Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3232322e302f32332d3234203d3e203138383232.roa
File:                     3139302e39382e3232322e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          yMOa/oNRO81bXZL1kNMehH17jijhQx1hq8SLKUEY0ss=
Subject key identifier:   FC:69:1D:45:BC:37:74:89:32:11:BB:DB:DF:4E:A8:F2:15:33:49:CF
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4E6278C01385F3A1DC5E6B85A451EA6341798061
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3232322e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:50 +0000
ROA not before:           Tue 02 Jun 2026 19:40:50 +0000
ROA not after:            Tue 01 Jun 2027 19:45:50 +0000
asID:                     18822
IP address blocks:        190.98.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:62:78:c0:13:85:f3:a1:dc:5e:6b:85:a4:51:ea:63:41:79:80:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:50 2026 GMT
            Not After : Jun  1 19:45:50 2027 GMT
        Subject: CN=FC691D45BC3774893211BBDBDF4EA8F2153349CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:ee:48:35:2d:2a:18:f1:d5:25:cd:74:d2:
                    eb:64:73:c4:a6:ff:d2:04:ac:ce:f5:4a:a9:a8:d0:
                    fd:2c:f7:65:72:eb:4c:96:2a:8e:7c:80:65:8e:b6:
                    e4:e9:f2:de:58:59:cf:a4:1b:4f:9d:b3:52:24:e6:
                    d9:5a:14:c5:45:b2:a0:40:1c:64:2e:f6:de:69:b5:
                    c7:c9:df:6e:e7:ac:bf:c5:c0:25:9a:93:9a:e7:f8:
                    37:0e:fd:9a:e2:93:0f:ff:8d:85:7c:f5:3f:9f:e2:
                    a5:c1:bb:e5:32:b7:f4:13:88:07:f0:25:44:73:87:
                    5d:95:94:9c:de:42:90:41:d0:ba:e0:23:63:fa:dd:
                    ab:12:a0:ec:83:53:3f:c1:bb:d7:e7:a5:79:8a:fc:
                    1f:ad:3c:9a:a6:c4:b5:b7:f4:e1:b9:d0:35:02:8b:
                    28:85:91:b2:3d:68:f8:86:a0:ff:ab:99:70:1b:d5:
                    3d:d9:4d:90:37:3d:01:e8:54:2e:3b:33:f3:8e:5a:
                    86:b1:51:e9:47:9b:fb:0f:d7:30:66:b4:a8:a1:db:
                    be:e3:81:c5:a1:1d:d2:34:01:e6:7f:9f:12:ec:75:
                    c8:f6:fb:dd:ec:46:c7:42:a8:c8:29:1e:a5:11:21:
                    81:3a:c2:8a:22:dc:f4:55:db:d8:92:b8:68:93:ea:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:1D:45:BC:37:74:89:32:11:BB:DB:DF:4E:A8:F2:15:33:49:CF
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3232322e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:41:f9:44:36:f8:7a:77:b6:28:e4:12:cd:9e:07:07:61:
         d4:97:69:68:31:45:59:42:3e:aa:27:5f:71:26:72:69:59:03:
         1f:e0:5f:1d:3f:1b:29:4a:e7:c3:15:39:20:a1:ca:5a:37:1e:
         d3:4d:22:7a:5e:b1:35:35:5f:4c:36:ca:3c:7d:9e:09:07:1c:
         87:c8:83:6a:89:2b:7f:c2:b1:91:b7:cc:26:3b:67:20:d4:c8:
         d6:c4:ce:85:3b:90:49:ed:70:df:ee:62:51:d0:34:53:3c:84:
         ce:11:33:43:c4:0d:d2:e2:48:fe:0c:95:0d:7b:a7:da:46:74:
         15:ba:ca:7d:a3:52:e3:dc:bf:ad:ce:78:c5:5d:f1:49:f4:24:
         7e:41:cb:99:86:1b:b2:8e:be:df:cd:62:8d:dc:a0:7f:59:6a:
         8e:d4:46:6d:3d:ff:4f:08:2b:f5:db:2a:dd:0d:07:3c:0b:58:
         90:74:d8:ba:6a:52:84:0f:4b:dc:37:4a:87:30:d8:be:28:19:
         64:26:09:b5:ab:bc:2b:c0:b8:e7:70:80:a2:c2:1d:19:ae:61:
         e8:34:97:2c:30:e7:d8:1f:f0:c8:66:0d:b5:43:1c:f4:19:ff:
         87:0c:71:d7:a5:c2:fe:08:f5:af:01:0b:38:91:46:3c:26:09:
         14:f4:dc:17
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTmJ4wBOF86HcXmuFpFHqY0F5gGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQwNTBaFw0yNzA2MDExOTQ1NTBaMDMxMTAvBgNV
BAMTKEZDNjkxRDQ1QkMzNzc0ODkzMjExQkJEQkRGNEVBOEYyMTUzMzQ5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ke5INS0qGPHVJc100utkc8Sm
/9IErM71Sqmo0P0s92Vy60yWKo58gGWOtuTp8t5YWc+kG0+ds1Ik5tlaFMVFsqBA
HGQu9t5ptcfJ327nrL/FwCWak5rn+DcO/Zrikw//jYV89T+f4qXBu+Uyt/QTiAfw
JURzh12VlJzeQpBB0LrgI2P63asSoOyDUz/Bu9fnpXmK/B+tPJqmxLW39OG50DUC
iyiFkbI9aPiGoP+rmXAb1T3ZTZA3PQHoVC47M/OOWoaxUelHm/sP1zBmtKih277j
gcWhHdI0AeZ/nxLsdcj2+93sRsdCqMgpHqURIYE6wooi3PRV29iSuGiT6nfJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/GkdRbw3dIkyEbvb306o8hUzSc8wHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzkzODJlMzIzMjMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5i3jAN
BgkqhkiG9w0BAQsFAAOCAQEALmpB+UQ2+Hp3tijkEs2eBwdh1JdpaDFFWUI+qidf
cSZyaVkDH+BfHT8bKUrnwxU5IKHKWjce000iel6xNTVfTDbKPH2eCQcch8iDaokr
f8KxkbfMJjtnINTI1sTOhTuQSe1w3+5iUdA0UzyEzhEzQ8QN0uJI/gyVDXun2kZ0
FbrKfaNS49y/rc54xV3xSfQkfkHLmYYbso6+381ijdygf1lqjtRGbT3/Twgr9dsq
3Q0HPAtYkHTYumpShA9L3DdKhzDYvigZZCYJtau8K8C453CAosIdGa5h6DSXLDDn
2B/wyGYNtUMc9Bn/hwxx16XC/gj1rwELOJFGPCYJFPTcFw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:53:07 2026 by rpki-client