Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e312e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e312e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          T+ZxEEx1a79C++TsxblH9W44Df0ZJXJYLyi92+qv76s=
Subject key identifier:   6F:B6:8B:15:BA:15:F1:1E:23:6E:05:98:74:83:35:A5:64:30:8D:04
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       506B856D907E79E75042C0248372CB4943FEB64D
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e312e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:09 +0000
ROA not before:           Tue 01 Jul 2025 19:20:09 +0000
ROA not after:            Tue 30 Jun 2026 19:25:09 +0000
asID:                     18822
IP address blocks:        190.96.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6b:85:6d:90:7e:79:e7:50:42:c0:24:83:72:cb:49:43:fe:b6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:09 2025 GMT
            Not After : Jun 30 19:25:09 2026 GMT
        Subject: CN=6FB68B15BA15F11E236E0598748335A564308D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:50:78:3f:0c:dd:e7:3e:fa:55:98:8a:e1:
                    5a:f0:e9:36:14:f6:ae:31:8d:7f:46:94:f0:af:e6:
                    ff:42:8c:d7:95:b1:eb:c4:ab:f7:1b:67:a9:0d:a7:
                    bb:0f:f3:37:ef:8b:b5:84:85:5d:59:b7:2e:00:e2:
                    69:3b:82:58:10:01:ce:1a:82:e4:bc:7b:ac:a2:f8:
                    95:ba:16:78:73:c3:5b:bb:8b:c3:e1:68:55:f2:19:
                    67:d7:b2:6c:d9:51:13:7f:77:ab:98:22:0c:b7:0c:
                    9d:49:6a:bc:47:f1:e6:c8:11:53:bd:15:83:55:03:
                    c7:f0:fb:2c:c7:08:22:d1:37:bf:cd:e0:63:de:34:
                    45:22:a7:bd:79:6d:2f:75:ea:cd:15:ce:24:02:83:
                    82:50:e5:f4:c5:bf:44:18:c8:e0:1e:ed:24:df:ba:
                    8b:8a:6f:0b:c1:28:59:a1:df:42:bb:6b:60:b3:04:
                    be:e9:90:bc:33:0f:ac:dd:9f:3d:ed:b4:26:35:a9:
                    27:a9:56:31:6b:52:23:ce:52:92:b6:20:aa:99:dc:
                    cd:bf:83:7b:18:c4:ca:3b:02:ea:cb:cc:26:b7:d0:
                    6f:9d:d7:85:ea:9b:56:29:6d:7a:c8:74:02:4d:75:
                    01:59:8b:05:00:96:dc:23:e5:e4:00:e6:e7:93:82:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:8B:15:BA:15:F1:1E:23:6E:05:98:74:83:35:A5:64:30:8D:04
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e312e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:9a:e3:65:67:7b:b3:ee:96:c5:be:c5:e1:cb:ad:ef:8f:
         35:ed:be:87:cb:c0:90:c8:f1:5b:66:e0:dd:4b:59:76:dd:0b:
         cc:32:a6:ff:7b:7b:da:ee:0a:f6:d1:42:d8:dd:4a:21:50:8c:
         fe:a4:50:8c:fb:8b:c3:22:b2:71:d1:02:ab:60:34:bd:8f:d0:
         ee:d3:51:14:86:fd:cf:90:2a:14:75:e1:2d:ef:9d:f3:e4:d0:
         6d:aa:8d:5a:a7:23:85:32:bb:eb:e2:2c:cb:87:39:7f:f7:60:
         78:02:aa:a4:91:bf:63:43:eb:2a:f2:51:6b:ea:a9:db:ae:ac:
         32:d4:7b:cd:6e:cd:2e:3f:06:3b:b9:9a:8c:2a:ac:a0:eb:b8:
         22:0e:6b:24:66:37:89:d5:66:60:a5:6b:b1:02:11:e5:5e:39:
         06:cb:a9:61:e7:ff:7e:d8:6b:ab:08:d4:15:83:bf:b4:87:a5:
         88:41:47:dc:11:11:b8:38:03:5d:ff:55:21:51:9f:f4:20:ff:
         a0:bc:0b:a2:0b:80:08:47:25:74:3e:b0:f9:ab:9d:e7:b0:6c:
         7c:ca:22:cd:72:9d:93:57:55:db:50:53:a9:01:b5:9b:1e:fc:
         7f:46:02:6a:c5:34:99:7a:40:28:a1:ed:fe:2d:d2:63:c4:e5:
         d8:27:65:12
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUUGuFbZB+eedQQsAkg3LLSUP+tk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMDlaFw0yNjA2MzAxOTI1MDlaMDMxMTAvBgNV
BAMTKDZGQjY4QjE1QkExNUYxMUUyMzZFMDU5ODc0ODMzNUE1NjQzMDhEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAVB4Pwzd5z76VZiK4Vrw6TYU
9q4xjX9GlPCv5v9CjNeVsevEq/cbZ6kNp7sP8zfvi7WEhV1Zty4A4mk7glgQAc4a
guS8e6yi+JW6Fnhzw1u7i8PhaFXyGWfXsmzZURN/d6uYIgy3DJ1JarxH8ebIEVO9
FYNVA8fw+yzHCCLRN7/N4GPeNEUip715bS916s0VziQCg4JQ5fTFv0QYyOAe7STf
uouKbwvBKFmh30K7a2CzBL7pkLwzD6zdnz3ttCY1qSepVjFrUiPOUpK2IKqZ3M2/
g3sYxMo7AurLzCa30G+d14Xqm1YpbXrIdAJNdQFZiwUAltwj5eQA5ueTguh5AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUb7aLFboV8R4jbgWYdIM1pWQwjQQwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzkzNjJlMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmABMA0GCSqG
SIb3DQEBCwUAA4IBAQCT65rjZWd7s+6Wxb7F4cut74817b6Hy8CQyPFbZuDdS1l2
3QvMMqb/e3va7gr20ULY3UohUIz+pFCM+4vDIrJx0QKrYDS9j9Du01EUhv3PkCoU
deEt753z5NBtqo1apyOFMrvr4izLhzl/92B4Aqqkkb9jQ+sq8lFr6qnbrqwy1HvN
bs0uPwY7uZqMKqyg67giDmskZjeJ1WZgpWuxAhHlXjkGy6lh5/9+2GurCNQVg7+0
h6WIQUfcERG4OANd/1UhUZ/0IP+gvAuiC4AIRyV0PrD5q53nsGx8yiLNcp2TV1Xb
UFOpAbWbHvx/RgJqxTSZekAooe3+LdJjxOXYJ2US
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:35:15 2025 by rpki-client