Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39322e302f32322d3234203d3e203138383232.roa
File:                     3139302e382e39322e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          ryW2C7LYPmE3CxVHp3oTcu3ycwdChGmd7wVdN/OdH4s=
Subject key identifier:   34:9E:0A:F3:A7:7E:A4:37:29:66:EE:AA:E3:25:32:1D:26:E5:82:D3
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       3E36192182052468BE09EA44F6255C8FF2474626
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39322e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:59 +0000
ROA not before:           Tue 02 Jun 2026 19:40:59 +0000
ROA not after:            Tue 01 Jun 2027 19:45:59 +0000
asID:                     18822
IP address blocks:        190.8.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:36:19:21:82:05:24:68:be:09:ea:44:f6:25:5c:8f:f2:47:46:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:59 2026 GMT
            Not After : Jun  1 19:45:59 2027 GMT
        Subject: CN=349E0AF3A77EA4372966EEAAE325321D26E582D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:78:09:18:09:65:c3:7b:ec:b9:72:b5:9d:
                    ff:3b:94:2b:78:5c:06:39:c1:85:2e:b7:c0:2a:54:
                    70:c4:49:d5:fb:18:73:9a:e0:e7:91:1e:be:47:2c:
                    e0:e3:b0:3e:70:d1:9c:7f:19:bb:24:d6:43:42:b3:
                    99:87:a3:79:0b:48:ff:7c:8d:70:81:3c:8d:a0:0a:
                    33:3b:ae:54:ac:a6:19:c2:a7:4a:50:f7:82:72:fb:
                    13:67:f7:1d:c5:3e:13:79:d3:71:70:cf:1a:ea:44:
                    aa:93:41:cb:24:a7:1f:85:c1:0e:4f:18:02:5a:3f:
                    87:e7:a2:1f:c3:7e:fe:96:3d:81:b0:bd:b9:60:39:
                    91:9b:69:28:ee:8c:84:e6:11:c5:46:e6:52:03:7b:
                    bb:cf:01:fb:31:f3:03:ec:59:14:01:b0:bc:93:45:
                    45:40:22:80:c9:b7:17:f0:d6:86:95:60:29:11:28:
                    da:17:a9:00:bd:7c:7a:84:10:a5:94:d9:31:ea:17:
                    12:f8:dd:89:18:87:f7:93:5c:21:46:92:c7:91:45:
                    7a:cd:fe:58:65:ad:13:d2:37:b1:0d:cc:2d:b9:8f:
                    7b:ce:b1:2b:b0:8b:20:5f:96:bd:ac:34:4d:81:a3:
                    37:12:b9:2a:30:dc:aa:de:cb:5e:80:84:fd:25:80:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9E:0A:F3:A7:7E:A4:37:29:66:EE:AA:E3:25:32:1D:26:E5:82:D3
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39322e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:45:aa:a7:97:bb:a0:96:b4:7a:3c:fe:65:36:f7:fd:d5:ef:
         d4:57:45:b0:e1:27:ad:d0:0d:ff:c0:b6:63:21:63:76:b5:05:
         d3:e5:eb:01:22:a3:be:7a:4f:a7:2c:d8:88:d8:cf:1f:0d:e4:
         2d:ca:30:22:e9:02:8d:88:ac:22:9d:82:af:14:63:8f:4d:fa:
         bb:3e:d8:74:7e:64:c6:68:13:25:b5:82:95:04:fb:61:80:1d:
         74:fd:33:b2:08:88:7b:09:72:d1:f9:e2:7e:4d:d0:fd:3f:be:
         a7:15:ef:d6:f7:07:24:d6:7c:eb:dd:49:8e:7d:60:5a:9e:e1:
         bc:b4:4c:b9:7b:ba:b6:19:25:bc:06:81:92:28:15:20:8a:f6:
         36:95:53:6b:31:df:5d:ef:0a:0f:13:22:d9:c5:f5:04:1c:3a:
         b1:0c:6d:bb:73:73:ba:f0:f6:94:ff:1c:f7:5d:5b:e2:13:3a:
         87:8b:cf:91:01:64:5f:22:ef:73:dc:a7:a5:64:30:ef:45:16:
         06:17:81:64:45:53:40:03:bc:6b:8a:3f:07:87:23:0e:f7:ce:
         44:67:7b:97:25:89:dd:7c:cc:20:bb:ea:61:b5:d4:fe:58:9d:
         03:68:dc:c3:7f:14:53:25:1f:22:53:af:54:83:10:c4:df:e1:
         05:20:c7:b1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUPjYZIYIFJGi+CepE9iVcj/JHRiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQwNTlaFw0yNzA2MDExOTQ1NTlaMDMxMTAvBgNV
BAMTKDM0OUUwQUYzQTc3RUE0MzcyOTY2RUVBQUUzMjUzMjFEMjZFNTgyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqngJGAllw3vsuXK1nf87lCt4
XAY5wYUut8AqVHDESdX7GHOa4OeRHr5HLODjsD5w0Zx/Gbsk1kNCs5mHo3kLSP98
jXCBPI2gCjM7rlSsphnCp0pQ94Jy+xNn9x3FPhN503FwzxrqRKqTQcskpx+FwQ5P
GAJaP4fnoh/Dfv6WPYGwvblgOZGbaSjujITmEcVG5lIDe7vPAfsx8wPsWRQBsLyT
RUVAIoDJtxfw1oaVYCkRKNoXqQC9fHqEEKWU2THqFxL43YkYh/eTXCFGkseRRXrN
/lhlrRPSN7ENzC25j3vOsSuwiyBflr2sNE2BozcSuSow3Krey16AhP0lgDIbAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUNJ4K86d+pDcpZu6q4yUyHSblgtMwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzgyZTM5MzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvghcMA0GCSqG
SIb3DQEBCwUAA4IBAQBwRaqnl7uglrR6PP5lNvf91e/UV0Ww4Set0A3/wLZjIWN2
tQXT5esBIqO+ek+nLNiI2M8fDeQtyjAi6QKNiKwinYKvFGOPTfq7Pth0fmTGaBMl
tYKVBPthgB10/TOyCIh7CXLR+eJ+TdD9P76nFe/W9wck1nzr3UmOfWBanuG8tEy5
e7q2GSW8BoGSKBUgivY2lVNrMd9d7woPEyLZxfUEHDqxDG27c3O68PaU/xz3XVvi
EzqHi8+RAWRfIu9z3KelZDDvRRYGF4FkRVNAA7xrij8HhyMO985EZ3uXJYndfMwg
u+phtdT+WJ0DaNzDfxRTJR8iU69UgxDE3+EFIMex
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:50:12 2026 by rpki-client