Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131322e302f32332d3234203d3e203138383232.roa
File:                     3139302e382e3131322e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Z0FXeI7LkKPMukWvlR9tvXH+wJ+X0t1lDWfh/SIbJzU=
Subject key identifier:   99:8E:63:6E:79:03:FC:F3:07:1B:A4:6A:E4:C1:B3:3A:7F:47:9F:EC
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       26C7E988E615E89D8D5DAE46F719EECA2C78BC5A
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131322e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:57 +0000
ROA not before:           Tue 02 Jun 2026 19:40:57 +0000
ROA not after:            Tue 01 Jun 2027 19:45:57 +0000
asID:                     18822
IP address blocks:        190.8.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:e9:88:e6:15:e8:9d:8d:5d:ae:46:f7:19:ee:ca:2c:78:bc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:57 2026 GMT
            Not After : Jun  1 19:45:57 2027 GMT
        Subject: CN=998E636E7903FCF3071BA46AE4C1B33A7F479FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:e6:9f:9e:35:9e:f5:0f:13:e7:ff:4d:73:
                    3d:a1:51:72:a6:72:68:ca:fc:9d:b7:16:22:4f:7d:
                    a7:c0:98:7f:c8:a9:22:0d:f7:70:b4:36:d4:94:63:
                    9c:f6:c4:80:c9:93:d8:f8:34:e0:69:6a:16:e4:84:
                    fa:0a:5c:e5:32:f8:27:78:9d:a6:2d:67:e6:28:70:
                    15:39:7b:99:90:77:4c:de:91:35:98:cd:ee:6f:83:
                    b4:94:a9:26:e8:8e:51:ab:19:49:c9:b2:e0:65:2f:
                    28:ba:a5:f0:a9:4c:e6:18:82:ed:51:a5:11:8f:67:
                    a3:7c:f1:8e:d4:d7:e9:86:d8:4c:2a:93:6d:96:35:
                    b3:c6:35:50:f6:42:48:c5:29:a7:b2:67:5a:70:e3:
                    3b:5d:43:8d:e4:ab:8c:4f:16:21:77:d7:f0:08:de:
                    a4:ee:b9:ec:d2:f4:49:1d:0d:d2:f9:23:70:7e:ce:
                    72:2a:dd:55:1c:e0:48:dd:f9:ca:c1:52:db:7f:64:
                    37:76:76:5d:7d:f1:c6:55:22:13:9b:77:2e:44:47:
                    42:e1:d5:58:eb:5b:fd:9c:ad:8d:ac:33:54:ee:4c:
                    1c:9b:a1:e3:95:99:b6:90:5b:a9:53:0f:8b:f5:2d:
                    f3:3a:d6:cf:22:d2:d5:47:53:c2:9d:5e:49:75:7f:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8E:63:6E:79:03:FC:F3:07:1B:A4:6A:E4:C1:B3:3A:7F:47:9F:EC
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131322e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:cc:20:30:ee:70:a2:34:ba:c1:b2:83:3d:a2:72:27:75:af:
         d0:cc:54:59:45:60:8c:cc:72:5a:b6:3f:07:85:43:50:56:74:
         3e:0d:01:c7:00:24:49:70:ec:80:21:01:47:d8:e3:b9:ba:37:
         c2:d9:57:8a:f2:4b:43:eb:50:95:cb:5a:d0:39:80:16:a0:1c:
         20:46:c7:8f:71:9e:a0:de:4f:f3:a2:9b:8c:e9:b1:62:a2:cf:
         11:40:36:36:14:b9:3f:8b:49:68:f1:d6:82:63:49:5c:b3:07:
         ef:c7:2b:7d:d2:62:ac:b0:91:fe:1e:12:dc:61:f1:5a:5e:fd:
         c3:98:58:8c:50:2e:8f:77:86:03:ef:ad:59:4d:c4:12:d7:bc:
         86:67:52:13:39:66:a5:21:ef:21:32:28:4b:2f:df:43:fb:ad:
         9b:e5:80:b8:bd:1d:f6:12:8c:64:f6:f5:56:4b:d3:a5:68:1d:
         b5:ae:49:77:eb:16:df:b4:b7:8b:2c:45:3e:4c:bb:81:c2:3b:
         d3:ff:79:c9:e9:01:dc:e3:dc:84:2b:de:30:c9:05:6d:ed:f4:
         95:e1:2d:fb:cb:84:eb:e9:4b:27:dc:a2:a7:dd:ee:89:a6:e2:
         7b:06:65:b5:e1:f5:b4:12:75:6e:0f:1f:5a:58:2e:fc:eb:cf:
         6a:49:aa:37
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJsfpiOYV6J2NXa5G9xnuyix4vFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQwNTdaFw0yNzA2MDExOTQ1NTdaMDMxMTAvBgNV
BAMTKDk5OEU2MzZFNzkwM0ZDRjMwNzFCQTQ2QUU0QzFCMzNBN0Y0NzlGRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZB+afnjWe9Q8T5/9Ncz2hUXKm
cmjK/J23FiJPfafAmH/IqSIN93C0NtSUY5z2xIDJk9j4NOBpahbkhPoKXOUy+Cd4
naYtZ+YocBU5e5mQd0zekTWYze5vg7SUqSbojlGrGUnJsuBlLyi6pfCpTOYYgu1R
pRGPZ6N88Y7U1+mG2Ewqk22WNbPGNVD2QkjFKaeyZ1pw4ztdQ43kq4xPFiF31/AI
3qTuuezS9EkdDdL5I3B+znIq3VUc4Ejd+crBUtt/ZDd2dl198cZVIhObdy5ER0Lh
1VjrW/2crY2sM1TuTByboeOVmbaQW6lTD4v1LfM61s8i0tVHU8KdXkl1f7uRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUmY5jbnkD/PMHG6Rq5MGzOn9Hn+wwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzgyZTMxMzEzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzgzODMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+CHAwDQYJ
KoZIhvcNAQELBQADggEBAIrMIDDucKI0usGygz2icid1r9DMVFlFYIzMclq2PweF
Q1BWdD4NAccAJElw7IAhAUfY47m6N8LZV4ryS0PrUJXLWtA5gBagHCBGx49xnqDe
T/Oim4zpsWKizxFANjYUuT+LSWjx1oJjSVyzB+/HK33SYqywkf4eEtxh8Vpe/cOY
WIxQLo93hgPvrVlNxBLXvIZnUhM5ZqUh7yEyKEsv30P7rZvlgLi9HfYSjGT29VZL
06VoHbWuSXfrFt+0t4ssRT5Mu4HCO9P/ecnpAdzj3IQr3jDJBW3t9JXhLfvLhOvp
Syfcoqfd7omm4nsGZbXh9bQSdW4PH1pYLvzrz2pJqjc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:36 2026 by rpki-client