Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3230302e302f32322d3234203d3e203138383232.roa
File:                     3139302e3135332e3230302e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          ebIuU6UcCeTB2YarIp/m/MW1JV1IsbmDWxUMQb1T9HM=
Subject key identifier:   D8:45:C1:BA:C8:88:ED:7E:5E:95:C5:FD:A0:72:78:D7:00:34:24:BB
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       21A65209B44AD2F4132CF2B1E99062A41ACA721C
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3230302e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:29 +0000
ROA not before:           Tue 01 Jul 2025 19:20:29 +0000
ROA not after:            Tue 30 Jun 2026 19:25:29 +0000
asID:                     18822
IP address blocks:        190.153.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 14:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a6:52:09:b4:4a:d2:f4:13:2c:f2:b1:e9:90:62:a4:1a:ca:72:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:29 2025 GMT
            Not After : Jun 30 19:25:29 2026 GMT
        Subject: CN=D845C1BAC888ED7E5E95C5FDA07278D7003424BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:72:00:b8:a9:d4:31:3f:21:58:a3:80:ff:7e:
                    4c:e3:da:eb:98:64:6c:91:7e:4b:ec:01:1e:7c:59:
                    e0:46:d3:fe:1a:c7:0e:d7:20:83:3f:2a:c0:6f:5b:
                    5d:9e:d7:d8:8d:67:0f:08:13:0a:93:47:e1:13:18:
                    e8:74:59:e4:6d:35:35:34:38:5c:d4:02:45:4c:a3:
                    fe:3f:7f:dd:0a:6a:82:87:68:4f:0b:1c:b9:b0:1c:
                    69:f0:21:a6:75:1c:f0:a7:19:95:1c:63:d9:d0:b8:
                    25:16:50:10:7e:57:92:78:2e:c0:66:0a:aa:f0:ed:
                    6e:35:54:45:8e:4d:0c:cf:c8:1b:49:3c:b1:23:d9:
                    b2:6f:4c:12:7a:7e:fa:f0:58:84:db:29:b8:cf:7a:
                    83:09:0b:8b:6f:d6:d7:b4:25:ed:6d:8d:fc:d7:e4:
                    ef:ef:93:25:f5:47:db:1c:4a:9c:65:67:84:52:81:
                    53:c9:86:32:93:f3:77:53:47:4a:dd:82:b7:7a:98:
                    ad:db:e6:d7:eb:94:f5:64:fb:2a:bb:c5:25:17:01:
                    6a:60:fb:e4:b8:11:0d:fb:22:25:60:d0:f1:18:0a:
                    df:cc:00:d3:fb:23:95:64:de:50:87:ff:e0:a0:ae:
                    59:d2:e1:26:9a:a4:8d:f1:04:11:ed:af:c1:53:40:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:45:C1:BA:C8:88:ED:7E:5E:95:C5:FD:A0:72:78:D7:00:34:24:BB
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e3135332e3230302e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:f7:f4:f6:d9:10:21:a2:80:ab:46:a5:1f:9f:8e:39:a4:
         1b:02:5c:ca:b2:a0:9b:3d:e5:f9:3b:09:bc:cb:c5:d9:3a:22:
         4d:3b:b7:f6:48:a9:8b:b7:02:1c:23:34:4c:6d:26:44:ea:af:
         fc:40:90:8f:fa:c9:66:c6:48:d5:f4:f8:c9:29:5c:cf:b2:a1:
         73:3a:fa:2e:b4:bc:89:55:6e:07:46:67:10:c5:02:3c:f6:b8:
         5a:c6:45:c6:78:4b:86:63:de:81:45:5a:9e:72:93:bd:81:1b:
         ca:28:60:99:1f:2a:ad:d4:64:4a:bc:38:c4:01:43:a2:87:42:
         1b:bd:ff:9b:03:cc:0b:a0:3e:c8:5b:19:22:e5:b2:2a:be:58:
         f7:4f:ee:9c:13:11:31:50:c1:9a:5d:ef:c3:ab:de:77:c6:62:
         99:de:6d:bc:17:07:fd:db:d2:01:46:c1:f3:b0:67:f8:98:8d:
         e7:28:24:1d:06:fb:39:c5:05:aa:55:03:92:7c:1c:15:5d:00:
         15:09:ab:0b:b9:80:34:16:15:89:7f:5a:ad:f0:3d:52:e6:27:
         66:72:fe:26:76:b4:14:d0:d3:90:7b:30:35:4e:9f:c6:17:a5:
         a6:e1:18:e6:e0:4b:db:0e:dd:03:f7:c6:74:a4:20:ba:8e:e3:
         65:1c:11:7d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIaZSCbRK0vQTLPKx6ZBipBrKchwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMjlaFw0yNjA2MzAxOTI1MjlaMDMxMTAvBgNV
BAMTKEQ4NDVDMUJBQzg4OEVEN0U1RTk1QzVGREEwNzI3OEQ3MDAzNDI0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcgC4qdQxPyFYo4D/fkzj2uuY
ZGyRfkvsAR58WeBG0/4axw7XIIM/KsBvW12e19iNZw8IEwqTR+ETGOh0WeRtNTU0
OFzUAkVMo/4/f90KaoKHaE8LHLmwHGnwIaZ1HPCnGZUcY9nQuCUWUBB+V5J4LsBm
Cqrw7W41VEWOTQzPyBtJPLEj2bJvTBJ6fvrwWITbKbjPeoMJC4tv1te0Je1tjfzX
5O/vkyX1R9scSpxlZ4RSgVPJhjKT83dTR0rdgrd6mK3b5tfrlPVk+yq7xSUXAWpg
++S4EQ37IiVg0PEYCt/MANP7I5Vk3lCH/+CgrlnS4SaapI3xBBHtr8FTQJ25AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2EXBusiI7X5elcX9oHJ41wA0JLswHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzEzNTMzMmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvpnI
MA0GCSqGSIb3DQEBCwUAA4IBAQAu9/f09tkQIaKAq0alH5+OOaQbAlzKsqCbPeX5
Owm8y8XZOiJNO7f2SKmLtwIcIzRMbSZE6q/8QJCP+slmxkjV9PjJKVzPsqFzOvou
tLyJVW4HRmcQxQI89rhaxkXGeEuGY96BRVqecpO9gRvKKGCZHyqt1GRKvDjEAUOi
h0Ibvf+bA8wLoD7IWxki5bIqvlj3T+6cExExUMGaXe/Dq953xmKZ3m28Fwf929IB
RsHzsGf4mI3nKCQdBvs5xQWqVQOSfBwVXQAVCasLuYA0FhWJf1qt8D1S5idmcv4m
drQU0NOQezA1Tp/GF6Wm4Rjm4EvbDt0D98Z0pCC6juNlHBF9
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:34:00 2025 by rpki-client