Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3132382e302f32302d3233203d3e203138383232.roa
File:                     3139302e3135332e3132382e302f32302d3233203d3e203138383232.roa (raw, json)
Hash identifier:          UeZpj05OIDvPnaVeBGUeS6A5lBxlL+GTpdHzj+gl7mE=
Subject key identifier:   94:A8:E3:35:19:B5:19:D3:A7:9B:9B:53:06:62:B4:2D:3C:A6:BB:06
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       703384A42DE8316EEB2472C8EC7B4AF008A1DB6C
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3132382e302f32302d3233203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:14 +0000
ROA not before:           Tue 01 Jul 2025 19:20:14 +0000
ROA not after:            Tue 30 Jun 2026 19:25:14 +0000
asID:                     18822
IP address blocks:        190.153.128.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:33:84:a4:2d:e8:31:6e:eb:24:72:c8:ec:7b:4a:f0:08:a1:db:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:14 2025 GMT
            Not After : Jun 30 19:25:14 2026 GMT
        Subject: CN=94A8E33519B519D3A79B9B530662B42D3CA6BB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:30:a7:55:14:18:0d:97:d6:59:ed:83:f6:
                    cd:d8:66:81:34:b5:1f:e3:d7:52:48:ce:c8:79:d3:
                    67:63:81:6c:11:40:ff:20:33:72:1e:1c:50:7c:42:
                    a1:00:36:8a:5d:51:b7:91:92:6f:23:27:42:33:14:
                    30:d5:6a:90:07:0f:59:ae:78:aa:16:2f:3d:1b:9f:
                    03:3e:09:8b:2c:88:83:26:48:e6:7d:c4:4a:a3:30:
                    83:e6:b6:4f:85:9e:66:ec:31:2c:4a:c5:2f:db:4d:
                    09:a8:ed:b8:d4:78:8b:3c:d4:df:ac:e9:90:e4:dc:
                    d1:a5:dc:49:36:7f:38:2d:0e:60:85:fe:81:98:39:
                    e1:3e:1a:b6:ba:8f:31:f1:bf:c8:dd:09:ef:c6:cb:
                    6c:49:1f:e4:2f:25:ba:05:94:fc:20:64:86:62:ad:
                    42:5c:fd:67:c7:32:4c:8c:9b:0d:4b:d7:47:29:39:
                    40:fc:9f:53:51:f8:59:ea:66:6f:cc:9e:a6:1c:df:
                    fe:9b:1d:8c:21:d5:10:60:f2:a7:40:67:68:ce:09:
                    31:18:9a:fb:b9:06:9b:61:08:fd:f1:62:e8:a5:3d:
                    a8:18:c4:9d:f1:75:07:9d:3e:4a:96:58:5b:54:f8:
                    3e:82:b2:9f:56:63:14:6c:ea:34:00:e4:f9:fe:1c:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A8:E3:35:19:B5:19:D3:A7:9B:9B:53:06:62:B4:2D:3C:A6:BB:06
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3132382e302f32302d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:37:b5:0e:77:29:f2:6d:fc:22:09:4a:0f:ca:3c:62:00:
         0d:f7:88:d0:93:77:b9:98:f9:79:2f:ff:d8:14:03:cf:22:7a:
         c1:4e:b8:d0:83:26:43:51:97:cd:84:41:03:c7:10:a0:e2:82:
         c0:67:2b:13:7d:00:5e:30:31:0d:2b:00:88:5c:d3:e0:79:02:
         1a:0c:71:c9:1e:a4:ff:61:da:23:46:04:cd:6c:5b:64:2f:3d:
         7b:61:e0:af:c5:28:01:c3:4a:9f:c6:b1:18:81:fc:dd:4f:48:
         66:dd:ef:9c:aa:93:6b:71:12:b1:9b:a0:e4:5b:a2:94:ac:50:
         d9:d0:33:39:af:8b:6a:fa:97:62:41:7a:57:5a:9b:aa:f0:f1:
         5b:d4:2b:02:e6:8d:14:cf:0f:f7:85:11:d9:8f:36:0c:cf:db:
         03:3b:0d:19:0d:15:06:bd:a8:b1:a8:51:cd:a7:33:f9:45:59:
         ff:07:56:2d:38:e0:a1:02:7d:23:21:d6:88:52:93:92:07:7a:
         a4:0b:dc:71:dd:f6:bd:47:33:f4:2a:86:09:11:36:48:f9:61:
         e4:3e:8c:a5:ee:22:97:17:b7:fb:e2:36:66:5e:de:31:9d:30:
         99:ed:fc:47:cf:ba:2f:3a:c5:f4:65:8d:2a:05:42:b1:23:d4:
         69:d4:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:28:24 2025 by rpki-client