Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38362e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e38362e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          /2iu/6cxvvHSYukdbs5uU3plah427aORHQTmTjeC5kw=
Subject key identifier:   D1:3C:ED:B9:FC:9F:F9:CA:21:63:A1:C7:2B:5B:25:2E:95:48:FE:69
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       28A086B2DF7CAD42D6656229E09DAD5CCFE30F88
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38362e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:32 +0000
ROA not before:           Tue 01 Jul 2025 19:20:32 +0000
ROA not after:            Tue 30 Jun 2026 19:25:32 +0000
asID:                     18822
IP address blocks:        190.8.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a0:86:b2:df:7c:ad:42:d6:65:62:29:e0:9d:ad:5c:cf:e3:0f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:32 2025 GMT
            Not After : Jun 30 19:25:32 2026 GMT
        Subject: CN=D13CEDB9FC9FF9CA2163A1C72B5B252E9548FE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:d4:6a:0c:a2:21:b9:f3:ee:d0:fb:7f:3c:
                    a1:c7:6b:03:ca:fa:47:0f:b2:e6:10:c4:fd:8c:ef:
                    a4:4f:71:99:90:bc:97:fc:0f:31:df:6d:51:91:c3:
                    c8:48:b6:ac:4a:c1:3d:f9:2e:90:54:2a:df:ae:74:
                    e2:59:00:ea:dc:38:c8:92:83:72:bd:a3:5a:26:1f:
                    de:6e:d7:7d:42:d0:ad:b5:c4:5c:c7:0a:3d:b9:60:
                    15:f6:9d:2a:3c:fb:b5:cc:74:fe:91:6b:a1:9f:aa:
                    f2:b4:7a:bf:bc:06:13:63:0e:ba:b7:9a:d4:e0:50:
                    20:8d:e4:80:02:1d:0d:ce:69:d6:5a:85:e9:98:7f:
                    57:73:d3:0d:70:c8:b3:30:1e:94:b0:48:6a:58:22:
                    50:03:14:17:98:35:f9:e6:8b:7a:4f:c1:65:cb:94:
                    02:88:64:98:93:6d:70:dd:89:d5:83:1b:74:21:85:
                    e0:52:27:18:15:fb:38:2f:01:8f:a9:c0:06:41:4a:
                    4b:cc:92:d1:71:49:65:1a:29:65:a8:31:ab:c8:8b:
                    4b:1d:1b:c5:55:4a:a6:40:35:37:84:d7:43:c6:14:
                    05:73:c1:fc:5b:9c:e0:82:22:36:29:22:db:b7:ef:
                    e5:9f:49:95:db:7c:9c:cb:49:96:de:29:6c:10:d0:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3C:ED:B9:FC:9F:F9:CA:21:63:A1:C7:2B:5B:25:2E:95:48:FE:69
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e38362e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:57:ab:84:27:c6:40:8c:70:42:e2:4d:55:64:63:9c:ca:
         51:d7:42:e7:be:46:96:09:56:f9:ba:77:8e:6c:74:eb:36:d5:
         1b:75:86:3d:e4:f9:01:99:9c:67:23:bd:cd:81:3f:65:3e:05:
         21:ca:92:b0:04:6f:95:77:0a:b3:4c:a6:cb:c6:d8:1e:f6:fa:
         11:93:b9:f0:66:07:30:a4:76:46:b7:43:5d:da:7f:ea:ca:68:
         33:3b:37:d1:6b:bc:3c:b1:b1:65:39:5e:89:9e:7f:38:39:8c:
         b8:35:9c:2b:0f:b8:56:b2:b3:96:bc:0f:47:22:f7:cc:b4:25:
         da:b3:26:24:30:31:88:6f:37:c5:e8:39:79:12:74:7a:1e:13:
         5c:c9:00:88:3c:9f:44:f1:6e:2e:9c:4c:75:45:25:d8:4c:71:
         85:fa:c2:0a:13:21:de:1c:8c:79:ba:9d:cf:a1:8d:4f:d8:e1:
         8e:a7:64:50:21:a0:75:07:03:35:53:46:49:e7:76:2b:d4:05:
         f5:e1:2b:82:48:6e:05:d2:90:40:24:1e:51:03:71:25:8d:d5:
         64:2a:8f:0c:b1:6a:54:13:59:25:2f:be:79:89:8c:b1:36:46:
         65:02:05:41:0e:ed:1f:d6:ab:eb:61:dd:82:11:96:1b:f1:99:
         de:b9:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:36:52 2025 by rpki-client