Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37322e302f32332d3234203d3e203138383232.roa
File:                     3139302e382e37322e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          5mJW2KobYGWFQnU5ZBqgJXeRhsII96v7M16nrBYzm7w=
Subject key identifier:   D1:F0:6C:3A:F3:63:BE:1A:D1:36:D0:6C:AE:26:44:4A:25:5B:91:93
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4B2DED418BE0CE31676B443C6BD91F182CB91463
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37322e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:08 +0000
ROA not before:           Tue 02 Jun 2026 19:41:08 +0000
ROA not after:            Tue 01 Jun 2027 19:46:08 +0000
asID:                     18822
IP address blocks:        190.8.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2d:ed:41:8b:e0:ce:31:67:6b:44:3c:6b:d9:1f:18:2c:b9:14:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:08 2026 GMT
            Not After : Jun  1 19:46:08 2027 GMT
        Subject: CN=D1F06C3AF363BE1AD136D06CAE26444A255B9193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:99:c0:c3:3b:c7:fc:97:b3:dc:01:f2:b5:
                    88:63:2f:89:ae:08:fa:45:63:81:79:71:77:37:99:
                    4c:9b:a8:1e:8a:13:16:da:d8:d9:c3:ec:25:e8:52:
                    56:75:82:c9:c4:30:54:a3:12:04:08:58:9c:ce:f1:
                    43:e4:8d:cd:eb:59:c8:c6:44:89:c3:a6:91:16:55:
                    c8:12:be:30:7f:17:f5:53:51:7e:d9:74:e0:3b:18:
                    43:97:2b:ad:51:4f:28:ed:21:72:f1:0f:ab:e0:bf:
                    ee:34:4d:28:de:f5:c5:36:6f:95:35:b8:d6:75:8f:
                    b4:77:a0:da:85:18:06:2e:f8:5c:d8:c3:46:19:87:
                    84:d7:e2:60:6a:4f:8f:db:46:23:27:bc:c0:85:4f:
                    41:5d:b7:fb:4e:e2:6e:35:30:06:6c:e8:24:5e:7e:
                    a8:a9:fa:24:5a:65:27:e7:09:3c:47:b0:87:ae:45:
                    df:9d:1e:6f:dc:67:25:bf:54:71:47:ca:9a:15:74:
                    18:cf:06:66:d4:61:4d:2d:d8:d1:3e:af:16:0a:05:
                    85:fa:29:55:58:ab:9c:e2:88:5e:19:b1:39:0a:54:
                    db:bf:69:05:1a:73:dd:c7:21:08:cc:36:17:47:ca:
                    4e:70:c9:ac:96:9f:16:c4:dd:4d:7f:d9:ef:0c:ac:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F0:6C:3A:F3:63:BE:1A:D1:36:D0:6C:AE:26:44:4A:25:5B:91:93
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37322e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:d1:7a:54:9b:92:19:11:da:dc:f0:a5:63:af:44:8e:43:17:
         f1:0e:ca:a3:50:ca:13:03:27:f1:f2:a6:cb:e2:75:f0:88:8e:
         d0:3a:a9:23:b4:b9:b7:aa:e4:95:29:1e:bc:f1:2c:8c:36:5a:
         df:47:c6:01:2f:65:ee:40:a5:e3:e6:62:b8:b5:dc:2a:ab:bf:
         6a:a9:fe:3e:a9:99:d0:1f:6f:11:85:ed:6c:fb:e2:7a:ab:7a:
         a1:64:9c:75:ad:a5:1d:61:5f:6b:5c:9a:da:3b:1f:52:0c:30:
         8d:98:df:1c:1e:f3:18:09:21:74:99:f4:f6:6b:58:37:6f:1d:
         24:15:55:d8:87:d1:e5:09:40:84:8f:6b:17:60:49:7c:90:9c:
         8c:c4:98:08:33:6d:8a:65:71:81:68:4a:4b:cf:c8:24:0d:1c:
         7f:e6:3b:52:4b:44:04:ca:29:52:34:63:e2:31:02:e3:a9:fc:
         c1:49:2e:40:17:a0:e3:db:99:23:8c:e6:6c:a0:b6:36:da:b9:
         d8:47:a9:a2:65:90:dd:77:e7:ac:0f:b9:96:c2:25:6b:44:68:
         3d:80:0d:8c:9e:d3:64:8a:de:53:25:89:39:a5:29:c8:3d:23:
         6e:5c:35:70:14:e2:41:71:24:76:b4:5f:40:67:f5:d6:42:54:
         b4:97:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:06 2026 by rpki-client