Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32342e302f32332d3234203d3e203138383232.roa
File:                     3139302e39362e32342e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          zqRvHXdT0H6mugqnVETeL4nybosAxgxYNSfsv1DVYT0=
Subject key identifier:   27:49:1E:08:A1:27:AD:98:CC:41:A6:76:72:24:CC:CC:88:46:63:8B
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       3F6865E07D79EECAB9C4729F2531967EDF6B5947
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32342e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:07 +0000
ROA not before:           Tue 02 Jun 2026 19:41:07 +0000
ROA not after:            Tue 01 Jun 2027 19:46:07 +0000
asID:                     18822
IP address blocks:        190.96.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:68:65:e0:7d:79:ee:ca:b9:c4:72:9f:25:31:96:7e:df:6b:59:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:07 2026 GMT
            Not After : Jun  1 19:46:07 2027 GMT
        Subject: CN=27491E08A127AD98CC41A6767224CCCC8846638B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:40:0a:46:3b:6f:a2:1d:8f:62:d0:fa:f2:
                    86:22:b6:79:3e:d3:af:c5:88:0b:ca:35:da:09:ba:
                    6e:a2:01:11:74:05:f9:93:ab:d4:27:d2:45:ce:28:
                    59:dd:f1:9f:02:9e:15:fb:35:e7:c3:5b:64:ae:8c:
                    2e:50:8f:4c:7e:67:58:ff:97:b5:03:a8:fd:1e:b7:
                    aa:77:ce:45:d2:d3:c9:1d:30:c6:fb:9d:cb:0f:01:
                    85:51:17:43:9d:c9:35:78:c0:1e:87:52:50:22:6a:
                    ee:c5:9c:3e:9f:10:9c:d5:9d:9c:f9:66:fd:05:90:
                    d3:aa:64:47:f9:cc:02:11:22:76:ca:60:14:4a:49:
                    05:3d:ea:20:bf:13:cf:41:7a:36:c4:8a:0a:d4:1b:
                    52:64:63:b5:b1:28:85:07:0e:ba:17:09:83:8a:06:
                    02:77:71:de:f1:e7:5d:f9:16:f9:7a:e2:02:55:9b:
                    03:df:e2:ea:f4:69:83:df:0d:aa:c8:ed:ea:07:b8:
                    b3:60:38:d6:8c:62:b9:57:83:6d:04:23:53:b4:1d:
                    70:fc:4f:01:ec:d6:07:41:c7:a3:1b:84:9a:ff:31:
                    1e:57:d1:9e:8d:fd:27:1d:16:08:e1:53:b6:d9:ae:
                    16:04:50:b6:2f:7c:0b:78:d5:45:42:c6:24:6f:71:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:1E:08:A1:27:AD:98:CC:41:A6:76:72:24:CC:CC:88:46:63:8B
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32342e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:8e:db:e1:a6:ef:cf:ae:fd:8f:51:49:08:fc:90:07:6f:e7:
         9a:d6:0a:dd:4e:4a:bc:d0:7e:81:83:72:50:43:22:f0:82:6c:
         8b:c2:9e:79:35:9c:17:e2:76:39:fd:c2:ef:47:32:04:bb:22:
         b2:4e:35:dc:2d:e8:51:7d:25:2e:19:a6:14:f5:dc:bd:84:1c:
         78:b5:bb:63:9b:49:63:68:ed:f1:29:17:b1:cf:9f:85:a9:97:
         16:3a:b7:4c:86:7c:ad:9f:9c:a8:0f:47:51:df:ba:fa:38:bb:
         96:b8:0f:ab:5e:57:58:ec:a3:0e:71:01:9c:e5:9e:56:2c:0e:
         cd:0f:ad:c6:b6:80:fc:bf:4c:de:c2:5c:75:c4:16:d1:9c:3d:
         b9:dd:4f:a5:5a:ac:07:29:93:26:5d:8e:e0:ce:3a:e3:3b:02:
         4a:29:a8:e5:5d:4b:bd:cc:cd:96:6f:15:ee:c0:32:fe:41:13:
         d7:05:f2:ce:0b:25:6f:24:19:3f:bf:b2:cf:c5:86:de:e8:ed:
         7f:e5:d0:23:f5:78:99:90:7c:70:45:12:55:66:5b:d2:8b:c8:
         9b:93:b6:8b:6d:ef:6d:89:0b:6f:13:54:d6:d3:1d:e3:fb:12:
         dd:cb:5f:38:f9:8e:e6:62:e1:92:51:09:bd:e0:2d:0a:9c:5a:
         68:d2:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:44:45 2026 by rpki-client