Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33392e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e33392e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          JailhrUuxnlppimZWCGxm7ixJgdeITXWNghQIK7rAps=
Subject key identifier:   08:F6:5D:87:E1:61:7B:42:C1:7C:8C:DA:40:EF:34:02:F2:C0:D8:2D
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       1D6B2966598B69F36496973EC2464B1FFC9396CA
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33392e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:07 +0000
ROA not before:           Tue 02 Jun 2026 19:41:07 +0000
ROA not after:            Tue 01 Jun 2027 19:46:07 +0000
asID:                     18822
IP address blocks:        190.96.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6b:29:66:59:8b:69:f3:64:96:97:3e:c2:46:4b:1f:fc:93:96:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:07 2026 GMT
            Not After : Jun  1 19:46:07 2027 GMT
        Subject: CN=08F65D87E1617B42C17C8CDA40EF3402F2C0D82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:04:5b:07:29:bb:a4:49:1f:49:ba:ff:b4:
                    88:b1:36:1c:4d:b1:9f:78:cc:d4:de:a4:61:56:34:
                    c0:84:a8:c8:e1:0a:95:58:d9:35:91:57:57:e4:49:
                    59:82:18:0c:9c:98:bd:7c:43:d7:62:06:99:e0:32:
                    8e:09:25:78:e4:94:72:a6:ac:fe:14:8e:39:a4:fd:
                    e5:39:7d:68:30:4f:2d:38:df:14:a0:f4:8c:20:fe:
                    29:19:01:bc:d1:38:e8:71:42:6f:67:4d:6f:bb:2e:
                    04:03:fd:01:be:56:19:67:3d:65:b9:df:76:ce:d8:
                    af:b0:50:b2:d5:14:07:30:d0:9b:13:f9:7d:6f:52:
                    15:f5:7d:50:88:8b:c5:1c:ed:a2:83:97:b8:21:cc:
                    10:45:d7:7c:d2:af:0e:55:4d:10:d0:44:6d:7d:ba:
                    01:19:ec:66:3d:91:2c:30:17:53:67:19:6c:f6:8b:
                    91:64:ae:fd:7b:93:99:92:fd:ac:d7:fd:ac:8e:da:
                    f9:9c:15:50:19:70:55:5b:29:0e:b4:d9:3f:4d:80:
                    13:a7:0a:31:77:b2:38:34:2d:dd:e8:27:a9:09:70:
                    1e:b9:e9:e9:9b:61:cf:2a:98:16:9a:84:e8:ca:0e:
                    28:8d:04:b3:04:61:9f:fc:3e:f3:bd:41:c1:15:07:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F6:5D:87:E1:61:7B:42:C1:7C:8C:DA:40:EF:34:02:F2:C0:D8:2D
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33392e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:93:c5:a8:8c:a0:36:ab:a1:74:47:5e:b4:b2:ff:7c:a7:
         53:4a:4e:1d:48:a9:6d:56:d5:e0:71:02:8e:e3:bf:6b:8e:7d:
         6e:1e:fd:08:6b:85:3f:2f:a4:b4:e3:1d:ca:85:6b:0d:bb:05:
         d8:1c:e8:46:b2:a5:b2:ad:2e:1d:e2:33:4a:f3:01:51:b8:de:
         d7:7e:cb:e6:a7:63:b5:e7:23:08:1e:bb:bf:c0:0b:d0:cd:e9:
         d3:85:16:00:33:51:8b:a1:92:04:ab:71:d8:86:67:f3:54:aa:
         82:4e:25:f2:98:be:95:2b:70:5a:bc:8b:dc:08:61:af:1f:d0:
         0e:87:0e:49:7b:eb:d3:6c:8b:f4:77:44:71:23:c2:0a:39:2d:
         07:4d:e2:f2:9d:84:bb:30:0b:79:d5:44:a7:85:3a:fa:e9:5e:
         93:d0:18:ea:32:0a:d2:ee:e0:d9:ab:00:40:5d:8f:08:74:60:
         20:01:d8:54:91:55:e1:30:4f:07:af:0b:69:74:63:ee:44:ff:
         14:d5:9d:f9:fe:79:5d:29:fe:53:a0:c3:43:c3:f7:5b:c6:38:
         7e:6d:15:ca:af:3d:1e:1a:f5:5d:ff:88:9e:bd:67:0c:45:a2:
         8d:ae:80:6d:d1:48:a7:0f:51:9a:0e:e0:6f:53:51:b4:fd:a3:
         b5:89:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:36 2026 by rpki-client