Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e36382e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e36382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Xd6RxafsCYw5X2VHB28SNEKyz4kG7LjI4eVddLvKcQc=
Subject key identifier:   98:8E:54:10:80:18:78:BF:4F:D1:7F:C9:98:A1:82:7C:74:35:4A:09
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       0F227BE1D3A56E682C885BCB9B4618AC027BB680
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e36382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:14 +0000
ROA not before:           Tue 01 Jul 2025 19:20:14 +0000
ROA not after:            Tue 30 Jun 2026 19:25:14 +0000
asID:                     18822
IP address blocks:        190.8.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:22:7b:e1:d3:a5:6e:68:2c:88:5b:cb:9b:46:18:ac:02:7b:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:14 2025 GMT
            Not After : Jun 30 19:25:14 2026 GMT
        Subject: CN=988E5410801878BF4FD17FC998A1827C74354A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:b4:79:89:80:4a:a0:53:d3:9b:4e:7d:ca:
                    3a:09:4a:38:d8:a1:84:be:ad:db:2d:f9:37:d3:b3:
                    ee:fc:aa:f9:f6:c7:fc:09:02:07:eb:dd:de:7c:5e:
                    c2:e2:d7:68:9d:41:d4:6b:8c:36:d9:25:20:6d:52:
                    4c:9b:a8:77:6c:58:d4:c6:18:ad:29:57:57:c5:61:
                    3d:65:3d:f0:ea:dc:da:35:5a:10:29:5c:8a:de:07:
                    2a:eb:58:8c:e9:d4:41:a9:8b:d5:cf:2c:37:ea:d9:
                    64:c1:c8:8a:f6:5f:f1:0e:05:18:10:25:81:fa:8b:
                    aa:33:9c:8e:81:02:3a:ca:d0:e2:89:02:6b:15:96:
                    72:e1:58:59:f5:ef:d8:0d:4d:26:c0:52:51:ad:57:
                    dd:e8:6a:81:ae:c8:87:23:60:22:f5:ef:ca:7a:76:
                    bd:5d:85:0f:7c:e2:54:1c:c0:1c:43:19:47:9a:84:
                    4d:12:40:9f:68:d7:da:0d:e1:a0:de:e7:d9:93:9c:
                    8f:f1:d5:59:fc:4a:da:fc:c8:8d:07:0b:fd:4c:25:
                    2c:4e:fb:1c:f9:6b:1b:7f:76:4e:54:b9:57:20:eb:
                    fc:46:21:e9:e4:9b:d1:e1:ee:ae:a8:fc:62:75:00:
                    0a:0f:57:42:e6:7f:b7:ef:22:b2:42:3e:c0:f7:2c:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8E:54:10:80:18:78:BF:4F:D1:7F:C9:98:A1:82:7C:74:35:4A:09
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e36382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:a0:40:86:98:f4:cf:f5:2d:34:c0:05:e4:f9:af:ee:b1:df:
         ce:03:77:5d:bb:16:67:4a:0e:c3:66:14:b3:75:63:5a:93:e4:
         fc:ea:a8:ed:2b:01:81:5e:f1:53:aa:ed:a5:70:a4:54:53:f3:
         0c:ed:e9:52:8f:8a:a9:90:0c:32:6d:f2:3b:3f:d5:f6:ee:9f:
         73:28:0f:ff:c3:dc:27:5e:18:65:2e:14:e7:d7:38:66:7d:86:
         9f:0a:60:f7:b9:45:2a:21:27:5a:15:ed:58:e0:ca:4d:0c:3f:
         ab:ac:93:b1:a1:d0:7f:a5:89:cb:58:6e:08:b8:82:0c:fe:77:
         cf:ab:ee:20:de:2f:7e:3e:c0:1f:a2:cd:b1:cd:6d:81:47:0c:
         09:8a:45:63:83:a3:69:bd:60:89:e6:09:49:84:cb:39:ae:f8:
         58:8d:84:56:e3:45:8d:aa:bd:a7:5d:e3:f2:54:3e:b7:63:7b:
         36:a7:b1:2e:49:46:08:97:13:79:3e:ee:9f:ea:a6:bf:d9:31:
         c6:dd:51:3a:9a:c3:ce:26:1c:f2:8c:92:f3:6c:04:de:5a:d7:
         a4:0e:d1:0a:ae:ac:77:09:41:32:96:56:4e:06:57:c5:4d:e4:
         25:16:22:d0:d5:41:e5:80:da:a7:ff:f0:e8:1c:d9:83:10:b5:
         64:51:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:36:49 2025 by rpki-client