Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3138312e3139302e302e302f31362d3136203d3e203134323539.roa
File:                     3138312e3139302e302e302f31362d3136203d3e203134323539.roa (raw, json)
Hash identifier:          qJiaXeU4ptsAvPXvaOp6fJO3oKYT81yPJgocOuLw+8A=
Subject key identifier:   78:4C:93:31:CD:F7:E2:FA:A7:6C:51:8E:19:2D:CB:E0:8F:71:A4:BE
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       482D70289A8B1F058BAD56235B2A8F8970A920B0
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3138312e3139302e302e302f31362d3136203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 19:25:23 +0000
ROA not before:           Tue 01 Jul 2025 19:20:23 +0000
ROA not after:            Tue 30 Jun 2026 19:25:23 +0000
asID:                     14259
IP address blocks:        181.190.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2d:70:28:9a:8b:1f:05:8b:ad:56:23:5b:2a:8f:89:70:a9:20:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:23 2025 GMT
            Not After : Jun 30 19:25:23 2026 GMT
        Subject: CN=784C9331CDF7E2FAA76C518E192DCBE08F71A4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:bd:d4:51:46:b2:49:12:1d:f5:55:46:e1:
                    ee:15:7a:a9:79:d8:78:79:96:d9:ab:2e:f1:b6:68:
                    5c:94:69:13:27:50:0f:8d:a2:c2:63:75:53:43:60:
                    e6:c3:a0:89:d1:28:cf:10:81:8a:f6:c6:c6:1e:7a:
                    e1:7d:26:6e:2f:69:03:8f:a1:ea:d5:b3:3d:88:42:
                    1a:83:9d:df:ff:01:a6:f6:44:eb:05:70:b5:31:e6:
                    9c:66:85:6f:4b:1e:01:c7:cf:40:11:63:97:49:c3:
                    19:20:52:53:b1:86:84:21:cc:43:03:8b:9c:31:0e:
                    b5:09:3f:4d:c8:dd:79:4e:5c:44:f1:60:fa:a6:2f:
                    fd:f9:c6:bc:5e:46:d4:cb:88:74:47:c4:c6:a3:79:
                    33:50:67:3a:aa:be:67:b1:eb:cf:78:ef:a6:64:37:
                    dd:d2:b6:e0:b6:8d:26:e5:13:38:88:a2:38:4c:cb:
                    09:9b:85:b0:c9:85:72:89:4b:58:b9:cd:96:99:19:
                    fd:3f:32:96:21:5c:3d:8b:2d:40:ea:6f:e3:0b:1d:
                    68:70:df:10:d0:4b:b6:b1:60:60:58:93:19:8b:2d:
                    ee:32:61:a2:67:b4:49:f6:27:dc:7e:03:45:66:a8:
                    13:95:f6:ab:33:f2:0c:13:86:fb:25:53:ba:26:da:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4C:93:31:CD:F7:E2:FA:A7:6C:51:8E:19:2D:CB:E0:8F:71:A4:BE
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3138312e3139302e302e302f31362d3136203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:0b:b6:a1:a6:f1:42:57:d6:02:f0:d5:41:a1:48:f5:02:ac:
         63:15:92:49:c0:1f:05:ca:38:24:07:46:d3:1c:a2:76:2b:f6:
         b9:c3:5f:97:f3:4f:db:93:b6:36:4f:a3:c3:38:a2:ae:15:9c:
         e2:b5:b5:ee:4c:59:bc:10:a2:54:54:84:bb:38:d1:1c:2a:c3:
         67:af:df:c0:ba:0b:e6:9d:3c:d7:17:1c:5f:8d:47:1f:ab:0f:
         79:1c:8f:87:ba:3a:3f:6f:6a:21:f2:37:a3:e7:57:02:be:aa:
         c2:0e:7c:67:9d:d1:0a:7b:78:c2:0e:8a:ca:02:65:52:2e:ac:
         52:24:88:6d:03:97:f4:af:57:d0:32:ca:28:d2:0a:99:3d:db:
         b6:6e:5d:e1:a0:d2:22:21:0a:71:87:5f:64:bd:26:95:d7:d0:
         f1:a2:ae:c5:07:d4:b8:91:12:03:9e:3f:f1:7b:75:d4:4f:7a:
         59:20:e1:81:ed:d1:5b:6a:2b:41:15:42:10:ac:80:d0:d5:34:
         45:d8:b9:fc:4c:4e:27:4c:05:f8:f6:d3:c2:71:0c:8e:21:11:
         da:ab:ea:63:7c:52:b3:40:21:09:5d:59:5d:ca:20:34:d4:fa:
         83:ef:7a:92:6f:27:c7:8d:bf:d1:ca:b6:b8:3b:9e:3b:c0:e9:
         dc:8a:82:0e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUSC1wKJqLHwWLrVYjWyqPiXCpILAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMjNaFw0yNjA2MzAxOTI1MjNaMDMxMTAvBgNV
BAMTKDc4NEM5MzMxQ0RGN0UyRkFBNzZDNTE4RTE5MkRDQkUwOEY3MUE0QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Bb3UUUaySRId9VVG4e4Veql5
2Hh5ltmrLvG2aFyUaRMnUA+NosJjdVNDYObDoInRKM8QgYr2xsYeeuF9Jm4vaQOP
oerVsz2IQhqDnd//Aab2ROsFcLUx5pxmhW9LHgHHz0ARY5dJwxkgUlOxhoQhzEMD
i5wxDrUJP03I3XlOXETxYPqmL/35xrxeRtTLiHRHxMajeTNQZzqqvmex689476Zk
N93StuC2jSblEziIojhMywmbhbDJhXKJS1i5zZaZGf0/MpYhXD2LLUDqb+MLHWhw
3xDQS7axYGBYkxmLLe4yYaJntEn2J9x+A0VmqBOV9qsz8gwThvslU7om2s2tAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUeEyTMc334vqnbFGOGS3L4I9xpL4wHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzgzMTJlMzEzOTMwMmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzQzMjM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC1vjANBgkq
hkiG9w0BAQsFAAOCAQEAQwu2oabxQlfWAvDVQaFI9QKsYxWSScAfBco4JAdG0xyi
div2ucNfl/NP25O2Nk+jwziirhWc4rW17kxZvBCiVFSEuzjRHCrDZ6/fwLoL5p08
1xccX41HH6sPeRyPh7o6P29qIfI3o+dXAr6qwg58Z53RCnt4wg6KygJlUi6sUiSI
bQOX9K9X0DLKKNIKmT3btm5d4aDSIiEKcYdfZL0mldfQ8aKuxQfUuJESA54/8Xt1
1E96WSDhge3RW2orQRVCEKyA0NU0Rdi5/ExOJ0wF+PbTwnEMjiER2qvqY3xSs0Ah
CV1ZXcogNNT6g+96km8nx42/0cq2uDueO8Dp3IqCDg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 16:51:22 2025 by rpki-client