Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37372e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e37372e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          xere1M7V3WwdeqggXVa9zvzWJ4pmNN6tRsh950SM254=
Subject key identifier:   A2:D4:85:5D:AA:04:DA:00:C5:DC:C1:6F:A3:0E:B7:36:08:91:F5:C6
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       6C9491B313C6458FBEB34B5089A3E0DCDF74F214
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37372e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:13 +0000
ROA not before:           Tue 01 Jul 2025 19:20:13 +0000
ROA not after:            Tue 30 Jun 2026 19:25:13 +0000
asID:                     18822
IP address blocks:        190.8.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:94:91:b3:13:c6:45:8f:be:b3:4b:50:89:a3:e0:dc:df:74:f2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:13 2025 GMT
            Not After : Jun 30 19:25:13 2026 GMT
        Subject: CN=A2D4855DAA04DA00C5DCC16FA30EB7360891F5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:a3:30:1f:d6:90:41:e1:ad:90:80:2c:83:
                    6e:f3:54:08:7d:1e:38:4b:ca:92:4d:27:e0:93:28:
                    9f:57:91:84:00:83:74:b5:57:07:df:a0:a0:57:89:
                    ad:02:b5:45:8e:a1:4d:44:99:d5:fe:7d:12:f3:e3:
                    d4:42:25:0d:39:91:70:23:d6:8c:e2:bf:39:af:f5:
                    11:7f:b9:ec:13:fd:1a:0e:dc:79:f5:10:68:31:b8:
                    a4:6d:82:88:8e:46:a1:f5:ef:f0:51:1e:9c:a0:33:
                    72:d5:a3:ba:c2:d8:20:91:fb:fc:e5:aa:38:18:e4:
                    5a:b4:51:69:09:1f:14:a2:9e:a6:85:96:f1:cc:fb:
                    45:95:59:65:d0:d8:e0:5d:70:25:e8:46:1a:29:98:
                    12:1b:6c:79:8d:b5:2f:09:70:6c:66:bf:3b:ea:2e:
                    a5:7f:f5:2e:74:f8:97:91:c7:7b:0d:43:f5:23:07:
                    57:a8:ae:8c:af:b9:73:a1:29:a0:e7:c4:b4:a9:c2:
                    59:1b:47:30:d0:56:8b:46:b1:3c:8b:23:6d:b7:db:
                    be:96:dd:da:ba:27:cd:b7:c8:54:c2:da:ba:cf:b2:
                    94:e2:b1:66:bf:f0:44:94:ff:8b:8d:fc:86:85:8b:
                    2e:66:bd:5b:c1:41:4c:ed:8c:6e:27:ad:9a:fa:5d:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:85:5D:AA:04:DA:00:C5:DC:C1:6F:A3:0E:B7:36:08:91:F5:C6
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e37372e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:61:66:7c:57:97:29:2d:9c:17:19:16:a3:a3:39:0d:08:
         42:18:4c:a5:fd:76:01:08:80:cb:1d:65:7a:42:e4:b7:ea:f5:
         87:92:de:df:71:5f:df:a5:86:70:35:ce:5c:56:89:22:51:b1:
         f3:4a:79:9a:cb:76:6f:41:41:61:39:aa:cc:e5:72:ef:ce:2d:
         6b:2a:95:e9:34:66:ea:2e:b7:0a:1b:30:36:53:7b:4d:81:e1:
         44:e2:3e:16:79:27:70:e5:57:1a:9f:e5:0c:30:8d:b6:73:30:
         9e:21:4f:5c:5c:8d:b3:3f:bc:39:53:48:28:14:c6:b4:cb:82:
         9b:4c:c9:9d:fe:2d:cf:24:a1:29:4c:1b:a5:dc:3f:3f:ee:66:
         06:50:d7:cd:03:8c:ac:48:80:22:d7:cb:03:de:78:90:2b:76:
         0b:e8:05:5b:82:46:bc:23:69:d7:6c:a3:48:6e:b2:f8:2e:53:
         e7:5c:ae:60:56:d1:7e:e9:23:64:f7:07:e0:21:3d:bd:2c:c9:
         45:94:15:4c:ed:e6:e5:a7:3b:68:4c:6a:5d:72:1e:ef:b6:95:
         42:63:d2:f6:d6:da:fa:f5:b2:21:cc:fe:bc:79:34:bb:81:76:
         9c:67:4c:cd:1b:e4:33:9f:50:da:d9:86:60:72:2c:f2:d6:ee:
         bf:e7:3c:52
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUbJSRsxPGRY++s0tQiaPg3N908hQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMTNaFw0yNjA2MzAxOTI1MTNaMDMxMTAvBgNV
BAMTKEEyRDQ4NTVEQUEwNERBMDBDNURDQzE2RkEzMEVCNzM2MDg5MUY1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EaMwH9aQQeGtkIAsg27zVAh9
HjhLypJNJ+CTKJ9XkYQAg3S1VwffoKBXia0CtUWOoU1EmdX+fRLz49RCJQ05kXAj
1ozivzmv9RF/uewT/RoO3Hn1EGgxuKRtgoiORqH17/BRHpygM3LVo7rC2CCR+/zl
qjgY5Fq0UWkJHxSinqaFlvHM+0WVWWXQ2OBdcCXoRhopmBIbbHmNtS8JcGxmvzvq
LqV/9S50+JeRx3sNQ/UjB1eoroyvuXOhKaDnxLSpwlkbRzDQVotGsTyLI223276W
3dq6J823yFTC2rrPspTisWa/8ESU/4uN/IaFiy5mvVvBQUztjG4nrZr6XYpPAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUotSFXaoE2gDF3MFvow63NgiR9cYwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzgyZTM3MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvghNMA0GCSqG
SIb3DQEBCwUAA4IBAQCoh2FmfFeXKS2cFxkWo6M5DQhCGEyl/XYBCIDLHWV6QuS3
6vWHkt7fcV/fpYZwNc5cVokiUbHzSnmay3ZvQUFhOarM5XLvzi1rKpXpNGbqLrcK
GzA2U3tNgeFE4j4WeSdw5Vcan+UMMI22czCeIU9cXI2zP7w5U0goFMa0y4KbTMmd
/i3PJKEpTBul3D8/7mYGUNfNA4ysSIAi18sD3niQK3YL6AVbgka8I2nXbKNIbrL4
LlPnXK5gVtF+6SNk9wfgIT29LMlFlBVM7eblpztoTGpdch7vtpVCY9L21tr69bIh
zP68eTS7gXacZ0zNG+Qzn1Da2YZgcizy1u6/5zxS
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:46:40 2025 by rpki-client