Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37382e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e37382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          /KxOkZl9jyFgKkvYFIL4aNv5RyY2TvRO0o2hib05dMo=
Subject key identifier:   4F:BA:12:D3:99:4E:F6:F9:E5:25:8D:79:95:51:28:68:4F:0A:A6:B7
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       2D4C33FE734AFE972B2110BBC1318F1499D478DE
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:02 +0000
ROA not before:           Tue 01 Jul 2025 19:20:02 +0000
ROA not after:            Tue 30 Jun 2026 19:25:02 +0000
asID:                     18822
IP address blocks:        190.8.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4c:33:fe:73:4a:fe:97:2b:21:10:bb:c1:31:8f:14:99:d4:78:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:02 2025 GMT
            Not After : Jun 30 19:25:02 2026 GMT
        Subject: CN=4FBA12D3994EF6F9E5258D79955128684F0AA6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:87:f0:94:31:c7:f8:81:df:b5:cb:f1:6d:
                    fe:f9:21:8c:92:dc:46:6e:fd:85:16:67:ef:05:8a:
                    bb:6d:ca:ae:ab:e5:b9:af:7f:82:e6:fb:02:51:55:
                    63:33:e6:a9:d0:19:0d:e7:fb:48:35:69:1b:93:1b:
                    cb:7c:7b:22:0f:5c:5d:57:cb:16:ba:1c:8b:c5:0d:
                    cf:46:ad:fb:ea:a4:ec:34:72:34:62:6b:a0:6c:ba:
                    c2:6e:f2:8c:e4:9c:1b:cf:94:ae:01:46:43:03:c2:
                    38:51:11:60:88:82:7e:76:0b:96:97:1f:4a:9c:0d:
                    8f:84:88:04:6d:4b:41:6b:c7:99:d3:69:f7:06:d0:
                    07:1e:01:1f:6c:fb:a6:fc:01:1b:91:bb:96:9c:25:
                    c8:35:af:ad:19:59:53:e0:76:16:7d:7d:24:a7:d6:
                    00:b1:bd:32:48:00:14:9d:e3:f3:d2:53:17:d5:7d:
                    d4:b7:7f:9d:29:05:0a:a8:6c:f4:be:30:e6:f1:f9:
                    b9:de:f9:00:60:ee:da:27:9f:6c:c7:4a:a7:07:3e:
                    78:ad:62:f9:e7:4b:c8:e1:ce:31:68:db:e4:90:25:
                    7a:94:3f:c5:50:c4:52:8f:6a:4f:f4:ff:ae:e9:26:
                    27:ac:a5:9f:2d:09:5a:33:e0:92:70:2e:1e:de:16:
                    26:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:12:D3:99:4E:F6:F9:E5:25:8D:79:95:51:28:68:4F:0A:A6:B7
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:3f:76:bc:e5:b3:18:60:3a:f0:1c:fb:a1:ca:46:7d:f5:70:
         51:2c:6e:0a:75:47:81:b2:ae:fe:68:dc:e1:f8:ee:82:df:91:
         27:8e:ca:f0:ad:74:55:ce:65:5a:69:2f:da:7c:5c:62:06:8a:
         00:3b:9e:0e:52:80:9e:07:1c:e4:6f:d4:6d:a5:04:f6:92:fe:
         ec:38:49:ab:58:09:25:be:d8:6f:8d:c1:93:7a:4a:ef:ba:db:
         a0:90:72:b8:8e:0e:88:a0:69:f7:2f:e5:c6:7e:8c:ba:c5:15:
         3d:e9:a6:f8:db:00:c2:d4:20:78:4f:a4:5f:96:a9:66:0f:9c:
         5a:a4:52:c3:7f:18:48:d7:17:5e:af:4e:6d:35:59:a8:67:c6:
         2b:97:53:b8:a1:df:16:90:7d:b8:06:cd:9c:6b:53:df:2f:7b:
         f6:dc:2b:96:96:6e:b7:c3:d9:6d:ad:4c:39:b8:31:a6:75:f2:
         e7:db:5e:7c:0f:34:58:1c:f9:ec:b3:b0:f1:b0:3d:5d:8f:9c:
         10:c5:ae:a2:1c:15:fb:d3:a7:4c:d9:14:66:ac:b7:65:79:74:
         ef:86:e4:95:c3:a0:ea:28:88:ae:48:70:2f:4e:95:65:68:e5:
         29:02:35:25:59:aa:19:9a:7d:78:52:02:2a:8a:fb:07:1d:c0:
         b1:c6:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:35:06 2025 by rpki-client