Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39382e302f32332d3234203d3e203138383232.roa
File:                     3139302e382e39382e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          /NF5yuze5wNrg0rNtHAnCHNOeghGi9CR77qPZa2+DI8=
Subject key identifier:   24:76:F5:E8:0C:78:31:8A:5F:15:72:4C:35:32:19:24:3B:0E:FA:54
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       530DFB3A98C2CFA2D39A99FCA44D079580C438B6
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39382e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:18 +0000
ROA not before:           Tue 01 Jul 2025 19:20:18 +0000
ROA not after:            Tue 30 Jun 2026 19:25:18 +0000
asID:                     18822
IP address blocks:        190.8.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0d:fb:3a:98:c2:cf:a2:d3:9a:99:fc:a4:4d:07:95:80:c4:38:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:18 2025 GMT
            Not After : Jun 30 19:25:18 2026 GMT
        Subject: CN=2476F5E80C78318A5F15724C353219243B0EFA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:26:e9:59:ba:3f:32:53:6b:6a:05:4e:2f:
                    c3:81:4c:2e:7f:f2:34:79:73:76:2c:fb:96:5b:1a:
                    cc:39:22:0a:bc:ca:12:94:76:41:9a:de:69:20:ef:
                    a3:5f:6c:b1:cb:6b:7d:6a:12:65:3b:7d:8a:83:64:
                    0f:d1:ee:d7:d5:87:67:e4:9b:ed:45:dd:a8:70:63:
                    dc:ad:86:70:1e:fe:27:35:dd:75:d2:5b:c5:e5:86:
                    02:93:83:0b:63:43:ef:2f:32:66:c9:e8:de:21:48:
                    16:83:99:84:36:e6:d6:08:4e:94:3f:97:a1:e6:bf:
                    4b:46:e9:5d:fb:82:d3:61:d2:36:07:39:93:80:bc:
                    38:5f:e9:97:64:f1:d3:3b:87:bc:44:08:05:1c:76:
                    d7:68:a9:79:d1:44:56:36:ea:66:7f:ec:4b:25:9e:
                    c7:5a:d7:03:14:37:75:97:fe:68:90:90:21:f7:ad:
                    6a:5a:38:f4:75:b2:9a:cc:23:20:5e:0a:b0:c7:1c:
                    84:8e:79:21:62:e6:2f:cb:e2:b4:5e:d9:86:2d:70:
                    c3:a8:b4:02:79:97:1e:3a:3a:62:1e:9e:03:3a:e7:
                    fd:2e:33:dc:f1:88:17:3b:8e:0c:58:4a:d9:69:60:
                    d5:0a:21:0f:16:69:9a:6d:85:fb:e4:2a:91:85:78:
                    3b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:F5:E8:0C:78:31:8A:5F:15:72:4C:35:32:19:24:3B:0E:FA:54
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39382e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:59:26:46:21:5d:6e:20:ad:22:66:79:7e:31:ab:39:16:
         93:ea:8a:79:06:c4:d8:f2:79:73:11:6e:1d:39:bc:4b:57:0a:
         09:04:7e:b5:c1:63:2c:79:59:68:66:b3:08:f1:fb:a6:2c:c5:
         d5:8a:17:92:a3:5e:88:12:05:5b:2d:f9:41:b2:83:25:c7:11:
         a3:f4:54:dc:9c:df:59:ff:24:f7:5f:be:54:bb:ea:93:a8:22:
         11:33:55:3d:7f:bc:4d:3f:e5:93:78:af:4a:c6:53:7d:fc:25:
         78:55:de:21:be:54:75:65:60:74:8a:9e:3b:eb:b2:6c:2f:9d:
         28:6a:f6:18:02:75:13:de:38:a5:74:fa:4a:2c:6c:d0:4d:a2:
         a7:94:f0:56:a4:de:8f:1f:42:75:a9:fc:dc:27:49:e9:e8:8f:
         ce:2e:95:ef:8c:77:82:55:4e:01:06:28:e3:45:e1:89:22:60:
         78:f5:90:c5:d3:67:8e:ed:32:9f:98:ad:ef:84:54:33:a0:64:
         48:24:aa:e1:05:a4:b4:6e:4f:4d:22:51:de:24:9c:41:fb:22:
         05:00:8b:6c:7f:19:e5:f8:ac:5b:f3:fc:4a:7e:9a:57:5e:16:
         14:58:f0:c1:f2:8a:57:d7:c4:f1:65:0f:bb:02:8a:8f:f0:82:
         1f:90:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:42:49 2025 by rpki-client