Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131382e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e3131382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          OWwUDPixQmFZDOhhGJlmCUYs7Xwm3LjhC8xc1I1TyRU=
Subject key identifier:   34:13:88:44:76:63:F9:B3:41:8C:1E:5C:54:5A:93:19:0C:6F:95:83
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       48717EF47AAAEA31CCAFEC6FA1998D5DCC2F10CF
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:06 +0000
ROA not before:           Tue 02 Jun 2026 19:41:06 +0000
ROA not after:            Tue 01 Jun 2027 19:46:06 +0000
asID:                     18822
IP address blocks:        190.8.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:71:7e:f4:7a:aa:ea:31:cc:af:ec:6f:a1:99:8d:5d:cc:2f:10:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:06 2026 GMT
            Not After : Jun  1 19:46:06 2027 GMT
        Subject: CN=341388447663F9B3418C1E5C545A93190C6F9583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:c0:90:4d:b8:12:7d:2d:b9:0b:9d:06:c3:
                    e0:87:30:bc:56:3b:db:f0:4b:61:d4:11:d2:dc:17:
                    bd:04:af:8e:ca:5a:76:7c:4d:c2:58:41:be:a8:09:
                    1a:72:2e:fc:93:cb:98:fe:13:3b:af:9e:18:33:5f:
                    9a:2d:36:7a:17:34:b2:bf:b7:06:de:39:f7:21:55:
                    22:24:f0:31:eb:5d:26:0c:be:e6:4e:37:be:7b:24:
                    2c:7e:54:54:15:33:5e:5f:30:88:da:d6:ec:03:32:
                    9d:68:09:2f:6c:76:14:58:90:f9:a5:66:3c:1d:c8:
                    1b:96:15:1c:31:e4:fa:6d:5d:0e:6c:c3:86:bc:f7:
                    30:89:fa:a1:c9:a8:d8:04:90:97:ce:fb:eb:74:34:
                    44:f8:54:1d:9b:42:94:df:36:e0:05:9a:76:a2:4b:
                    ce:63:3b:24:5c:5c:fa:3b:72:ef:2b:27:19:58:ba:
                    41:5f:1f:35:d4:cc:14:f9:06:c9:a7:da:76:70:13:
                    d7:c4:97:82:d1:17:1e:e7:3b:18:a1:04:31:27:dc:
                    a6:22:0f:90:1d:4b:7e:8f:0f:ac:30:95:fa:6d:2a:
                    ee:92:71:7e:2b:f4:5f:ec:20:10:68:48:d7:a9:10:
                    1a:92:dd:cd:0c:e3:b0:81:62:83:9d:16:ff:e6:e6:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:13:88:44:76:63:F9:B3:41:8C:1E:5C:54:5A:93:19:0C:6F:95:83
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ea:6a:c4:72:92:c4:80:11:47:58:4e:ac:02:70:0b:69:7b:
         01:e7:1a:01:57:21:1f:d1:fc:5f:6e:e2:fc:48:e0:b6:74:33:
         3b:fb:7a:65:b5:20:2a:17:85:32:8f:fd:22:22:1a:16:f7:42:
         ec:79:83:1e:6d:2f:79:29:b4:2e:df:1a:ee:dc:1c:e0:22:40:
         6d:14:34:3c:e3:d8:57:6c:55:0a:9b:79:c2:6b:c0:93:9c:55:
         63:b0:e9:92:8c:70:5a:4e:2b:5e:f8:d9:ee:45:b5:b1:c8:dd:
         b8:5b:e3:69:ca:c8:4e:d2:e8:13:5d:5e:48:b5:c2:0c:ca:ad:
         a0:70:a8:12:05:fc:f2:4b:eb:bd:c4:03:61:57:d4:4a:a8:83:
         80:e2:9c:76:dc:e1:21:92:a8:d3:e8:30:cd:4a:ad:88:72:45:
         5d:57:15:07:ab:73:68:f7:f6:2f:86:0e:5f:79:0a:8d:30:94:
         0d:2b:d6:16:59:6c:69:3e:55:df:eb:3f:c6:82:91:46:e2:b1:
         57:97:76:c0:26:57:d3:6d:b7:13:2f:e3:17:c6:e7:d5:0e:64:
         5a:98:ef:6a:74:6f:2f:40:49:0f:d4:f9:1a:17:b4:c0:5c:c5:
         9f:11:ca:f8:fe:99:79:15:0f:86:7d:da:2a:e7:24:ab:c7:27:
         48:35:d3:fe
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSHF+9Hqq6jHMr+xvoZmNXcwvEM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQxMDZaFw0yNzA2MDExOTQ2MDZaMDMxMTAvBgNV
BAMTKDM0MTM4ODQ0NzY2M0Y5QjM0MThDMUU1QzU0NUE5MzE5MEM2Rjk1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qsCQTbgSfS25C50Gw+CHMLxW
O9vwS2HUEdLcF70Er47KWnZ8TcJYQb6oCRpyLvyTy5j+EzuvnhgzX5otNnoXNLK/
twbeOfchVSIk8DHrXSYMvuZON757JCx+VFQVM15fMIja1uwDMp1oCS9sdhRYkPml
ZjwdyBuWFRwx5PptXQ5sw4a89zCJ+qHJqNgEkJfO++t0NET4VB2bQpTfNuAFmnai
S85jOyRcXPo7cu8rJxlYukFfHzXUzBT5Bsmn2nZwE9fEl4LRFx7nOxihBDEn3KYi
D5AdS36PD6wwlfptKu6ScX4r9F/sIBBoSNepEBqS3c0M47CBYoOdFv/m5hN9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUNBOIRHZj+bNBjB5cVFqTGQxvlYMwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzgyZTMxMzEzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzODMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+CHYwDQYJ
KoZIhvcNAQELBQADggEBAHbqasRyksSAEUdYTqwCcAtpewHnGgFXIR/R/F9u4vxI
4LZ0Mzv7emW1ICoXhTKP/SIiGhb3Qux5gx5tL3kptC7fGu7cHOAiQG0UNDzj2Fds
VQqbecJrwJOcVWOw6ZKMcFpOK1742e5FtbHI3bhb42nKyE7S6BNdXki1wgzKraBw
qBIF/PJL673EA2FX1Eqog4DinHbc4SGSqNPoMM1KrYhyRV1XFQerc2j39i+GDl95
Co0wlA0r1hZZbGk+Vd/rP8aCkUbisVeXdsAmV9NttxMv4xfG59UOZFqY72p0by9A
SQ/U+RoXtMBcxZ8Ryvj+mXkVD4Z92irnJKvHJ0g10/4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:34 2026 by rpki-client