Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3235322e302f32342d3234203d3e203138383232.roa
File:                     3139302e39382e3235322e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          60fBcvR7zxyJpx/UMCOM6ZbJ5h0mPjjOrhN4XPpUB08=
Subject key identifier:   07:A9:43:FA:A7:69:AA:37:43:59:78:DC:CF:89:FF:72:7C:9C:F4:0E
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4FC2F58AA6C6EC85924EFF217EDB1CEF825A20CD
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3235322e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:52 +0000
ROA not before:           Tue 02 Jun 2026 19:40:52 +0000
ROA not after:            Tue 01 Jun 2027 19:45:52 +0000
asID:                     18822
IP address blocks:        190.98.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c2:f5:8a:a6:c6:ec:85:92:4e:ff:21:7e:db:1c:ef:82:5a:20:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:52 2026 GMT
            Not After : Jun  1 19:45:52 2027 GMT
        Subject: CN=07A943FAA769AA37435978DCCF89FF727C9CF40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:00:17:02:7c:4e:be:e0:bb:19:af:c5:ee:
                    2b:42:77:7c:ba:09:36:9c:be:5c:bc:da:bd:47:5e:
                    b9:3d:83:cf:9c:68:ea:76:37:6b:ec:a5:fb:ac:1c:
                    fb:bb:8c:c9:d3:cd:7a:70:96:c2:dd:fa:37:e5:be:
                    2d:20:10:ee:c6:84:10:30:47:f5:76:2d:b5:2f:37:
                    34:20:87:b8:a3:95:33:d9:9d:4d:2b:ae:f3:04:84:
                    64:73:25:88:74:58:55:e3:f1:f9:3a:ec:f5:42:89:
                    9c:0f:41:2a:02:0a:af:6f:7b:ea:89:30:64:fa:26:
                    a5:a5:27:4d:e1:3d:a3:ec:6b:eb:f4:14:2c:a4:d0:
                    94:f9:c5:99:9b:be:54:c9:b7:38:31:8f:32:40:26:
                    52:25:a5:d2:b0:58:02:0a:12:17:66:87:19:d9:ce:
                    13:3f:da:d2:0b:0f:d3:81:31:ad:d9:a0:d2:14:3d:
                    5f:03:6c:3e:fa:14:12:e1:0a:7f:05:f7:2f:7c:12:
                    4c:ac:ca:55:e0:bc:9c:f2:93:d0:5a:ac:12:0d:68:
                    7e:47:0c:bb:c0:99:3a:19:dc:e9:48:ae:6d:2f:15:
                    68:3e:e6:d8:94:cd:f7:ef:68:c5:3f:5e:c9:af:4e:
                    8e:3f:0d:9e:83:3e:bb:bd:5b:cf:91:b7:e2:a9:58:
                    aa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A9:43:FA:A7:69:AA:37:43:59:78:DC:CF:89:FF:72:7C:9C:F4:0E
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3235322e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:4d:bb:e6:c0:d7:98:05:42:42:9b:86:84:76:d0:a7:6a:0c:
         85:e2:0e:90:9a:2f:27:60:24:67:ad:6a:0d:c1:c9:32:32:9d:
         e4:d5:48:57:4c:e1:5f:0b:1c:70:31:2f:ae:ac:10:15:9a:a9:
         0a:92:56:f1:67:d7:07:fe:90:cd:7a:92:a6:80:de:d6:4c:51:
         fe:8e:21:94:95:90:a1:cb:1b:3e:62:3f:34:13:e9:df:38:ae:
         a3:a2:23:30:e2:65:11:80:84:b3:6b:81:d6:46:22:7d:93:2b:
         69:b3:1f:14:0e:25:d6:57:70:37:a7:54:1d:de:15:2e:9c:30:
         a3:b1:80:84:08:17:ad:03:f6:83:b3:65:4c:e4:84:9a:74:21:
         aa:80:47:91:6f:84:e1:83:0f:fb:09:22:28:17:ca:d0:ca:3c:
         d8:3f:a2:4c:f4:5f:93:dd:7c:3d:f5:a9:68:16:d7:24:0a:fe:
         96:e3:34:e6:04:23:6f:94:76:0f:f1:9a:e0:0d:a9:f7:64:bb:
         eb:fb:4f:bd:33:4d:7f:3d:4b:93:2c:90:f3:cc:f3:8f:6d:21:
         a8:48:16:10:23:a7:f4:f6:31:c3:fa:ae:94:e7:aa:1b:a1:ae:
         08:2a:af:ef:0f:24:4e:72:29:3c:ea:f5:b5:f5:c3:9e:dd:aa:
         36:a5:46:9d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUT8L1iqbG7IWSTv8hftsc74JaIM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQwNTJaFw0yNzA2MDExOTQ1NTJaMDMxMTAvBgNV
BAMTKDA3QTk0M0ZBQTc2OUFBMzc0MzU5NzhEQ0NGODlGRjcyN0M5Q0Y0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+wAXAnxOvuC7Ga/F7itCd3y6
CTacvly82r1HXrk9g8+caOp2N2vspfusHPu7jMnTzXpwlsLd+jflvi0gEO7GhBAw
R/V2LbUvNzQgh7ijlTPZnU0rrvMEhGRzJYh0WFXj8fk67PVCiZwPQSoCCq9ve+qJ
MGT6JqWlJ03hPaPsa+v0FCyk0JT5xZmbvlTJtzgxjzJAJlIlpdKwWAIKEhdmhxnZ
zhM/2tILD9OBMa3ZoNIUPV8DbD76FBLhCn8F9y98EkysylXgvJzyk9BarBINaH5H
DLvAmToZ3OlIrm0vFWg+5tiUzffvaMU/XsmvTo4/DZ6DPru9W8+Rt+KpWKpRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUB6lD+qdpqjdDWXjcz4n/cnyc9A4wHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzkzODJlMzIzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5i/DAN
BgkqhkiG9w0BAQsFAAOCAQEAbU275sDXmAVCQpuGhHbQp2oMheIOkJovJ2AkZ61q
DcHJMjKd5NVIV0zhXwsccDEvrqwQFZqpCpJW8WfXB/6QzXqSpoDe1kxR/o4hlJWQ
ocsbPmI/NBPp3ziuo6IjMOJlEYCEs2uB1kYifZMrabMfFA4l1ldwN6dUHd4VLpww
o7GAhAgXrQP2g7NlTOSEmnQhqoBHkW+E4YMP+wkiKBfK0Mo82D+iTPRfk918PfWp
aBbXJAr+luM05gQjb5R2D/Ga4A2p92S76/tPvTNNfz1LkyyQ88zzj20hqEgWECOn
9PYxw/qulOeqG6GuCCqv7w8kTnIpPOr1tfXDnt2qNqVGnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:55 2026 by rpki-client