Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38312e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e38312e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          7fsbkOYkb3NTVUYpy1Up448gV0qjWOg4LvmjLrLByo0=
Subject key identifier:   DC:BF:83:E4:0C:2A:72:BE:37:99:6D:9B:BC:FF:A2:6B:DE:46:45:3F
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       06A7DBE3331A4B7FCBFAA05C8FF52BB1C4BD2C49
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38312e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:31 +0000
ROA not before:           Tue 01 Jul 2025 19:20:31 +0000
ROA not after:            Tue 30 Jun 2026 19:25:31 +0000
asID:                     18822
IP address blocks:        190.8.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a7:db:e3:33:1a:4b:7f:cb:fa:a0:5c:8f:f5:2b:b1:c4:bd:2c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:31 2025 GMT
            Not After : Jun 30 19:25:31 2026 GMT
        Subject: CN=DCBF83E40C2A72BE37996D9BBCFFA26BDE46453F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:cb:7f:a6:25:14:c0:35:1f:0c:e5:ef:cb:
                    e5:37:8c:64:4e:65:7d:cf:ff:9f:5d:84:96:d9:b8:
                    2a:00:20:4c:18:c2:3c:7b:b6:e3:5b:17:61:fa:a0:
                    5b:0d:58:63:1a:8a:9b:9e:07:68:75:45:e7:70:49:
                    8f:2a:9f:fd:77:99:e5:c3:6a:6c:f0:e7:49:9e:fa:
                    bd:22:3d:9e:7e:44:cd:0c:90:ba:f9:14:98:4a:6b:
                    a9:ac:36:be:11:c6:e2:cf:e2:63:8e:ce:0a:b3:87:
                    33:ff:5d:86:81:10:00:31:62:48:5c:1a:ad:11:ea:
                    b5:66:7b:ac:2a:0d:c4:ab:df:b9:3d:9d:3d:7d:71:
                    6e:52:1a:e7:47:96:ba:79:93:6e:21:f3:cc:92:a2:
                    d4:11:4e:e6:c3:b6:68:0a:55:98:07:00:d1:06:fe:
                    a0:b7:26:8f:dd:98:24:9f:2d:14:38:26:62:4c:2a:
                    57:32:e1:a3:28:6a:c4:4b:04:c0:37:53:4c:ab:4f:
                    f9:74:4f:a7:fe:4e:df:6d:d8:9f:f1:35:25:eb:9b:
                    0d:d6:41:f3:2e:d4:53:18:88:3f:7e:66:cd:3f:19:
                    3b:d9:bf:ec:8b:c0:da:95:3f:3f:55:96:d7:c6:a1:
                    ea:ae:89:0a:93:e3:69:ac:63:2c:4d:b3:7c:bc:f4:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BF:83:E4:0C:2A:72:BE:37:99:6D:9B:BC:FF:A2:6B:DE:46:45:3F
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38312e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:45:29:40:24:45:ae:f6:c3:59:44:07:ea:b6:50:0a:86:42:
         f2:84:ab:3e:95:f7:b0:69:f1:92:9c:d5:67:eb:b2:e0:df:93:
         18:e5:64:63:5c:a2:ec:71:0c:82:49:d5:89:f5:dc:cb:bc:58:
         f6:fa:e6:bc:3b:4b:39:fe:6b:b4:d2:e5:ae:ea:05:45:48:4a:
         95:6a:2e:64:21:38:62:9d:f5:8e:17:f2:fe:1d:79:b6:93:3a:
         72:0c:9d:e9:7d:32:45:cf:5f:6f:64:2a:68:33:ae:d4:ec:10:
         b2:4c:f4:68:6f:cf:85:e7:14:cf:62:1b:da:03:29:ad:5b:14:
         48:ef:56:d5:70:4a:79:7c:c8:47:aa:7a:1b:df:f1:11:14:a7:
         4d:0f:41:93:c6:05:57:4a:3f:cf:b2:12:27:0a:8f:9a:9f:77:
         96:3e:50:b4:98:52:23:49:29:e8:74:a6:73:4f:15:8b:cc:8d:
         83:b8:c3:ea:eb:f2:27:65:2a:41:dd:bd:46:27:eb:c5:fd:2e:
         b1:6a:d3:20:3f:9f:20:d6:c2:e4:48:8c:5a:e5:ae:76:f3:a1:
         8d:df:a0:79:fc:02:19:75:f4:1c:0a:4f:58:bc:c6:40:e9:32:
         9e:da:81:83:dc:da:18:d3:d1:45:82:a1:15:45:4c:c3:7e:4f:
         35:bd:8c:5c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUBqfb4zMaS3/L+qBcj/UrscS9LEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMzFaFw0yNjA2MzAxOTI1MzFaMDMxMTAvBgNV
BAMTKERDQkY4M0U0MEMyQTcyQkUzNzk5NkQ5QkJDRkZBMjZCREU0NjQ1M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcMt/piUUwDUfDOXvy+U3jGRO
ZX3P/59dhJbZuCoAIEwYwjx7tuNbF2H6oFsNWGMaipueB2h1RedwSY8qn/13meXD
amzw50me+r0iPZ5+RM0MkLr5FJhKa6msNr4RxuLP4mOOzgqzhzP/XYaBEAAxYkhc
Gq0R6rVme6wqDcSr37k9nT19cW5SGudHlrp5k24h88ySotQRTubDtmgKVZgHANEG
/qC3Jo/dmCSfLRQ4JmJMKlcy4aMoasRLBMA3U0yrT/l0T6f+Tt9t2J/xNSXrmw3W
QfMu1FMYiD9+Zs0/GTvZv+yLwNqVPz9VltfGoequiQqT42msYyxNs3y89IWhAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU3L+D5Awqcr43mW2bvP+ia95GRT8wHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzgyZTM4MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvghRMA0GCSqG
SIb3DQEBCwUAA4IBAQCQRSlAJEWu9sNZRAfqtlAKhkLyhKs+lfewafGSnNVn67Lg
35MY5WRjXKLscQyCSdWJ9dzLvFj2+ua8O0s5/mu00uWu6gVFSEqVai5kIThinfWO
F/L+HXm2kzpyDJ3pfTJFz19vZCpoM67U7BCyTPRob8+F5xTPYhvaAymtWxRI71bV
cEp5fMhHqnob3/ERFKdND0GTxgVXSj/PshInCo+an3eWPlC0mFIjSSnodKZzTxWL
zI2DuMPq6/InZSpB3b1GJ+vF/S6xatMgP58g1sLkSIxa5a5286GN36B5/AIZdfQc
Ck9YvMZA6TKe2oGD3NoY09FFgqEVRUzDfk81vYxc
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:40:29 2025 by rpki-client