Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33362e302f32332d3234203d3e203138383232.roa
File:                     3139302e39362e33362e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          2NlW8UEbatsQ+QpHK5GVCi9Hu+sBHJARZMYER8mtLwE=
Subject key identifier:   82:50:E3:E4:50:01:F1:4C:B9:CA:70:1D:EF:58:D7:45:8C:41:84:6D
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       1F63C02F9BF7A1B7D033A723316ED68E565DC1F6
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33362e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:19 +0000
ROA not before:           Tue 01 Jul 2025 19:20:19 +0000
ROA not after:            Tue 30 Jun 2026 19:25:19 +0000
asID:                     18822
IP address blocks:        190.96.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:63:c0:2f:9b:f7:a1:b7:d0:33:a7:23:31:6e:d6:8e:56:5d:c1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:19 2025 GMT
            Not After : Jun 30 19:25:19 2026 GMT
        Subject: CN=8250E3E45001F14CB9CA701DEF58D7458C41846D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:3a:a0:2d:56:da:69:74:22:f8:6f:83:bc:
                    f8:f7:a9:cb:be:b1:ac:31:2a:b2:03:a7:f7:af:c1:
                    c4:6c:93:5b:75:17:26:0d:38:d1:01:d9:4d:b1:97:
                    72:37:a6:0e:6c:1f:67:04:b4:4b:ac:04:c3:97:ef:
                    76:70:c1:60:a1:fd:73:82:ca:b5:05:01:d9:33:84:
                    5d:2c:09:f4:4c:a4:82:31:e1:ec:cd:66:ad:5b:8c:
                    27:ce:88:72:55:c6:c6:4e:0b:7b:15:da:44:aa:14:
                    52:e0:63:ff:cb:52:0e:17:56:c4:86:e4:21:58:16:
                    05:83:ef:a0:7a:1d:e2:99:0e:be:93:7e:2f:a2:2b:
                    8e:d8:65:9c:18:d0:c4:54:e4:c9:3d:b3:56:1d:09:
                    0b:40:58:90:b8:6e:0a:2c:f8:c9:d2:b3:3f:0c:1d:
                    2b:eb:cd:e3:4c:90:46:3a:ed:c3:59:7b:48:40:86:
                    78:22:65:d7:a5:f9:aa:83:c5:ff:dc:96:bf:62:0c:
                    01:c7:50:e1:ed:34:b8:09:6d:9a:4b:d3:4d:eb:37:
                    c4:ff:ff:51:ed:75:f0:5e:38:9b:b3:92:1c:73:1a:
                    54:a0:f5:91:02:cf:8a:c7:83:a9:d6:9e:9a:5c:21:
                    91:6f:f8:a1:e9:42:15:25:cf:fd:da:fd:d0:9d:d0:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:50:E3:E4:50:01:F1:4C:B9:CA:70:1D:EF:58:D7:45:8C:41:84:6D
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33362e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:20:e8:bb:99:b5:b6:c8:fc:8c:35:14:6a:45:ef:fb:9a:47:
         f8:37:66:ef:04:78:e7:a4:9f:0a:73:46:4a:22:cb:f3:69:a1:
         9d:11:8f:b3:3a:bb:22:a8:f5:c6:48:4f:32:76:50:3d:31:f8:
         0e:8f:10:46:31:a8:af:40:25:6e:69:0d:36:44:82:30:cb:ad:
         6c:74:33:f1:94:66:56:ea:81:f2:78:02:21:d3:c5:04:6b:02:
         4d:2b:36:7f:92:25:cf:48:0a:e4:80:b1:d8:aa:a6:83:e1:a7:
         3f:ae:ea:8e:80:fc:e0:86:35:e0:4d:0e:ba:cc:fc:95:c7:65:
         27:5b:9c:8a:cd:6f:17:20:ec:aa:d3:fd:95:7f:ff:74:4b:91:
         46:69:f4:c5:89:c7:d2:e5:eb:72:c2:e3:b7:fe:81:16:4a:cb:
         23:6d:00:29:0b:2d:3b:c9:a6:4d:ed:f9:cd:11:72:14:4a:0d:
         ed:d8:81:a4:3e:23:c2:7a:7f:0c:18:58:9b:63:29:6c:75:a4:
         3f:82:38:88:29:d1:72:4d:8e:bd:73:48:22:1c:dc:d5:ab:c1:
         77:f3:e8:b8:06:19:89:97:74:f3:ec:ed:2a:5b:7d:a6:9e:83:
         41:b7:d4:c2:09:9c:df:60:52:2c:75:7f:f2:d0:df:43:6f:3e:
         7f:a8:f5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:35:54 2025 by rpki-client