Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3139322e302f31382d3234203d3e203134323539.roa
File:                     3139302e39382e3139322e302f31382d3234203d3e203134323539.roa (raw, json)
Hash identifier:          Ls5BmVrX/MIKfPauWjytjdGcPLzJAjHf5xJ2/nYC11c=
Subject key identifier:   B8:56:0C:46:CD:6B:9D:DC:FB:D3:46:C6:D2:12:91:DB:7A:18:85:76
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       19C7DEB83B77634A5CF5ABD62F647487DF071AD1
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3139322e302f31382d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 19:25:04 +0000
ROA not before:           Tue 01 Jul 2025 19:20:04 +0000
ROA not after:            Tue 30 Jun 2026 19:25:04 +0000
asID:                     14259
IP address blocks:        190.98.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c7:de:b8:3b:77:63:4a:5c:f5:ab:d6:2f:64:74:87:df:07:1a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:04 2025 GMT
            Not After : Jun 30 19:25:04 2026 GMT
        Subject: CN=B8560C46CD6B9DDCFBD346C6D21291DB7A188576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:1d:25:e5:47:9a:c6:67:60:25:0d:06:fa:
                    db:bd:76:30:68:44:32:99:eb:4e:67:01:13:29:56:
                    85:70:b2:18:8b:dc:b1:5a:3b:9b:1c:9d:12:c8:4e:
                    1c:12:bd:24:c4:55:c1:ad:37:94:63:fe:6e:dc:e9:
                    d9:86:bd:a9:06:ad:34:a5:9a:be:da:f4:73:36:5f:
                    f1:a5:c5:81:3c:12:6b:b0:bb:bc:06:11:a7:7c:0a:
                    0a:79:04:d1:37:13:66:29:68:29:b9:e3:c5:fb:d2:
                    4d:1f:cc:42:3a:80:4e:49:37:4e:d9:e1:b1:c5:64:
                    ed:b0:47:33:cf:a8:e5:03:84:d2:89:55:69:75:3e:
                    0e:c1:2b:3c:6f:d4:50:06:5f:9b:c7:d1:bf:74:bc:
                    56:26:0e:1d:ee:1f:fc:71:1f:f7:16:c9:29:5e:ba:
                    fa:61:de:7d:7a:11:73:fc:0b:0e:7a:9f:31:e6:24:
                    ac:d3:f3:63:1e:47:f3:0e:e7:9f:88:f8:05:4e:ce:
                    a5:40:e9:dc:a9:a6:94:9f:6f:b3:62:ab:ea:c2:8e:
                    bb:90:47:ea:6e:2d:2d:b1:fc:6f:da:59:ae:8c:c8:
                    c0:f5:ec:5c:01:44:79:0b:23:9f:25:03:a9:e5:2e:
                    fc:af:3c:af:17:1a:c3:e8:e3:14:a2:03:f9:da:59:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:56:0C:46:CD:6B:9D:DC:FB:D3:46:C6:D2:12:91:DB:7A:18:85:76
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39382e3139322e302f31382d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:45:47:24:4c:0d:ab:a3:20:2b:c4:a6:8c:4f:6f:c9:47:
         78:24:d3:3d:77:22:86:e8:67:e8:47:14:c6:30:95:18:c2:29:
         c9:a2:f8:fa:df:6e:bc:21:6e:40:73:06:f0:eb:f7:1e:14:62:
         8d:c4:74:c1:d8:38:68:c4:17:b2:22:94:b7:17:90:5e:b3:4c:
         11:c1:a0:63:ed:03:78:e7:1e:2d:56:2e:a3:b0:0e:4d:e8:2f:
         69:48:87:7c:d4:3c:45:a6:bc:ac:f1:14:a9:0a:e6:c2:3b:f2:
         3c:e0:e0:a8:80:dd:ec:de:86:b1:7d:d4:fb:d2:36:27:f0:c0:
         bb:36:74:d6:86:98:1d:b9:be:47:01:52:8c:7c:52:26:39:d8:
         1e:99:f9:a3:59:55:b2:05:29:e2:a5:c3:6f:9b:6b:40:9c:0c:
         88:25:f3:92:72:f7:f3:0e:02:cf:55:18:27:46:6d:99:ec:04:
         89:62:bd:39:68:c3:7f:c1:dc:0d:22:34:0d:57:51:cf:35:86:
         d1:31:ff:4b:61:23:70:de:ee:31:9d:18:b1:24:47:21:93:e0:
         12:a2:fb:fe:41:93:b4:a8:41:11:a6:98:f7:50:94:59:f6:4e:
         dc:7c:ec:87:da:76:d9:51:13:e1:7d:53:f5:da:4b:d0:8e:5c:
         d9:0e:28:b8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGcfeuDt3Y0pc9avWL2R0h98HGtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMDRaFw0yNjA2MzAxOTI1MDRaMDMxMTAvBgNV
BAMTKEI4NTYwQzQ2Q0Q2QjlERENGQkQzNDZDNkQyMTI5MURCN0ExODg1NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXB0l5UeaxmdgJQ0G+tu9djBo
RDKZ605nARMpVoVwshiL3LFaO5scnRLIThwSvSTEVcGtN5Rj/m7c6dmGvakGrTSl
mr7a9HM2X/GlxYE8Emuwu7wGEad8Cgp5BNE3E2YpaCm548X70k0fzEI6gE5JN07Z
4bHFZO2wRzPPqOUDhNKJVWl1Pg7BKzxv1FAGX5vH0b90vFYmDh3uH/xxH/cWySle
uvph3n16EXP8Cw56nzHmJKzT82MeR/MO55+I+AVOzqVA6dypppSfb7Niq+rCjruQ
R+puLS2x/G/aWa6MyMD17FwBRHkLI58lA6nlLvyvPK8XGsPo4xSiA/naWTDdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuFYMRs1rndz700bG0hKR23oYhXYwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzkzODJlMzEzOTMyMmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNDMyMzUzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr5iwDAN
BgkqhkiG9w0BAQsFAAOCAQEAN45FRyRMDaujICvEpoxPb8lHeCTTPXcihuhn6EcU
xjCVGMIpyaL4+t9uvCFuQHMG8Ov3HhRijcR0wdg4aMQXsiKUtxeQXrNMEcGgY+0D
eOceLVYuo7AOTegvaUiHfNQ8Raa8rPEUqQrmwjvyPODgqIDd7N6GsX3U+9I2J/DA
uzZ01oaYHbm+RwFSjHxSJjnYHpn5o1lVsgUp4qXDb5trQJwMiCXzknL38w4Cz1UY
J0ZtmewEiWK9OWjDf8HcDSI0DVdRzzWG0TH/S2EjcN7uMZ0YsSRHIZPgEqL7/kGT
tKhBEaaY91CUWfZO3Hzsh9p22VET4X1T9dpL0I5c2Q4ouA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:31:18 2025 by rpki-client