Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32382e302f32332d3234203d3e203138383232.roa
File:                     3139302e39362e32382e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          p+lgugdWoYvSUW0+fDwprgGCYRH5EYF3UwO6b9HiK6E=
Subject key identifier:   26:F7:6F:C2:E7:17:5A:4E:10:1E:9A:34:20:60:3D:F4:2E:01:4E:22
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4B38A313536925560EF1AE5806B2370656A0992D
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32382e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:32 +0000
ROA not before:           Tue 01 Jul 2025 19:20:32 +0000
ROA not after:            Tue 30 Jun 2026 19:25:32 +0000
asID:                     18822
IP address blocks:        190.96.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:38:a3:13:53:69:25:56:0e:f1:ae:58:06:b2:37:06:56:a0:99:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:32 2025 GMT
            Not After : Jun 30 19:25:32 2026 GMT
        Subject: CN=26F76FC2E7175A4E101E9A3420603DF42E014E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:d7:12:a8:3a:79:00:cf:34:d4:96:99:c4:
                    b5:c6:db:f6:18:89:0d:78:6d:8a:10:fc:00:5b:cb:
                    33:d1:8c:f0:0a:a0:89:1f:71:24:e8:24:8e:af:8b:
                    c2:58:50:3e:46:2b:da:1f:8f:18:4d:4d:18:bb:41:
                    41:d1:14:7e:a7:d6:29:9d:0b:00:46:8a:45:f5:4c:
                    28:83:e1:2c:52:4f:86:09:b3:df:62:78:ec:51:8d:
                    0e:b6:44:91:28:aa:8a:1b:08:06:36:97:39:c6:57:
                    d9:d6:5d:ae:20:f3:97:37:9e:31:e0:dd:bc:3c:a5:
                    fb:25:cc:cf:d0:ff:ba:20:51:76:f4:06:15:e8:5e:
                    c7:d6:41:38:75:84:7d:c2:2e:58:65:ca:55:0f:00:
                    22:1d:68:1e:d3:76:7c:d8:b4:c9:7b:19:b5:c9:5e:
                    3d:ce:64:b7:31:86:30:6a:98:7f:81:c8:a2:6b:fe:
                    51:e6:4b:ac:e0:03:fa:91:02:d2:0a:e5:72:47:49:
                    0c:f6:58:1f:96:03:f3:39:02:61:f1:9f:22:6c:cb:
                    3c:c6:01:f0:c9:4e:fe:d1:13:17:bd:2b:c9:c0:41:
                    99:fc:d5:a3:db:be:56:68:fe:d0:31:7c:da:0b:87:
                    92:f5:2d:47:54:f6:92:9e:c6:0b:8a:9a:db:74:1c:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:6F:C2:E7:17:5A:4E:10:1E:9A:34:20:60:3D:F4:2E:01:4E:22
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e32382e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:8d:db:ac:83:f1:97:1e:64:2a:35:28:2b:09:de:b0:8b:d6:
         1b:c7:28:aa:b2:55:d6:c1:35:21:3e:77:2b:1e:d7:64:91:52:
         83:71:f0:64:3e:87:74:e1:ce:41:07:63:4b:15:af:e7:72:b2:
         03:3b:d2:75:8b:97:64:b5:f6:f4:c8:e5:b5:13:7c:3f:1b:39:
         f9:34:01:e9:c8:66:7a:9a:ca:d3:12:20:9f:a3:e6:e8:7a:fe:
         8e:19:fb:b2:f9:88:6f:f0:75:cf:00:86:00:d6:16:20:91:f7:
         ac:e0:3f:34:d1:2f:a3:fc:e0:49:34:99:6b:9e:85:20:b1:49:
         30:f1:28:bf:94:93:86:e2:ea:37:0a:19:35:6b:5b:87:4d:1f:
         bd:51:86:77:bc:f6:2c:c3:ed:f1:9f:b1:fc:93:d8:2d:40:bd:
         0a:1c:f0:00:5f:31:b9:49:25:84:5b:53:32:2f:d8:5d:8b:27:
         4d:aa:15:f8:fc:70:ec:c1:2d:ab:07:1e:79:6e:39:dd:a5:1a:
         b4:5b:10:00:04:47:d5:be:20:a2:5d:17:01:89:9b:c5:c0:b6:
         4e:17:98:03:95:e8:56:7d:15:24:af:81:af:a1:80:da:c1:0b:
         bc:5a:c9:9f:2e:2c:13:a6:0c:e9:63:0b:c2:71:c0:f2:41:83:
         27:9a:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:37:37 2025 by rpki-client