Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3130322e302f32332d3234203d3e203138383232.roa
File:                     3139302e382e3130322e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          0tr5HpxUg9friOh6U3ZzE77rweqArUkAIit4SGchSvY=
Subject key identifier:   63:FC:D6:21:11:F3:F9:1A:7F:26:5E:B1:B2:65:AC:37:7E:E2:A0:A9
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       23F0A92D60CAC50C8BB21B435F8497F4771DD570
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3130322e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:01 +0000
ROA not before:           Tue 01 Jul 2025 19:20:01 +0000
ROA not after:            Tue 30 Jun 2026 19:25:01 +0000
asID:                     18822
IP address blocks:        190.8.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f0:a9:2d:60:ca:c5:0c:8b:b2:1b:43:5f:84:97:f4:77:1d:d5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:01 2025 GMT
            Not After : Jun 30 19:25:01 2026 GMT
        Subject: CN=63FCD62111F3F91A7F265EB1B265AC377EE2A0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:a2:26:f0:d8:2b:78:47:bd:59:35:c0:68:
                    9f:8b:f4:03:8d:fb:db:68:83:50:dc:9d:04:99:c7:
                    16:4c:51:de:f7:88:dd:b4:23:76:8a:e4:bd:61:d2:
                    a9:2c:32:d3:7d:4b:01:37:0a:34:91:c1:d4:79:a6:
                    12:e8:da:92:d7:72:5f:f2:38:28:56:dd:7f:2a:84:
                    f9:46:25:94:8c:40:88:be:db:e7:11:3e:fa:b8:a3:
                    4e:33:46:68:9a:9b:a4:b9:0a:d7:6d:3e:d8:df:5a:
                    26:d2:e1:a7:a3:23:eb:4d:f3:84:48:f0:d4:66:69:
                    ab:30:d3:e3:49:03:0e:21:ce:59:c9:ba:d0:68:96:
                    cf:88:ba:5d:4e:d0:bd:5a:9a:85:45:57:b3:db:ee:
                    d5:9b:7b:b7:a0:8e:0d:f7:ca:0a:b8:fa:50:2d:16:
                    f4:1f:3d:ea:a4:18:98:e9:08:55:07:c4:14:19:55:
                    16:d3:2e:5a:af:60:de:f7:6a:82:46:15:ba:0e:f2:
                    5c:1b:25:00:1d:aa:80:f3:b0:c8:d5:1e:e0:82:fc:
                    8e:da:9a:5a:ef:37:ce:38:06:be:9c:57:0a:7c:de:
                    85:ef:64:2a:fc:0f:6f:c4:12:71:fa:dd:f0:26:be:
                    45:d9:ff:ad:5f:3c:c3:54:40:04:53:0d:d2:c6:2f:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:D6:21:11:F3:F9:1A:7F:26:5E:B1:B2:65:AC:37:7E:E2:A0:A9
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3130322e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:74:77:d8:9c:87:ba:81:d6:83:20:2f:57:78:c5:68:d3:9f:
         9e:8e:3a:8b:26:b4:21:fa:e8:17:4b:ba:d7:18:ce:97:2b:e1:
         98:9d:35:e9:ff:ed:47:b5:18:6a:48:1b:80:e2:16:ca:00:ee:
         28:72:fb:aa:fa:ea:1b:d1:0f:d7:ba:d0:b0:a3:39:c6:a1:45:
         8f:6e:12:1c:5b:d5:76:8d:51:18:b0:66:f5:5d:5c:65:5c:6a:
         9c:27:28:f6:88:70:43:74:dc:e4:5b:fd:43:19:db:57:db:8c:
         d6:52:45:07:8b:dd:c1:79:ec:e3:e9:97:af:6e:d6:e5:1b:60:
         af:90:65:60:17:0f:f3:34:0b:f3:57:3e:0a:d8:8c:69:cc:98:
         64:4e:3a:3c:fa:05:bf:64:1c:7c:a3:9c:2c:9d:46:40:20:11:
         b9:26:f0:46:b5:e0:bb:62:43:99:c6:f8:59:2b:e1:52:1d:dc:
         09:7e:23:a5:85:bc:04:62:45:a8:d3:ae:47:23:97:5a:1a:d6:
         b9:59:e0:a1:c6:cc:94:40:b4:bc:ea:11:70:de:c6:c5:e5:43:
         97:72:40:e2:87:80:d0:de:5a:ee:4d:bb:20:37:06:88:3f:df:
         fa:95:d8:4f:61:e5:a4:31:27:65:b2:2c:99:10:0c:01:85:c8:
         50:4b:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:45:06 2025 by rpki-client