Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e36342e302f31392d3234203d3e203134323539.roa
File:                     3139302e39362e36342e302f31392d3234203d3e203134323539.roa (raw, json)
Hash identifier:          IHjeNJuUCGx0+3k/akAVhvyTok2Z5VfSsERqZ+PUoSQ=
Subject key identifier:   31:5A:48:25:9F:44:73:36:80:F7:D7:99:1A:4D:CA:36:B6:51:62:A4
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       267CC74099AF70F0918F68438CF48E50676ADB1D
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e36342e302f31392d3234203d3e203134323539.roa
Signing time:             Tue 02 Jun 2026 19:46:01 +0000
ROA not before:           Tue 02 Jun 2026 19:41:01 +0000
ROA not after:            Tue 01 Jun 2027 19:46:01 +0000
asID:                     14259
IP address blocks:        190.96.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7c:c7:40:99:af:70:f0:91:8f:68:43:8c:f4:8e:50:67:6a:db:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:01 2026 GMT
            Not After : Jun  1 19:46:01 2027 GMT
        Subject: CN=315A48259F44733680F7D7991A4DCA36B65162A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:39:7d:fe:dc:ed:74:69:2f:e3:59:f6:02:
                    cd:52:1e:57:c9:b3:69:21:01:af:4d:1a:06:31:7a:
                    04:f2:ab:eb:a6:75:2c:5d:83:ef:38:0e:01:82:19:
                    31:c4:e5:92:9a:87:ae:23:b2:d2:99:2a:3a:cb:aa:
                    fd:e5:65:9a:7d:b6:a5:83:56:d3:23:d4:af:86:7c:
                    57:cd:33:15:c7:4b:c0:68:04:21:5b:b3:d7:59:3b:
                    3f:75:6e:a4:91:10:22:a8:4c:b3:dc:4f:e6:55:8e:
                    ed:ba:43:a4:b1:1e:cc:7a:cb:e6:29:2a:19:e7:6c:
                    0c:e3:2b:46:90:88:5e:58:fe:4c:56:af:68:f6:e0:
                    2a:a7:32:6a:cd:d3:e9:66:4d:b7:d2:db:ed:1c:da:
                    04:e2:95:c8:40:ef:1f:42:51:3c:97:64:1a:68:25:
                    1b:75:5b:cd:f2:08:5e:45:39:fb:65:8e:f3:32:c4:
                    d3:d6:35:b1:34:de:a8:ae:a8:25:21:a9:a7:72:d9:
                    c4:a8:a0:42:13:94:4c:8d:55:9e:75:45:91:2f:18:
                    37:21:26:d0:b2:44:87:c1:26:39:a5:2f:5b:b2:0d:
                    93:1f:7c:ca:3d:b4:20:d0:5d:df:97:93:4d:b1:66:
                    da:0f:2b:2d:94:d6:8a:89:4f:1a:0c:c9:97:ba:90:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5A:48:25:9F:44:73:36:80:F7:D7:99:1A:4D:CA:36:B6:51:62:A4
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e36342e302f31392d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:3a:05:32:bc:9b:f6:f7:0a:65:32:1a:b3:33:69:58:6d:f6:
         8e:fb:78:cb:58:98:a2:52:9a:bd:84:7b:8b:ff:c0:78:e1:4c:
         c3:ed:12:fa:c4:02:49:f4:61:58:91:43:ba:7f:eb:fa:5d:35:
         f5:41:92:df:46:9c:e0:fb:0e:66:74:2b:c4:fd:f9:6f:10:e9:
         e3:d8:57:55:17:03:a2:25:86:40:cb:78:ed:c8:bb:98:2b:e7:
         90:64:52:86:0c:e6:c7:5f:08:48:be:24:68:10:ab:30:c4:79:
         f3:82:b0:e1:00:e8:c7:20:a2:de:6f:c0:c4:22:0c:a1:10:6c:
         49:ad:9c:68:ca:88:3f:9f:37:ac:8d:9c:6d:75:39:8a:08:83:
         e4:b6:6f:39:f7:a0:59:47:54:b0:00:ae:f2:56:96:31:36:db:
         ec:de:ea:4a:d5:7d:ef:36:54:5d:15:2d:94:8b:fa:bb:0d:2a:
         0b:d7:3c:06:4e:5d:f3:1e:60:70:2b:2f:17:e3:10:10:5c:c0:
         b7:2e:06:d4:1f:f9:7f:04:c7:75:aa:6e:10:3d:b8:b3:50:91:
         7a:86:2b:51:6d:92:4b:84:3e:83:2a:0b:64:db:a7:93:5a:ba:
         b2:aa:11:fb:be:13:29:5a:be:08:5d:30:4e:a6:2b:d0:26:39:
         1d:f7:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:08 2026 by rpki-client