a7:43:c9:26:17:df:50:99:7d:67:0a:
                    73:ae:2c:40:30:85:cf:73:49:81:c6:29:aa:96:cf:
                    b3:5d:9d:d1:4d:c6:8d:6c:b2:15:04:fe:46:c7:49:
                    4d:99:d7:17:c4:25:b6:8a:39:5d:f2:54:fc:53:d9:
                    d8:90:dc:08:b0:c6:be:a2:71:5d:cf:f2:48:d5:fd:
                    83:0c:df:60:85:05:a6:54:f8:fd:ce:98:c7:71:70:
                    1a:3f:76:31:36:34:de:7f:2f:75:55:51:a9:d3:a5:
                    af:e4:35:12:41:00:b3:bb:aa:ec:da:5d:dd:2a:c8:
                    9e:2a:17:23:d3:de:56:ad:26:73:0c:a9:56:d7:b2:
                    c0:e9:3d:8d:e6:a1:86:35:e6:b8:0f:a5:86:8f:57:
                    ea:70:4d:7a:9c:ed:e0:df:28:ed:79:9f:76:29:8e:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F2:34:1F:73:26:CF:95:C4:56:F1:91:FE:E8:C7:91:2E:72:B1:A5
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3136382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:f4:19:e9:9a:2d:6f:14:f4:08:18:be:18:41:68:3a:83:
         10:8a:5a:69:13:1c:44:17:5a:42:5f:7c:eb:1e:ef:10:33:1a:
         d8:2a:5c:46:94:97:4e:d3:7f:60:37:d8:dd:bd:a9:56:5b:d2:
         2d:b2:38:54:39:06:b3:04:c6:24:f8:55:bf:ec:8a:24:aa:54:
         b9:b3:94:1a:61:61:c2:fd:07:b1:cd:68:e5:13:e9:f2:bc:69:
         bb:ab:c9:28:fa:44:f1:93:53:8b:1d:97:f5:cc:39:9e:b2:7d:
         c0:5d:8c:b6:27:84:38:32:ad:d6:00:2f:28:ee:54:fa:8f:34:
         63:2f:a6:d8:a2:8f:33:08:8d:97:71:ae:f9:9b:2c:ce:40:fa:
         c2:26:b9:29:46:fb:12:ce:c0:3a:14:41:b1:63:5c:f4:71:aa:
         5f:ea:a6:44:ec:3a:75:57:a5:e6:1c:ad:f7:09:ac:57:32:55:
         ec:85:d8:af:3f:87:43:8f:8a:02:61:dd:3d:fe:4e:ad:ea:c2:
         42:8f:3b:14:aa:1a:5b:5f:d5:d0:eb:f3:b6:50:99:b0:f3:22:
         3d:a7:6c:f2:c3:60:55:f0:c1:79:e6:27:bd:0f:95:15:b6:9b:
         9b:1b:06:a6:51:a7:d0:e2:0e:ab:b3:b2:ef:a9:33:bb:c8:50:
         aa:c0:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:54:45 2026 by rpki-client