Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e35372e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e35372e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          1YtJyMCsV1YsDbppwuTyUXIBo0GFtbd0x6t5okcBuOo=
Subject key identifier:   04:1D:59:7A:29:48:2B:F8:CF:9A:A5:A9:97:9C:2D:1D:95:9D:1F:81
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       5A0A4BF91AB6A067CFBA178E12DF931990FF9045
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e35372e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:48 +0000
ROA not before:           Tue 02 Jun 2026 19:40:48 +0000
ROA not after:            Tue 01 Jun 2027 19:45:48 +0000
asID:                     18822
IP address blocks:        190.96.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0a:4b:f9:1a:b6:a0:67:cf:ba:17:8e:12:df:93:19:90:ff:90:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:48 2026 GMT
            Not After : Jun  1 19:45:48 2027 GMT
        Subject: CN=041D597A29482BF8CF9AA5A9979C2D1D959D1F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:1e:dd:f8:28:89:18:97:dd:d3:fc:13:08:
                    9b:e0:9c:f9:76:31:a1:72:92:52:b3:63:2f:ce:53:
                    68:69:d6:8f:58:19:19:ab:d5:2a:42:72:6e:d3:ec:
                    3b:4e:17:1c:83:fc:4e:30:22:5c:66:54:68:75:f7:
                    2e:06:57:07:5c:5a:97:b3:e5:08:f0:d9:aa:bf:02:
                    d4:d9:b7:e2:ce:fd:f7:51:2b:cc:f8:da:0d:f1:9b:
                    ac:dc:67:f1:5b:74:78:4c:7e:a0:a1:b0:93:93:d4:
                    f6:ab:d6:80:a4:f2:7d:6e:f9:86:38:e1:8b:dc:63:
                    3c:4f:ca:66:91:8a:04:c5:3d:88:7a:67:b0:f6:2b:
                    3c:71:48:d0:a4:8f:76:96:e9:b0:c0:a9:83:8b:05:
                    56:90:1a:bd:aa:66:38:5a:bd:d5:38:1b:8c:d1:37:
                    41:8b:ea:17:d5:da:e8:76:bb:62:7e:b5:08:97:51:
                    52:7a:52:e8:80:4b:df:12:f2:24:67:c1:d0:f6:0e:
                    c2:ec:98:86:b7:ce:59:57:91:c6:38:41:53:67:22:
                    38:fb:33:c0:09:73:c2:b4:5f:60:dc:f2:1f:66:c7:
                    8f:4e:a2:4a:c6:db:d5:2d:62:50:08:64:0f:51:ab:
                    99:9a:ac:87:4e:dd:d7:fb:0e:21:68:a8:6f:6b:e0:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1D:59:7A:29:48:2B:F8:CF:9A:A5:A9:97:9C:2D:1D:95:9D:1F:81
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e35372e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:0d:ef:ee:c0:78:ca:41:b0:f3:eb:7f:a8:c9:4d:f8:fd:
         65:e7:26:43:fc:47:a3:d5:bd:fb:b5:97:95:fa:ad:7b:d3:aa:
         e9:26:45:05:ca:4b:01:15:91:c2:d4:99:d7:a2:44:3f:8a:9a:
         19:a6:07:4c:a6:ea:13:2a:7f:99:11:cb:ea:8f:a9:c5:50:69:
         23:dc:74:3b:57:9f:30:af:05:15:cf:21:5d:72:e4:54:91:f4:
         da:1e:eb:fb:c9:ea:b8:23:77:7f:84:0a:1b:48:ac:57:31:68:
         20:0b:fc:c1:41:b0:ca:f1:2f:b6:5c:6c:6d:1d:aa:fd:6e:8e:
         81:fe:70:a2:bb:36:f5:7f:19:76:a9:41:78:08:11:05:b6:b8:
         c2:d6:d6:b4:31:38:95:cb:33:66:42:82:40:25:69:70:18:58:
         d0:45:8d:95:b6:cc:5c:93:34:79:45:72:42:00:2d:b5:51:0b:
         df:7e:bc:95:eb:b9:da:87:4b:81:43:c7:b2:b2:ef:bf:ae:4d:
         b1:85:d5:93:3b:8c:a6:93:08:7a:f7:22:28:a8:3c:2e:66:db:
         e7:04:7f:14:ec:c2:78:1d:3a:ad:e2:e3:3e:c5:4b:fe:da:06:
         65:e3:e3:4d:7c:2f:3a:be:0c:9c:97:ae:18:7e:a8:d6:b3:a1:
         40:4f:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:08 2026 by rpki-client