Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e38362e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e38362e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          /kWTfzVwYfFlrxP0tOvK1qTpSGp4lshaciHuq75x2N4=
Subject key identifier:   27:35:90:B8:06:9E:9B:E7:9C:F2:2D:0F:98:07:24:6D:C9:D5:6D:02
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       42BD06A542DD25C6325606477CCD5C79EA747119
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e38362e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:01 +0000
ROA not before:           Tue 02 Jun 2026 19:41:01 +0000
ROA not after:            Tue 01 Jun 2027 19:46:01 +0000
asID:                     18822
IP address blocks:        190.96.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bd:06:a5:42:dd:25:c6:32:56:06:47:7c:cd:5c:79:ea:74:71:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:01 2026 GMT
            Not After : Jun  1 19:46:01 2027 GMT
        Subject: CN=273590B8069E9BE79CF22D0F9807246DC9D56D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:37:bb:de:30:d7:37:98:e3:1f:dc:55:83:
                    18:ff:39:36:61:2a:03:29:09:ea:0e:49:61:91:12:
                    17:be:f2:ec:e1:e5:b8:cc:a8:a3:92:a3:4b:b0:59:
                    1f:ac:03:30:6e:cf:a7:cf:ff:c4:b4:d6:e3:bc:93:
                    26:ff:90:29:c9:ad:fa:eb:68:ef:3c:ff:50:1d:f1:
                    f0:e5:c0:38:fa:20:4d:ee:b7:d8:ee:26:92:ba:48:
                    5a:af:83:26:6a:cd:15:71:5f:42:c4:95:08:7a:a6:
                    59:86:5b:8d:49:a5:1b:3e:17:43:cc:b3:1e:f1:eb:
                    41:62:76:02:ff:26:52:b7:01:03:33:6b:52:de:0c:
                    65:2f:38:58:ea:08:0a:0b:54:40:b8:ae:92:ba:81:
                    d8:4d:80:26:8d:60:67:b7:ca:21:7f:66:c2:5a:16:
                    74:53:f9:a3:fa:ad:17:7e:8d:3e:76:fe:13:2a:71:
                    37:88:3b:88:96:e1:8a:02:78:9b:26:7d:c2:ea:a9:
                    8a:34:5b:da:71:0e:c2:20:9c:f8:f4:14:72:bf:0d:
                    80:66:5c:1d:1e:97:17:17:ed:6f:9f:fa:46:ae:00:
                    e4:6e:92:f5:c1:78:61:83:29:98:01:70:1a:71:09:
                    49:69:79:2d:61:36:f7:8e:dc:52:0e:bf:ce:13:1c:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:35:90:B8:06:9E:9B:E7:9C:F2:2D:0F:98:07:24:6D:C9:D5:6D:02
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e38362e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7d:fd:dc:38:41:26:56:45:e8:bd:6d:df:24:4e:20:10:2a:
         99:33:03:46:67:bf:f6:35:29:0a:19:6e:7f:89:58:a2:a7:a1:
         95:fe:1f:b7:56:6e:71:a6:f0:f5:83:b2:0b:47:2a:06:76:ae:
         28:d6:e6:af:86:3a:44:87:b8:77:28:b2:c7:a6:40:e6:0b:bb:
         6a:40:2a:44:66:27:7d:02:db:4d:ae:c8:96:d7:83:d3:ff:1d:
         39:5b:66:85:6e:5f:a6:92:37:f5:3d:70:93:cb:98:59:e5:e6:
         59:3c:05:a8:5f:cf:4c:b1:1a:93:f4:39:db:3e:05:c3:51:96:
         6f:89:2c:83:77:70:28:29:5e:2c:4a:d6:21:07:72:fd:dd:c9:
         1a:9a:63:3e:e0:cb:65:a9:28:3a:80:32:76:42:f0:65:0a:ce:
         5f:3b:d7:15:90:8e:d0:4c:ed:23:45:de:2e:54:d6:d7:4a:c4:
         07:06:a2:18:57:06:a8:99:51:1c:34:f0:3f:20:b3:30:fd:6a:
         3d:25:04:c8:b6:ed:e9:ca:1c:eb:f7:7b:51:66:24:1f:05:76:
         f2:ec:81:b2:48:29:b9:a0:a1:11:3d:b9:29:76:64:ce:c1:f3:
         c7:c9:31:fb:30:b0:af:91:6f:b8:b0:96:51:af:8d:52:86:db:
         b0:52:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:35 2026 by rpki-client