Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131382e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e3131382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          p1WhZGnp2LNillGNfphqA0XDksmbZ8g9Mw3o5VW1DY0=
Subject key identifier:   48:EE:FB:3C:5D:1C:54:06:FC:B6:05:E2:B5:61:2B:96:3F:58:92:C3
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       486B3438792961E1F12441CE78CDABDE96D292B7
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:12 +0000
ROA not before:           Tue 01 Jul 2025 19:20:12 +0000
ROA not after:            Tue 30 Jun 2026 19:25:12 +0000
asID:                     18822
IP address blocks:        190.8.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6b:34:38:79:29:61:e1:f1:24:41:ce:78:cd:ab:de:96:d2:92:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:12 2025 GMT
            Not After : Jun 30 19:25:12 2026 GMT
        Subject: CN=48EEFB3C5D1C5406FCB605E2B5612B963F5892C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:1c:4b:69:30:57:91:bc:4c:23:7f:a2:3e:
                    54:eb:dd:50:8f:cd:25:67:5f:12:70:ed:0e:55:2f:
                    c3:60:ee:29:54:36:4e:79:f7:b5:64:b7:0f:ee:c8:
                    eb:70:d9:81:2e:05:de:96:78:a0:7a:06:df:76:d3:
                    e4:c5:50:79:08:5f:e0:73:10:86:3e:bf:ce:6f:c5:
                    3a:66:ae:3f:b5:c1:40:17:c1:a9:1c:2f:13:f1:ff:
                    bb:38:27:1e:e7:64:70:49:f9:9d:c2:52:b6:1d:fb:
                    7a:5a:11:36:1f:ac:9f:3e:4d:6c:e0:07:c2:f1:25:
                    8a:45:61:b9:01:36:27:95:fc:ca:a0:fa:c8:80:3c:
                    5d:c3:4a:ec:07:12:17:6b:c2:6c:44:05:a1:1b:c1:
                    84:37:7d:44:7f:cd:45:7c:25:28:32:42:8c:13:99:
                    24:3a:3a:e6:26:a4:03:68:90:99:31:1e:87:09:0b:
                    51:6f:4c:16:5a:13:c7:6f:5d:26:a3:73:41:a6:e5:
                    77:7a:92:15:41:25:b8:eb:f7:eb:c0:fa:7b:eb:83:
                    d7:82:ef:dc:c2:d0:e4:f2:ae:59:c4:05:05:7b:51:
                    24:f3:58:7a:2f:1a:08:71:50:ed:6b:63:80:39:b5:
                    3f:35:2a:9f:9f:d1:5e:84:b8:06:40:88:10:09:02:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:FB:3C:5D:1C:54:06:FC:B6:05:E2:B5:61:2B:96:3F:58:92:C3
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3131382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:0c:01:04:a1:45:ad:1e:01:fb:aa:ec:ee:44:bb:f3:31:
         31:8b:5c:fa:b1:af:37:2c:e9:68:fc:cc:87:26:d2:ae:18:9b:
         37:ee:01:48:59:4b:07:a5:05:0c:8d:53:2c:69:f2:58:a3:b9:
         12:27:5f:c1:cf:2b:56:be:b5:60:9d:53:2c:d1:c4:e0:0e:68:
         6e:9f:ec:d8:af:34:20:e0:b1:be:82:00:9f:b7:13:56:06:4a:
         4e:eb:bf:a3:64:c8:28:59:e1:75:d6:b1:e6:69:96:c0:ed:3f:
         fa:c0:c1:5d:63:52:bc:c7:ba:9a:0b:ab:61:15:4b:c2:36:9a:
         41:ce:32:5c:7d:9b:8f:90:8a:3c:29:e0:85:e7:fc:38:2f:94:
         12:48:6f:5e:42:92:18:c0:16:b6:49:71:f7:45:e5:f1:ca:79:
         14:1f:57:5a:c0:97:40:00:bd:f4:22:3d:d0:ac:45:3d:07:b3:
         4a:71:24:8c:60:58:ee:90:41:1f:9d:1b:9e:71:88:16:92:81:
         b2:63:1d:b2:3c:5c:ba:db:6f:56:f1:22:4f:b9:dd:26:c8:35:
         e1:2e:cc:d2:a7:e8:9d:31:80:65:64:5a:85:7e:21:73:da:d7:
         8e:cd:5a:6c:b5:d7:54:a8:c5:e8:5b:c4:d0:cb:4f:aa:6f:41:
         8c:be:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:42:48 2025 by rpki-client