Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131322e302f32332d3234203d3e203138383232.roa
File:                     3139302e382e3131322e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          vfe/uqHet8yNsg6N3HE2cerfPj+LSgoRDX1xVoj5N8M=
Subject key identifier:   BD:74:C2:32:1D:AF:69:51:5C:58:40:16:1B:AB:D9:60:91:58:D6:AC
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       1FADBD157D41A86C6BDCCB535F587EB0213A65EF
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131322e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:28 +0000
ROA not before:           Tue 01 Jul 2025 19:20:28 +0000
ROA not after:            Tue 30 Jun 2026 19:25:28 +0000
asID:                     18822
IP address blocks:        190.8.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ad:bd:15:7d:41:a8:6c:6b:dc:cb:53:5f:58:7e:b0:21:3a:65:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:28 2025 GMT
            Not After : Jun 30 19:25:28 2026 GMT
        Subject: CN=BD74C2321DAF69515C5840161BABD9609158D6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:36:98:00:32:a0:13:6f:c5:4f:fa:56:3c:
                    db:06:ee:26:0d:28:aa:00:b5:1a:c1:b0:47:22:75:
                    0d:99:97:29:d6:13:2c:90:42:3c:f2:93:9c:ce:25:
                    b2:ec:8d:e7:14:59:d7:fa:4c:aa:d3:6e:e1:40:a0:
                    53:bd:c8:9a:4b:68:3c:92:5f:b4:89:86:c6:93:77:
                    af:06:e7:3d:76:50:ea:e4:90:e4:98:db:55:7b:15:
                    c2:1d:06:7e:61:ff:ca:87:ea:a8:53:51:11:01:73:
                    f9:e3:d2:73:03:a0:55:f5:79:09:da:e6:cd:a4:73:
                    35:7f:4c:0a:af:68:e8:00:e4:53:1f:3f:65:56:2f:
                    b7:01:f9:b7:0d:e6:fe:38:f4:72:10:a5:20:1e:8b:
                    55:af:a1:0b:57:10:f6:84:5d:0e:02:92:70:c7:42:
                    ba:01:bb:93:c8:22:ee:fe:5d:18:ab:56:3d:6e:5d:
                    14:5f:1a:b5:47:bf:db:6f:da:06:ea:ac:3d:c7:86:
                    6d:32:8a:c0:9c:9b:06:0d:59:af:46:de:ca:81:96:
                    86:58:93:e7:78:00:6e:31:c9:c5:52:0d:3f:3d:5e:
                    25:26:1c:82:73:27:fc:09:41:5c:3d:8c:bc:cd:11:
                    a9:ea:e6:0d:69:0c:b3:de:e0:20:da:5d:4f:da:29:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:74:C2:32:1D:AF:69:51:5C:58:40:16:1B:AB:D9:60:91:58:D6:AC
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131322e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:37:3d:18:42:ad:1e:ef:d2:18:2e:ec:1b:7e:c2:9a:da:00:
         01:3d:68:9d:3c:26:32:95:7c:ce:77:36:16:29:40:6e:64:36:
         cc:08:29:f9:a9:05:44:a8:1c:4d:c1:bc:9b:e0:57:07:68:dd:
         8a:cc:99:93:60:36:77:46:a0:0e:d3:c2:be:7a:cd:d5:2a:a4:
         71:34:dd:6c:6a:d4:ff:1f:85:be:0d:b8:10:73:25:68:76:f1:
         1e:c6:77:54:e9:41:4f:03:28:54:64:e7:01:b8:99:62:45:65:
         32:61:12:91:5f:d9:13:28:94:fa:5d:ee:96:de:6d:6c:26:3a:
         3c:1d:82:fe:4b:1b:fe:0c:cc:10:86:23:09:a1:e3:14:43:c5:
         d5:88:2d:0e:33:c4:54:79:58:1f:e6:8c:9e:01:05:40:04:e0:
         b9:45:02:e2:f9:7b:f0:b3:b5:b4:53:18:d0:05:e7:f5:a6:c2:
         59:f6:8a:d0:bf:27:14:a5:1d:6f:69:6c:20:73:78:09:76:07:
         12:57:c6:e7:ed:d7:0b:7e:a3:80:3a:a8:13:6e:5b:3b:e3:95:
         d5:03:28:3c:aa:ba:49:4d:45:7a:53:e5:2c:33:b4:2b:2e:41:
         1d:9f:a5:8d:2d:9d:b4:e9:ca:2e:9f:19:28:2a:63:93:64:79:
         b5:a9:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:42:49 2025 by rpki-client