Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3132382e302f31372d3234203d3e203134323539.roa
File:                     3139302e3135332e3132382e302f31372d3234203d3e203134323539.roa (raw, json)
Hash identifier:          LE0pycysYwfmA33vOpR1j1UNA2jBdWbTAnC6kM6Vb40=
Subject key identifier:   76:F8:69:C5:ED:A2:2E:E7:B6:DE:8F:AB:22:3F:0C:FC:DC:EE:6E:6E
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       56612D127328992A54604914AC9581F0DB41ACBE
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3132382e302f31372d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 19:25:10 +0000
ROA not before:           Tue 01 Jul 2025 19:20:10 +0000
ROA not after:            Tue 30 Jun 2026 19:25:10 +0000
asID:                     14259
IP address blocks:        190.153.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:61:2d:12:73:28:99:2a:54:60:49:14:ac:95:81:f0:db:41:ac:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:10 2025 GMT
            Not After : Jun 30 19:25:10 2026 GMT
        Subject: CN=76F869C5EDA22EE7B6DE8FAB223F0CFCDCEE6E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:b3:64:df:0b:d9:6f:82:57:09:23:ea:5f:
                    df:c4:54:69:4c:b8:76:17:ce:31:74:b0:ee:24:c2:
                    6c:a0:79:d0:c0:9a:82:15:af:1d:7b:1c:ce:b2:5f:
                    e7:78:d6:74:bf:38:f7:be:31:6e:bc:42:a7:57:4c:
                    39:10:ef:97:a4:1c:95:2a:ba:14:a2:2a:08:37:82:
                    23:48:d8:f9:39:de:2d:b3:d0:58:b7:45:1d:4d:fa:
                    93:9f:00:88:72:39:9d:18:bd:48:a6:30:3e:ea:e2:
                    6e:5d:85:94:e5:c5:ab:e2:64:b2:69:dc:50:c5:13:
                    b0:d4:91:6b:c6:1e:db:dc:f3:9e:b7:be:4d:40:6c:
                    37:2c:24:0c:36:87:fc:03:12:8b:16:6b:75:9b:2a:
                    2c:29:f8:d0:11:0e:15:9c:54:58:9a:79:3b:03:1f:
                    40:7c:2b:97:1c:4a:7b:25:75:06:88:33:9e:81:b7:
                    c8:b3:7d:65:65:e4:bc:38:59:ac:c6:8e:7b:6d:cf:
                    04:a4:c6:56:c2:be:19:ec:d4:bd:be:88:63:c6:9c:
                    04:8a:45:14:b3:78:6a:0f:0e:c8:a9:bc:20:fc:09:
                    41:b0:b6:05:05:30:c2:40:0c:69:11:a6:5d:e8:c9:
                    be:f7:a3:d8:85:75:10:d4:d2:68:aa:ae:67:e6:7b:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:69:C5:ED:A2:2E:E7:B6:DE:8F:AB:22:3F:0C:FC:DC:EE:6E:6E
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3132382e302f31372d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:4a:9e:5b:1e:33:f4:a6:e4:65:de:9f:3f:ba:79:03:2a:
         ef:60:1e:06:e8:12:12:99:71:7e:16:31:f5:db:fa:5f:38:e1:
         43:35:7a:57:08:59:2c:35:93:6d:9e:6b:95:0d:ba:ae:21:c0:
         88:71:7f:e3:13:e9:78:7b:26:f2:cc:fa:f9:d8:04:14:59:df:
         3a:ae:f4:e9:dd:64:81:45:46:ce:ec:6b:55:c7:b3:1c:2a:3a:
         a3:f1:1f:b5:88:57:89:14:a6:e8:85:bf:09:08:e9:d3:63:39:
         d0:18:16:37:f4:10:4e:d2:95:63:4f:d7:8f:86:94:c4:e1:1a:
         46:84:83:b0:86:39:f0:97:ec:94:0a:a3:60:cc:6e:2b:fb:78:
         a5:97:40:f9:66:2b:a4:1a:2c:5e:5b:21:69:96:67:9e:79:c5:
         03:ba:8f:01:0f:68:c7:e9:0f:cf:14:7b:b5:09:17:d6:f9:a4:
         60:9c:72:89:4e:38:aa:f8:53:ce:f1:7d:de:c1:d8:88:c2:3d:
         4b:08:6a:c1:6a:9e:9b:e2:09:09:04:c0:6c:3d:0e:1d:eb:f8:
         c8:16:2d:b5:0b:db:4f:96:75:a7:1d:fc:9e:ae:4e:92:12:6d:
         2f:ba:29:40:38:a0:06:5d:f4:f8:26:f2:cf:e1:a0:c2:58:3e:
         68:ac:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:31:25 2025 by rpki-client