Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e38382e302f32342d3234203d3e203138383232.roa
File:                     3139302e39362e38382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          JvAkS7gNCwf8z+CKatmge+de4ilmjH46+UqJBIh+CTI=
Subject key identifier:   73:86:BD:E6:AB:48:36:59:BF:8E:5F:EC:C7:E6:BA:B6:78:75:41:6E
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       57CCD05186BE1C9D4980CD293AF418BB68F0C232
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e38382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:19 +0000
ROA not before:           Tue 01 Jul 2025 19:20:19 +0000
ROA not after:            Tue 30 Jun 2026 19:25:19 +0000
asID:                     18822
IP address blocks:        190.96.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cc:d0:51:86:be:1c:9d:49:80:cd:29:3a:f4:18:bb:68:f0:c2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:19 2025 GMT
            Not After : Jun 30 19:25:19 2026 GMT
        Subject: CN=7386BDE6AB483659BF8E5FECC7E6BAB67875416E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:02:40:01:af:08:d2:11:a0:93:8b:23:04:
                    92:31:1f:c9:9c:10:54:7c:34:ed:5a:3f:23:cd:81:
                    00:83:08:ba:ed:47:1e:19:a9:94:28:76:63:a5:2f:
                    93:a8:d8:e9:15:c5:05:b2:74:e1:19:24:29:d7:d8:
                    22:13:72:da:2f:b0:10:75:cc:21:80:ea:7e:2f:5f:
                    0f:1a:83:f0:74:bc:cd:4a:49:1a:43:b7:cf:bb:ed:
                    20:41:68:f8:fe:c6:82:17:1d:0c:a6:ee:d8:97:f1:
                    cd:07:8c:26:3c:ea:e6:8a:c1:56:72:06:48:1f:e5:
                    a9:ce:9b:ee:bd:3d:78:d2:c8:9c:fc:b9:ea:ff:d4:
                    71:e0:a6:69:55:cf:7c:1a:88:47:7d:d4:f8:00:28:
                    9e:28:e5:7c:c8:f6:96:47:58:4d:1a:67:a7:a1:67:
                    e4:b0:66:8b:ac:1a:09:8e:b8:08:9a:31:b4:e8:bb:
                    31:0c:a8:b8:e6:4f:8b:e7:da:9c:c6:24:e6:77:49:
                    bd:53:52:f2:96:c8:01:b1:ea:8f:d1:55:aa:b5:c7:
                    cd:34:5c:50:2b:6b:a8:34:87:25:be:27:ed:35:91:
                    08:59:9e:80:c3:bd:a9:ca:4d:35:57:6f:5a:1b:62:
                    77:54:f1:74:b8:7d:71:b3:53:47:70:4c:5c:41:c3:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:86:BD:E6:AB:48:36:59:BF:8E:5F:EC:C7:E6:BA:B6:78:75:41:6E
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e39362e38382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:25:15:23:d3:27:8e:cb:c7:1d:ec:96:eb:cf:6e:6c:bb:23:
         ae:a8:e3:ba:7d:76:6c:7d:0d:11:41:68:43:64:d7:61:49:fb:
         f1:b8:6d:40:75:32:0f:e4:3b:c6:dc:ac:6f:a3:d6:cd:47:ec:
         22:2d:1c:2b:17:21:e0:25:e2:3d:99:ae:9f:c1:f9:6e:2d:03:
         89:f2:ab:f7:93:e2:76:68:37:1c:63:35:4a:d0:c1:eb:8c:94:
         0d:28:54:8f:b8:e2:19:0b:9e:89:b5:d6:ff:39:f2:5e:7b:5c:
         51:c7:1f:f4:f3:9d:4a:45:b6:e0:f2:2d:2a:2e:42:33:d4:d0:
         27:b1:d9:ea:cc:41:6d:cd:33:f7:0f:3c:5f:63:17:2c:a8:72:
         2a:04:18:80:cc:6d:c8:3c:16:43:c3:b3:93:96:62:35:e6:aa:
         88:49:fa:c1:4a:d6:4b:cc:80:e1:15:a6:20:ca:99:5f:72:41:
         c4:d0:46:2d:78:24:b8:23:c1:e0:42:c0:be:36:16:07:55:23:
         2f:e5:b1:25:cf:a7:b2:0e:68:50:63:e4:99:51:aa:67:11:eb:
         6a:0f:87:8f:0b:af:4e:a0:40:4b:1c:48:bc:f3:4b:f8:d7:75:
         35:dd:eb:ac:85:26:b3:50:a4:36:01:27:78:82:3b:e7:10:92:
         ec:8d:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:50:18 2025 by rpki-client