Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3235302e302f32332d3234203d3e203138383232.roa
File:                     3139302e39382e3235302e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Q397mDG6MkUHzku8mrO8wGvVSxACrVxBQjOz+3Hh5Bc=
Subject key identifier:   33:93:3B:8B:1D:FB:57:47:6F:DF:0D:95:F6:02:C6:9F:CC:19:60:24
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       09558C62DF2D56B95B03004B15B9B7F0FB327303
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3235302e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:51 +0000
ROA not before:           Tue 02 Jun 2026 19:40:51 +0000
ROA not after:            Tue 01 Jun 2027 19:45:51 +0000
asID:                     18822
IP address blocks:        190.98.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:8c:62:df:2d:56:b9:5b:03:00:4b:15:b9:b7:f0:fb:32:73:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:51 2026 GMT
            Not After : Jun  1 19:45:51 2027 GMT
        Subject: CN=33933B8B1DFB57476FDF0D95F602C69FCC196024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:52:8c:66:5e:6b:b3:25:2d:8a:d0:8d:01:
                    31:63:2c:05:25:61:31:cf:2b:01:f8:8c:98:68:61:
                    11:51:51:c3:8c:c2:22:8e:8e:23:8b:ee:27:96:01:
                    88:49:e1:cf:a6:38:ed:84:22:af:90:1f:98:2a:0c:
                    e8:3e:fa:7e:cc:97:1d:f0:83:2c:88:76:6f:f5:a6:
                    16:8c:e8:c7:08:9e:94:93:5f:ba:33:ea:78:1b:48:
                    32:2e:a1:81:26:3f:35:19:1d:c7:94:c4:ac:88:a6:
                    9b:79:d4:2d:22:6b:95:d7:1e:cb:d0:03:6b:84:89:
                    ff:9a:6b:46:4b:ff:ca:0e:cf:a6:63:b8:5c:bc:ab:
                    49:45:09:2b:41:c9:4c:86:46:62:94:e7:3d:11:45:
                    91:5f:86:ee:9f:b5:19:1f:47:75:30:c5:d1:dc:af:
                    dd:ac:eb:c4:cd:df:84:80:ad:cf:6b:79:7a:38:fd:
                    d6:cc:f0:df:30:68:38:72:0c:23:d6:b5:0c:be:ff:
                    a6:2b:dc:8c:a6:0c:05:d0:8e:07:e7:f0:e1:5c:8f:
                    4a:ee:a2:6d:65:9b:9f:db:8b:0d:0d:78:e7:8d:4e:
                    32:5c:cc:0d:44:84:bd:f4:7d:8e:e6:bb:72:bf:a8:
                    6d:92:f0:7d:ee:5d:e8:2e:b9:f3:50:70:1e:d3:2c:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:3B:8B:1D:FB:57:47:6F:DF:0D:95:F6:02:C6:9F:CC:19:60:24
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3235302e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:b4:bc:18:09:75:cc:bd:8f:2a:ac:ac:de:7b:95:4c:5a:24:
         a5:73:a9:e4:e7:c6:03:6d:4e:50:b9:84:5d:61:64:5e:ac:3e:
         0a:2f:13:5c:6e:42:1e:36:99:be:6f:6b:5f:61:c8:03:73:6a:
         bd:c9:b1:65:11:9e:bf:a7:63:00:17:9c:20:67:87:b5:6b:99:
         2f:4d:c5:28:62:26:a7:15:ee:a3:84:34:58:72:bf:de:80:63:
         87:b8:b5:82:aa:fb:a0:0c:7c:62:e8:c0:2f:55:29:ec:f7:3d:
         aa:87:9c:67:5a:13:c2:17:37:fa:f5:55:cc:11:b1:08:cd:b8:
         91:6b:fc:b0:93:df:c8:2f:fa:1a:ed:ee:62:e2:37:a0:03:4b:
         17:bf:79:7b:47:58:d2:df:0b:91:5a:85:60:a4:a1:b2:d5:c9:
         44:8c:52:c0:08:52:62:88:16:d7:5d:76:5d:6d:11:36:79:7a:
         e2:8e:55:97:46:13:4b:6c:e3:d6:59:fd:67:2a:19:0a:f0:01:
         1c:dc:38:f9:4a:64:82:88:17:16:bd:1a:b8:88:62:87:84:97:
         6f:bd:31:8b:19:45:d0:71:fe:d5:62:a5:2f:01:b0:56:2b:5a:
         31:8c:c7:57:a1:85:d4:71:72:b6:eb:1b:e9:23:35:71:6c:eb:
         9b:f7:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:58 2026 by rpki-client