Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3139322e302f32312d3234203d3e203138383232.roa
File:                     3139302e3135332e3139322e302f32312d3234203d3e203138383232.roa (raw, json)
Hash identifier:          aJZTBYXXvTSEulz+a7KpH+eW88XaF4cI40yIY3nuTjQ=
Subject key identifier:   39:70:38:1E:8F:C7:1C:AB:48:BC:E4:1C:72:71:D1:22:9B:0A:53:9F
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       7FB642340AFE684E55C1057799F420867ACF0D12
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3139322e302f32312d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:01 +0000
ROA not before:           Tue 01 Jul 2025 19:20:01 +0000
ROA not after:            Tue 30 Jun 2026 19:25:01 +0000
asID:                     18822
IP address blocks:        190.153.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b6:42:34:0a:fe:68:4e:55:c1:05:77:99:f4:20:86:7a:cf:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:01 2025 GMT
            Not After : Jun 30 19:25:01 2026 GMT
        Subject: CN=3970381E8FC71CAB48BCE41C7271D1229B0A539F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:95:2f:ac:55:dc:fe:df:db:82:41:6b:d3:
                    68:13:ec:57:7a:0d:84:2c:f6:a3:b8:89:c4:fa:a7:
                    be:fe:55:0f:8a:d1:c6:a4:29:01:83:7e:06:0f:ec:
                    62:4b:54:1b:59:5b:06:be:a9:c8:7d:14:79:97:b3:
                    e9:8b:32:1c:3b:58:e5:38:3d:45:c6:44:68:3a:71:
                    76:3a:09:b4:a3:90:8d:27:88:c4:31:b8:c0:ee:bc:
                    0e:fa:22:f6:63:d8:41:a3:0c:00:98:67:8a:f2:45:
                    f5:f7:55:d2:5c:92:85:ee:12:cf:f6:29:e0:d3:1c:
                    15:26:61:f4:68:6b:5c:31:b1:59:a1:63:d9:d9:1d:
                    1e:22:33:ce:f7:d1:d3:6b:89:a1:48:a9:bf:3e:86:
                    9e:9b:d9:84:d7:db:0f:53:50:1b:b0:25:cc:32:78:
                    f8:2d:be:48:12:c5:35:7a:cf:4b:7c:27:75:32:84:
                    90:5b:cf:bd:e4:ef:5c:9d:c8:de:4b:d5:66:87:e7:
                    fe:3e:3e:62:e8:98:26:42:29:c3:df:7d:65:62:ac:
                    4a:7b:71:5e:ca:fe:00:68:dd:f0:da:99:45:da:dd:
                    2e:cf:47:d4:56:e0:3e:2f:03:76:e3:4c:db:2c:df:
                    04:7e:6f:ac:45:ea:7a:fd:61:74:e7:db:cb:0c:60:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:38:1E:8F:C7:1C:AB:48:BC:E4:1C:72:71:D1:22:9B:0A:53:9F
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3139322e302f32312d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:e7:c5:49:db:1a:d5:e7:76:cf:40:f0:70:92:02:ca:18:de:
         c0:8b:c4:04:aa:ab:ad:18:c6:e6:9c:05:9d:03:be:a6:16:00:
         32:7f:d8:a7:21:0e:99:23:e0:3c:7a:9f:f0:88:f3:94:cf:46:
         09:d4:7d:7f:f2:76:6e:23:a2:03:21:88:ce:d7:e9:c4:56:2e:
         75:06:e1:01:95:c7:ae:7c:87:82:10:b7:a4:c3:78:5a:61:80:
         67:03:84:71:6b:39:9d:3f:e4:97:ae:97:7c:10:03:a7:5a:4a:
         7a:2e:33:54:ec:79:46:80:0f:66:47:9b:6c:04:86:76:c7:4b:
         88:49:0a:b6:ec:87:2c:fd:e2:36:09:33:cb:ca:91:1b:80:ab:
         8d:52:99:f0:12:66:67:24:e6:5a:64:54:30:f7:ee:93:76:f0:
         c8:46:d8:8d:a7:71:b9:25:e2:4e:ee:70:a6:81:c8:89:1b:1e:
         a5:a2:a5:9d:47:37:34:24:22:71:3d:05:b8:73:80:23:a1:04:
         5d:f9:ab:90:7c:96:7b:71:f0:f9:6c:8a:1e:e9:90:77:04:57:
         8c:3c:8b:f4:d4:85:c6:b4:47:c6:3f:71:75:75:25:ef:4a:be:
         47:15:99:80:43:0f:e4:5f:42:a9:63:76:08:ff:7d:24:4e:de:
         45:58:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:33:14 2025 by rpki-client