Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa
File:                     3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          PxgGJ6bTNO5qPVz8iA0MUv6dgp+oRNrg4A+Pt0Y0pcY=
Subject key identifier:   FE:3E:B4:4F:AD:B7:CC:82:7F:B2:C6:D3:91:A3:3A:58:3D:40:35:41
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4F2E4A8EBDF4BB342CD54BC2A669FBF0725639FC
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:14 +0000
ROA not before:           Tue 01 Jul 2025 19:20:14 +0000
ROA not after:            Tue 30 Jun 2026 19:25:14 +0000
asID:                     18822
IP address blocks:        190.153.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2e:4a:8e:bd:f4:bb:34:2c:d5:4b:c2:a6:69:fb:f0:72:56:39:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:14 2025 GMT
            Not After : Jun 30 19:25:14 2026 GMT
        Subject: CN=FE3EB44FADB7CC827FB2C6D391A33A583D403541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:10:95:20:de:0d:ab:50:d1:21:5e:ea:17:e8:
                    44:eb:d6:ce:d0:27:ac:6a:fe:6b:7c:ec:50:6c:d4:
                    e1:2e:f8:44:af:f3:f7:bb:71:4f:02:b6:2f:bc:a2:
                    be:36:c0:2f:f5:94:ec:61:4b:ec:6f:9d:4f:c3:9b:
                    67:a4:ca:02:26:92:83:4e:20:e0:19:7a:6e:89:5d:
                    72:0d:e8:33:ce:d5:47:4c:3c:a6:cf:80:c5:f6:fd:
                    aa:1b:95:93:ff:1c:09:2f:dd:7e:b8:63:10:a4:8f:
                    e8:34:6c:2c:6a:2b:cb:a6:e2:20:94:1f:ff:aa:b9:
                    73:31:73:75:4b:d7:aa:d9:1f:24:7f:15:62:b8:b1:
                    90:99:c1:54:8a:92:13:da:08:51:a1:57:2a:04:81:
                    b4:b7:2b:0f:c0:40:e1:9b:fa:b9:4f:76:0a:26:32:
                    df:e8:21:e0:81:75:b9:07:e7:4e:bd:76:9c:35:4f:
                    36:fc:b2:fe:aa:98:c7:f2:ce:76:a6:ea:86:84:75:
                    fa:71:e2:d8:ea:46:79:76:95:13:68:b8:67:f4:5d:
                    98:19:24:0d:34:22:ac:93:bb:2b:64:05:66:b7:26:
                    12:55:30:a9:55:74:29:6a:d3:2a:3d:45:2c:49:a5:
                    37:2b:57:c4:dd:bf:15:9a:4c:31:d5:31:a2:92:9b:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:B4:4F:AD:B7:CC:82:7F:B2:C6:D3:91:A3:3A:58:3D:40:35:41
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3134352e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:47:8f:f2:12:c3:7b:53:23:c9:31:9d:ec:d7:b5:98:d2:a9:
         07:6a:f1:ad:03:64:88:d5:37:81:1e:09:74:0f:54:9a:7a:45:
         15:45:d1:f4:55:1b:b7:48:93:82:60:19:39:7c:18:88:21:f5:
         8a:56:d2:77:bc:fa:40:0a:c8:db:c0:53:30:5f:98:3e:d8:c7:
         aa:8a:c5:26:9e:41:7e:d2:1d:0a:a2:b2:5d:d4:f2:de:2a:d1:
         ef:26:3e:fc:78:07:6c:80:6f:0e:10:37:81:59:c2:bd:e2:a4:
         09:02:cd:2b:cd:e8:b8:6d:4f:ae:14:e2:28:e1:3c:42:c7:36:
         c0:57:20:df:b0:fd:9c:d1:f2:c6:cb:14:04:d8:54:f3:22:e2:
         ab:b1:68:89:fd:6e:ea:a7:98:f3:40:5e:59:6e:fc:37:d4:7a:
         6f:01:e1:ec:da:09:d0:b5:a9:ee:ea:f5:f1:fb:76:13:e1:db:
         32:e3:82:0e:d6:9c:3c:f8:d4:75:51:4b:a7:49:82:db:4c:c4:
         10:2f:3b:57:f2:6b:25:85:70:c2:dc:5e:0d:34:a9:8c:04:de:
         44:40:e2:19:c9:b6:b6:65:2e:ad:b6:bb:25:b2:88:ba:65:f9:
         15:80:be:ea:ed:5d:74:17:ba:fd:0a:ef:01:19:40:a6:c2:c6:
         90:df:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:45:00 2025 by rpki-client