Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e36362e302f32332d3234203d3e203138383232.roa
File:                     3139302e382e36362e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          bFdgJdoSGsG03wfD+3+9pybvahtrGnZCqLP4Cj9KpwM=
Subject key identifier:   62:76:78:B9:BA:35:78:54:CA:50:6F:04:FF:E7:98:F6:B2:E3:5E:8E
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       09B2D35095E03A3DFB36C90371221E93E6B861E9
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e36362e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:51 +0000
ROA not before:           Tue 02 Jun 2026 19:40:51 +0000
ROA not after:            Tue 01 Jun 2027 19:45:51 +0000
asID:                     18822
IP address blocks:        190.8.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b2:d3:50:95:e0:3a:3d:fb:36:c9:03:71:22:1e:93:e6:b8:61:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:51 2026 GMT
            Not After : Jun  1 19:45:51 2027 GMT
        Subject: CN=627678B9BA357854CA506F04FFE798F6B2E35E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:f1:e1:61:0d:1a:a9:19:ac:07:a3:63:e7:
                    b4:5e:30:c8:e9:1d:34:8a:fb:2a:ad:f7:96:5a:d9:
                    e1:d4:0d:ce:c6:b2:ae:25:58:e7:2e:45:b9:12:73:
                    4e:07:60:53:93:1f:26:28:49:d1:3f:ff:85:bf:89:
                    3f:fe:fa:c5:81:28:e2:6f:49:48:7c:65:3a:81:ec:
                    dc:63:d0:5c:ea:10:f1:de:af:62:02:3b:aa:8d:d5:
                    5c:71:85:28:6b:78:fa:d7:e4:5c:5b:27:f7:6e:50:
                    9c:3a:07:24:09:a3:4a:66:90:a2:ba:dd:c1:07:7d:
                    97:f9:bd:c5:bd:87:f3:63:a8:66:a3:f0:7f:03:df:
                    a0:cd:87:a7:2f:e1:99:ab:91:ba:68:7a:8f:0b:98:
                    1d:bb:f8:69:53:c9:f2:80:88:f2:c1:be:54:20:f2:
                    a7:dc:58:0f:d2:8e:58:17:58:f7:7d:d3:25:7f:c0:
                    99:a0:b3:09:4b:be:88:0d:67:7f:7a:26:2f:b2:a8:
                    8a:91:47:ea:c8:c2:a9:73:2a:cb:56:82:e9:63:b7:
                    6e:a8:09:c0:2e:ec:f4:e4:5d:ce:f8:3a:b0:48:0f:
                    f7:de:c9:b0:77:3f:cf:1c:d8:9c:3d:3a:b5:0e:0e:
                    6c:ca:5a:89:36:29:aa:cd:5e:c7:90:66:ef:f7:71:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:78:B9:BA:35:78:54:CA:50:6F:04:FF:E7:98:F6:B2:E3:5E:8E
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e36362e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:6e:f4:c7:5e:69:e6:bd:3c:70:1e:8c:29:52:cb:d1:6f:
         d4:07:10:aa:c6:de:c1:9a:79:26:a5:6d:51:7c:a9:f0:07:ad:
         1e:8d:62:94:15:cd:b9:49:a1:59:aa:50:12:8d:88:82:01:8b:
         86:6c:69:1a:51:e6:64:c8:a3:6b:c4:db:7a:b6:d1:77:4f:15:
         fd:88:81:5d:3c:08:3e:f9:35:21:45:5a:72:1c:8e:c4:34:7b:
         b5:48:d0:74:12:ed:9e:5e:b6:2a:e1:bc:a3:8f:b0:ce:42:ac:
         23:66:76:e7:bd:dc:60:4a:31:ad:d9:2c:4f:e2:b1:b2:83:b8:
         47:8d:70:53:69:bc:a5:e2:13:1b:10:8f:44:92:df:90:8f:ca:
         ba:16:91:23:ce:f9:59:e5:fa:46:42:55:61:e9:39:ad:f7:98:
         f0:90:48:3b:87:3b:bc:49:1c:68:f4:19:22:5d:1e:29:7c:e7:
         ac:24:fb:6e:18:df:6b:9d:d6:31:1a:71:7f:70:24:c0:43:0b:
         41:ac:44:2d:16:16:48:6b:8a:28:ba:a6:15:fe:ec:d6:1d:ef:
         03:c3:23:9a:27:54:3c:ec:fe:f3:a5:f0:67:ab:17:da:81:b1:
         23:20:35:5e:82:16:dc:ca:1c:79:d6:86:e5:45:93:7d:94:0d:
         a7:ac:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:45:54 2026 by rpki-client