Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32362e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e32362e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          cE8C058pCKymDHaKg3X4sRMog0PzS66gelqPlo53xWM=
Subject key identifier:   DE:FB:2A:3C:D1:6F:B1:3A:0F:38:79:BC:DC:02:6C:C6:2B:C9:0F:7D
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       7179FC8DE3EEFFB4B74829B3C68D2BD08D6EC8F8
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32362e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:53 +0000
ROA not before:           Tue 02 Jun 2026 19:40:53 +0000
ROA not after:            Tue 01 Jun 2027 19:45:53 +0000
asID:                     18822
IP address blocks:        190.96.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:79:fc:8d:e3:ee:ff:b4:b7:48:29:b3:c6:8d:2b:d0:8d:6e:c8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:53 2026 GMT
            Not After : Jun  1 19:45:53 2027 GMT
        Subject: CN=DEFB2A3CD16FB13A0F3879BCDC026CC62BC90F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:8c:b0:dd:39:77:e8:f8:07:f6:ef:8c:01:
                    54:d5:d2:38:d4:c8:01:5b:64:3e:cc:d7:dc:02:71:
                    69:69:cb:9e:3f:2b:3b:4b:1a:7d:60:2a:ae:e8:e1:
                    fc:2b:2c:d9:c1:c9:45:eb:c9:af:fc:9d:c0:66:6e:
                    61:95:13:a5:07:bf:67:85:6a:5f:46:b0:b9:ab:3f:
                    5b:24:e0:8a:9c:aa:69:17:62:08:d4:d1:66:c1:5f:
                    53:0e:d1:06:9d:8e:b2:90:71:53:4d:70:37:25:ab:
                    fd:ed:6b:96:bb:0a:1f:53:7a:c4:42:65:0e:b4:6a:
                    c0:34:e8:4a:60:3f:f6:7a:0e:4e:bf:82:8e:26:2d:
                    5e:03:46:ab:cd:fb:f8:20:3f:1c:11:2b:3b:5d:2c:
                    bf:04:91:39:68:d9:a5:56:6d:5e:ef:2b:41:7a:9f:
                    e1:27:d3:22:fe:2e:2c:70:67:9a:e9:1c:19:81:16:
                    08:e2:3f:db:60:38:22:c2:89:9a:2c:af:2e:6b:88:
                    21:48:00:2c:39:a4:98:82:b5:42:27:ef:1f:49:57:
                    ed:ed:29:fd:a3:9f:3e:75:a0:30:86:cc:98:fb:f0:
                    97:a5:d2:77:fa:32:d2:cc:f5:fb:0e:90:b7:52:cb:
                    e3:5b:d0:04:e5:5c:3d:9d:21:f8:fa:cc:7e:cf:05:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:2A:3C:D1:6F:B1:3A:0F:38:79:BC:DC:02:6C:C6:2B:C9:0F:7D
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32362e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:04:fe:dd:4e:c9:bd:9d:4b:b4:7d:12:36:ed:7f:91:13:96:
         58:aa:01:21:ac:06:5a:f5:ba:a5:6f:d7:35:dd:da:c3:0e:24:
         01:b8:ad:e2:a1:5d:4c:66:cf:67:25:f9:d6:4d:8c:13:a2:1c:
         e9:00:24:f0:8f:01:f0:35:ba:31:bd:5b:ef:e0:3f:88:72:30:
         dc:9a:10:a5:92:3c:88:81:e6:fc:b6:f5:50:67:2c:3f:c2:6c:
         a0:80:64:53:68:bf:52:78:93:2b:35:d1:ba:42:00:12:45:71:
         58:71:3b:c7:3f:f6:b5:f6:58:9c:a3:72:87:3c:ef:30:1e:eb:
         72:96:47:70:85:a6:6a:f2:76:42:79:59:c0:ed:98:51:20:bd:
         67:89:b9:d6:2b:f7:88:35:2b:fd:a7:5b:61:ad:46:16:1e:39:
         f0:60:ff:da:6d:f9:e4:b1:24:42:ff:14:42:2f:a0:9c:0e:63:
         9b:c4:c4:eb:73:fe:00:e1:82:e0:9b:75:b5:29:b7:a5:45:74:
         cb:f5:7e:c9:ec:00:06:10:12:f2:78:9e:26:d0:26:b8:c1:9e:
         3d:9b:66:d1:34:64:fd:73:ff:ae:27:a3:17:e9:53:4a:cf:26:
         82:19:96:e6:97:9c:3c:7e:37:b6:a6:d3:be:ff:ca:25:e8:c5:
         0d:3e:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:51 2026 by rpki-client