Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3233342e302f32332d3233203d3e203138383232.roa
File:                     3139302e39382e3233342e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          WWbWT472RMKhHfRHtha1VZ5wiQFUS7j43pyr9tD5I4M=
Subject key identifier:   D9:3C:67:D5:6D:E3:A2:5A:94:10:90:A4:CA:1D:D0:F1:54:D4:D7:CB
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       26458A7130F2948ECEFA26C853D9A6EC72D16346
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3233342e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:07 +0000
ROA not before:           Tue 02 Jun 2026 19:41:07 +0000
ROA not after:            Tue 01 Jun 2027 19:46:07 +0000
asID:                     18822
IP address blocks:        190.98.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:45:8a:71:30:f2:94:8e:ce:fa:26:c8:53:d9:a6:ec:72:d1:63:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:07 2026 GMT
            Not After : Jun  1 19:46:07 2027 GMT
        Subject: CN=D93C67D56DE3A25A941090A4CA1DD0F154D4D7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e4:95:51:92:cc:c7:10:ee:b7:e6:1c:67:b2:
                    85:1d:ce:62:92:41:50:73:33:a1:21:7f:d4:61:3d:
                    a7:fb:a6:d4:8b:e8:43:e1:8c:9b:bd:8b:05:78:6e:
                    62:a6:2d:58:78:df:85:aa:34:ea:44:b1:bf:00:3c:
                    fc:af:e5:cd:c8:b9:52:df:5a:a6:b0:1d:18:f3:38:
                    76:e9:55:4e:d0:4e:d5:ea:60:50:7e:0d:b4:b3:e2:
                    da:e2:13:da:de:b5:16:81:fb:2b:30:16:19:be:ec:
                    30:92:7d:72:9e:37:6c:0d:8d:8a:1c:4b:fa:29:3c:
                    f3:d2:fe:d1:41:70:23:67:7c:a9:2e:94:32:81:f8:
                    4c:8e:07:4a:58:f5:b3:2c:e3:68:c0:37:0f:23:a8:
                    5b:1c:70:b5:9e:68:5d:24:dc:95:d0:1e:0d:2d:af:
                    1c:2d:a3:ab:da:46:28:c6:b8:c9:2d:86:48:62:c7:
                    e9:02:d8:1d:64:9b:02:47:b4:5a:3f:02:3f:b6:b5:
                    72:32:55:d2:00:63:19:74:d5:23:ce:a3:89:e6:12:
                    58:ca:7b:e0:d8:04:95:29:8f:3a:3c:59:2f:1d:35:
                    76:2a:27:57:fe:ea:0a:a1:7e:42:38:c0:ae:22:71:
                    11:d0:bf:00:29:a1:bf:b9:e5:68:70:93:86:51:69:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3C:67:D5:6D:E3:A2:5A:94:10:90:A4:CA:1D:D0:F1:54:D4:D7:CB
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3233342e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:b9:58:af:d5:b2:87:25:d6:9b:a4:c9:90:87:c3:a9:20:
         e7:10:f4:79:74:89:ac:f8:4e:56:ee:25:bc:3a:7f:6d:82:6f:
         d1:1d:cc:b8:47:84:a2:85:17:ca:b8:13:d3:47:0b:ed:4c:37:
         40:7b:2d:d4:95:02:6a:98:9a:f9:f7:50:eb:ba:2f:d8:cd:44:
         e7:03:7b:e3:80:c4:b5:80:e2:d9:c5:52:34:b5:57:74:64:23:
         7b:1a:7e:0f:03:9b:7e:73:f2:73:4b:41:73:2d:ad:47:9d:08:
         85:50:2d:94:ca:1f:bf:af:f1:be:26:eb:15:f3:0d:5c:3d:fb:
         cc:68:55:d9:73:9a:21:6d:d3:39:1b:d0:ce:24:3c:08:00:fb:
         6c:58:00:23:2a:87:40:12:d4:10:a6:f5:93:f2:04:67:b1:ad:
         82:86:df:53:5f:af:13:3e:5b:e4:09:85:09:12:a5:a2:84:72:
         1c:51:f0:f0:2c:f9:c8:67:f1:4c:1a:86:95:74:c3:6b:3f:7c:
         17:c6:33:05:a2:c8:49:fc:e8:14:3b:93:48:65:ef:84:19:2c:
         23:a1:d1:00:b1:db:a6:41:7e:b6:f8:cd:79:93:c7:9b:f2:3d:
         f9:8c:f7:e4:80:4a:3f:66:ed:41:b3:1f:74:0c:0e:c8:e2:10:
         db:42:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:11:32 2026 by rpki-client