Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32312e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e32312e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          rfU5nx4JmfO3H1+gqRcPPHZpp/GPw/Gt0BkovVed4KY=
Subject key identifier:   9F:64:76:4E:BA:27:B8:4E:D5:D6:95:9B:E8:D6:24:32:61:05:43:77
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       7FF33937412F0AB12BD6F524E9D9375415D646DB
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32312e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:25 +0000
ROA not before:           Tue 01 Jul 2025 19:20:25 +0000
ROA not after:            Tue 30 Jun 2026 19:25:25 +0000
asID:                     18822
IP address blocks:        190.96.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f3:39:37:41:2f:0a:b1:2b:d6:f5:24:e9:d9:37:54:15:d6:46:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:25 2025 GMT
            Not After : Jun 30 19:25:25 2026 GMT
        Subject: CN=9F64764EBA27B84ED5D6959BE8D6243261054377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:da:4f:59:8d:57:26:87:2d:ee:c9:e6:e3:
                    5f:6f:86:e8:85:a8:4d:cc:7a:f2:04:81:94:bc:4b:
                    32:eb:2c:55:af:00:f7:3c:b6:68:8e:9d:be:be:66:
                    df:05:4c:f0:fb:60:a0:13:8f:3b:73:3d:88:b1:cf:
                    e8:89:e8:b0:db:b7:d2:0e:a2:2a:26:fb:2c:5f:d1:
                    ef:21:7a:4f:30:68:77:2b:af:53:e1:92:14:d5:3a:
                    e7:fe:dc:77:4e:18:1a:8b:05:73:2f:5d:4f:3f:12:
                    07:e7:65:06:0d:b4:ac:25:7b:79:34:3c:b5:20:fb:
                    4d:b4:af:c8:c0:5c:80:05:9a:ca:b6:ac:2a:63:9c:
                    5b:2d:80:0f:36:cd:d5:b4:df:7b:c7:d0:f2:65:68:
                    02:c3:59:42:cd:4b:dc:11:db:64:b0:06:fd:2e:76:
                    c2:da:44:5c:91:58:88:24:89:3c:73:7f:1c:65:cd:
                    01:81:50:e5:04:d9:83:5c:8f:af:e7:9d:2e:75:d8:
                    27:a3:1c:d9:7f:00:1e:43:05:f3:b4:cc:b1:10:5c:
                    cb:55:09:e1:21:4e:5d:67:c2:cf:6b:0d:7b:e3:4b:
                    97:96:47:94:25:fb:18:8f:78:9e:ab:f8:4b:6a:79:
                    03:f0:eb:55:34:ea:c1:14:05:84:27:75:49:5a:e2:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:76:4E:BA:27:B8:4E:D5:D6:95:9B:E8:D6:24:32:61:05:43:77
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32312e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c2:28:59:1d:95:66:f4:b4:b9:f3:e3:7d:10:cc:13:9f:a8:
         e6:4d:61:ac:6d:a1:2f:f2:5e:a8:26:59:54:eb:e6:d5:43:18:
         df:47:e9:67:07:45:15:3e:33:94:83:4f:1e:37:e5:92:e7:f9:
         ae:f6:a5:22:60:84:af:ab:62:67:9d:99:75:12:dc:20:16:18:
         83:c2:8e:90:98:ae:81:d4:dc:cf:cb:f0:64:b0:ee:d6:ea:c8:
         94:f5:33:1b:8c:36:8c:31:aa:3c:5f:f4:6d:d4:95:18:8b:b4:
         af:07:29:eb:ca:bf:97:d0:80:a1:02:35:30:5e:b0:33:71:67:
         24:de:6f:b0:18:29:c1:f1:79:32:0c:cd:51:e9:59:7b:2d:52:
         30:cc:48:24:16:85:d7:6f:c1:5a:24:1a:30:4f:4d:0e:e6:86:
         a5:f5:a7:68:93:8d:93:d9:69:f4:eb:61:ca:44:29:e1:bf:5f:
         b2:aa:8f:22:ab:1f:a8:23:9b:d8:fd:eb:87:ff:5b:4a:8e:ef:
         f7:54:e2:46:e0:b3:bb:88:21:a1:a0:03:b9:77:c8:6b:86:7b:
         79:41:20:57:bf:fc:69:7f:c7:82:f2:10:ab:a0:97:1f:0b:22:
         cd:1c:f9:af:10:dd:11:80:33:c7:bf:35:ef:75:82:72:9e:87:
         cf:aa:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:33:06 2025 by rpki-client