Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3130382e302f32332d3234203d3e203138383232.roa
File:                     3139302e382e3130382e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          nudLFcU/qZcPb5JOfn1aCZ/7C20JwaRylW1QKSjuvKg=
Subject key identifier:   10:0A:09:D3:93:BE:7A:38:48:E5:61:3F:64:64:6B:F6:03:1E:18:22
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       1E245EEEC12EAAB165A465D3BF239F6E635023EE
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3130382e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:55 +0000
ROA not before:           Tue 02 Jun 2026 19:40:55 +0000
ROA not after:            Tue 01 Jun 2027 19:45:55 +0000
asID:                     18822
IP address blocks:        190.8.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:24:5e:ee:c1:2e:aa:b1:65:a4:65:d3:bf:23:9f:6e:63:50:23:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:55 2026 GMT
            Not After : Jun  1 19:45:55 2027 GMT
        Subject: CN=100A09D393BE7A3848E5613F64646BF6031E1822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:65:6d:72:20:42:48:28:8f:16:4a:98:fd:
                    c0:fa:c8:8d:81:8f:68:df:e4:78:cb:c7:da:17:89:
                    ca:ed:36:1f:da:06:e0:f0:16:9e:6f:8a:1b:9f:9a:
                    15:41:7e:fd:ab:e8:6d:4f:f3:2c:d2:b7:f0:1f:e1:
                    39:1c:66:b2:1c:44:38:64:df:8f:ad:c6:04:11:15:
                    71:3b:4b:01:46:f6:6d:21:fd:bd:e4:cf:8c:99:8a:
                    5f:c3:30:4d:22:2a:cf:42:ef:e3:4c:52:29:aa:02:
                    b1:0b:59:c6:53:df:81:f1:73:de:ef:0c:01:1b:be:
                    6b:de:41:59:1a:73:43:c8:7f:fb:00:12:aa:38:a6:
                    de:e0:40:fb:95:10:0b:71:8b:ce:34:5d:cd:6a:e5:
                    1c:a0:3c:c6:e7:11:9f:ab:0e:98:05:c8:eb:08:ed:
                    a7:64:aa:d0:86:27:c8:b4:49:ce:99:67:29:fc:17:
                    08:ad:b5:1d:b0:39:17:e0:dd:4a:36:5d:f5:bd:8c:
                    71:d0:c1:0d:0f:ea:f5:f8:90:5f:ec:3a:51:bc:81:
                    4b:ee:90:a8:ec:19:e7:89:d2:47:5a:62:3d:7a:58:
                    8d:51:a4:33:22:fd:bf:30:41:27:c3:51:3b:f1:a3:
                    64:0c:a9:61:d4:32:13:ba:40:17:6d:75:6b:9d:5f:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0A:09:D3:93:BE:7A:38:48:E5:61:3F:64:64:6B:F6:03:1E:18:22
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3130382e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:c5:b9:f0:5d:df:2e:b6:cf:0c:84:ff:39:6a:bf:f9:a4:
         4b:2c:d3:89:6d:df:f3:ed:0b:c3:db:4e:6c:1d:4f:77:3f:4a:
         4e:51:a5:9f:4f:af:cc:a0:a5:04:9b:fd:7b:0b:09:57:7d:3e:
         ce:7d:cc:2f:7b:41:74:f4:ca:8a:b0:73:43:36:f8:6f:55:6d:
         08:07:eb:ed:2b:c1:0c:b9:09:5b:0c:f3:11:f6:33:f8:a5:b3:
         3b:88:cf:da:bb:58:14:87:df:64:0b:f0:d8:4e:6e:9d:0e:ac:
         30:6e:2a:4c:55:cc:e6:67:f6:74:c7:b6:b1:74:6e:30:49:91:
         b1:3e:40:55:da:68:6a:be:4a:66:68:b1:82:13:eb:2f:b0:dc:
         1d:21:8e:6a:6f:0e:46:3d:2c:8c:8e:b6:ee:28:78:70:1d:08:
         f1:9a:09:e9:87:65:0b:59:55:f7:ed:63:2a:e4:fc:a1:5d:9a:
         a7:20:52:9d:ff:02:b0:d9:79:7a:b9:c6:99:c7:7e:01:c2:4c:
         c5:5c:e0:6e:66:04:05:f8:87:cb:e6:09:0d:4d:ec:d3:82:5e:
         d8:f7:4c:0d:00:43:15:17:78:7d:2b:7e:1a:d0:73:25:1d:fa:
         72:2b:b5:36:4d:2b:be:25:80:72:fc:fa:c1:47:d8:48:c1:d5:
         cd:8d:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:38 2026 by rpki-client