Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3132342e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e3132342e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          ZHGFlgk3rrrhP4OVMGz+0j6yyVuKs4W2ToAsCP9Ewrc=
Subject key identifier:   50:FC:FE:73:9F:56:1B:0B:08:19:C8:36:BE:39:83:5D:27:01:98:ED
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4093A3348AFDC41FE6CAAE6FBA141270748F48B8
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3132342e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:24 +0000
ROA not before:           Tue 01 Jul 2025 19:20:24 +0000
ROA not after:            Tue 30 Jun 2026 19:25:24 +0000
asID:                     18822
IP address blocks:        190.8.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:93:a3:34:8a:fd:c4:1f:e6:ca:ae:6f:ba:14:12:70:74:8f:48:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:24 2025 GMT
            Not After : Jun 30 19:25:24 2026 GMT
        Subject: CN=50FCFE739F561B0B0819C836BE39835D270198ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:27:8c:64:f2:ab:1b:c7:ca:45:fa:46:7d:
                    cd:51:dd:d1:ca:89:5c:aa:07:d6:76:78:8e:a0:58:
                    f7:60:14:c5:7f:84:4e:d9:59:5f:7b:11:17:88:93:
                    f8:e1:32:ee:de:0e:c6:3f:93:38:5f:e0:57:1b:b5:
                    1a:37:04:7e:73:a8:c8:04:47:84:02:b5:c6:f2:73:
                    11:f5:c3:c8:39:d2:62:43:7c:02:06:4c:b6:21:1c:
                    fa:1a:25:a9:f9:3b:9f:02:e7:2e:c6:65:13:75:3c:
                    a9:af:78:92:fb:95:2a:2e:4d:65:d4:63:62:d7:d3:
                    ff:77:ba:c9:cf:f2:7b:d5:6f:09:67:f8:a9:d3:4e:
                    ef:38:7b:84:9c:64:be:35:25:d7:5a:01:27:c8:03:
                    ee:11:7c:18:e3:fb:24:21:7c:4a:45:7d:67:0a:f4:
                    82:6b:4b:70:d7:f5:59:97:59:84:88:5d:c8:71:34:
                    81:47:fe:e5:ad:42:46:5b:14:e1:c7:64:a6:7d:f2:
                    02:2e:54:27:26:c3:ba:c7:64:c9:e2:7c:ab:7f:9a:
                    2c:36:8f:cd:de:ca:66:a5:81:37:76:cf:de:d1:7f:
                    6b:08:c2:19:74:b4:b8:97:c2:e5:d9:3d:15:5b:00:
                    72:d8:3c:4c:73:0b:52:77:e2:13:ff:1a:b8:c4:66:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FC:FE:73:9F:56:1B:0B:08:19:C8:36:BE:39:83:5D:27:01:98:ED
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e3132342e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:6d:18:07:ca:65:95:b4:ba:36:e4:43:c5:67:7f:bf:de:
         ad:a9:21:99:1d:33:e1:19:ec:6b:bc:bd:04:d1:2f:a5:9a:71:
         06:f9:b1:68:c9:3d:f7:49:c3:d3:2f:a5:c7:67:c2:61:c1:0c:
         e0:95:ff:47:dc:ad:db:36:21:7c:3d:46:de:0f:b3:b1:05:62:
         af:79:84:17:74:c9:b8:af:a4:e5:fc:f8:30:9e:74:09:63:e8:
         2e:36:1a:f1:4b:e5:5c:32:2a:c1:e7:cb:67:f9:45:6b:95:fe:
         fb:6f:cc:fe:00:62:0b:a3:fc:c2:a3:fc:bd:c8:31:72:0d:b4:
         61:b2:05:60:aa:fe:4c:26:1d:d5:ba:02:fc:c4:97:16:e2:fa:
         17:5e:bc:e9:44:9d:29:64:14:c9:a2:f3:99:e7:d3:53:57:9e:
         57:2c:18:53:88:e2:09:d6:ca:0c:33:4b:02:b8:b8:7e:87:9f:
         6a:9e:05:57:8e:e3:4b:cd:d9:6d:aa:ba:f7:29:4a:27:29:89:
         0b:e7:77:1f:6b:ea:93:82:f3:b1:dd:cc:69:ec:95:89:62:1a:
         87:17:b2:99:4c:2f:52:c7:a8:53:cc:30:81:8f:28:d7:58:65:
         d2:2a:ce:e4:49:b0:e6:b6:8a:ae:2d:41:27:d1:24:d0:e6:72:
         07:fe:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:36:51 2025 by rpki-client