Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33392e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e33392e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          eWF3zyufz318sfDqN4Ecd8TMz/MA6DEDc5zmxbIxg00=
Subject key identifier:   B6:2A:BF:43:2E:0A:95:F1:20:51:A9:49:D4:AB:AF:35:C9:56:14:C6
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       782A455EB0DADA329FFDB19F7D2FBD4382D69134
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33392e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:06 +0000
ROA not before:           Tue 01 Jul 2025 19:20:06 +0000
ROA not after:            Tue 30 Jun 2026 19:25:06 +0000
asID:                     18822
IP address blocks:        190.96.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2a:45:5e:b0:da:da:32:9f:fd:b1:9f:7d:2f:bd:43:82:d6:91:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:06 2025 GMT
            Not After : Jun 30 19:25:06 2026 GMT
        Subject: CN=B62ABF432E0A95F12051A949D4ABAF35C95614C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:ec:15:93:93:2c:b2:ac:af:9d:a6:3d:99:
                    32:24:e9:ba:ce:52:95:c1:6a:43:26:77:91:52:f4:
                    ca:53:b9:50:33:08:5c:e1:5b:42:ae:fc:5c:e2:1f:
                    f2:1f:9d:2d:e7:3b:fa:f4:5b:9e:b0:67:50:1e:e1:
                    c6:44:6c:7c:0b:f2:d7:40:4a:1c:8f:3c:88:af:f5:
                    b7:4c:d6:49:69:14:bc:eb:d2:88:2f:ae:05:08:a2:
                    a0:0e:40:f6:05:f7:6f:3e:ef:25:ec:e6:6c:f3:69:
                    b8:b7:7b:9f:cb:0f:11:70:10:37:45:36:36:20:47:
                    8a:6c:c4:31:16:74:fb:1d:d3:82:c1:3a:91:2c:1d:
                    d7:e4:58:a0:09:f1:a1:92:1d:b1:a0:3f:85:9c:df:
                    40:d7:30:ec:85:c1:c6:1a:57:41:c6:e6:39:6e:42:
                    d0:32:67:e2:12:92:ac:33:81:61:46:64:97:64:14:
                    9f:13:34:64:c7:85:e4:df:89:f7:82:de:8f:b4:dc:
                    28:78:73:fb:2b:09:2d:35:30:99:2e:80:d3:a0:b4:
                    12:73:da:f8:35:4a:b9:05:fe:a7:f1:6b:5b:98:5a:
                    7a:7a:cf:50:5a:a8:f4:e0:db:5d:59:06:d7:83:16:
                    0e:5f:7a:aa:60:d2:2d:09:3a:11:31:6e:75:b3:29:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2A:BF:43:2E:0A:95:F1:20:51:A9:49:D4:AB:AF:35:C9:56:14:C6
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e33392e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:df:e4:6b:a5:49:40:6a:7f:35:85:8f:55:80:53:64:5a:
         94:bf:29:11:c4:27:a0:14:83:cb:22:16:90:66:e8:a2:91:0d:
         aa:c8:1c:fc:f6:66:cd:9c:fc:2d:ac:4b:95:32:45:6c:1c:06:
         b5:3f:b7:f8:a7:02:2a:20:a1:8c:a0:88:78:98:38:39:df:6d:
         c7:a7:e9:e4:65:1d:eb:67:47:a9:1d:e5:bc:9a:48:43:ec:65:
         d8:cb:c5:17:61:e6:16:4b:b9:1b:f4:15:a8:2e:b9:a7:ef:56:
         2c:29:e6:3c:72:66:88:f6:e3:e0:9c:40:f3:42:79:ea:04:48:
         42:17:83:aa:65:f6:a0:e8:cb:c9:c7:ea:84:5f:72:b4:92:be:
         35:7d:85:eb:5f:a8:b2:cb:d9:31:1b:05:99:cf:e1:71:e0:e0:
         4d:7b:16:02:7e:ee:c8:f4:2c:bc:78:75:47:88:6e:2f:b2:77:
         c3:ff:a2:d1:6e:c3:e7:cd:e3:9d:8d:58:cf:2e:f5:1e:e7:4f:
         21:68:a0:ed:53:76:47:f8:e6:47:e7:37:6f:01:3f:9c:54:b2:
         c1:d4:c6:e2:65:78:f7:5a:99:2d:ea:15:54:d6:b8:68:32:e4:
         23:97:90:86:de:a5:9d:83:ac:f1:47:3e:a0:ad:7d:74:8c:5f:
         fe:fb:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:35:12 2025 by rpki-client