Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232372e302f32342d3234203d3e203138383232.roa
File:                     3230302e3131392e3232372e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Bcd3qlvO+3rnrqW/wy5iGF6r6S+3hd18rh+84M58LZ8=
Subject key identifier:   D2:3A:EB:1A:F3:2D:0C:21:1E:FD:FC:9D:C2:90:67:B7:B1:08:B5:91
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       2C5DE1E7AED3FCF85ABB03255529820C555D5E5D
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232372e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:00 +0000
ROA not before:           Tue 01 Jul 2025 19:20:00 +0000
ROA not after:            Tue 30 Jun 2026 19:25:00 +0000
asID:                     18822
IP address blocks:        200.119.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5d:e1:e7:ae:d3:fc:f8:5a:bb:03:25:55:29:82:0c:55:5d:5e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:00 2025 GMT
            Not After : Jun 30 19:25:00 2026 GMT
        Subject: CN=D23AEB1AF32D0C211EFDFC9DC29067B7B108B591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:c3:5e:9f:67:ad:5c:39:fd:5e:d9:c2:80:
                    76:1f:bc:c6:96:58:f1:5c:89:7f:c5:a3:a6:b9:9a:
                    2d:10:12:67:a7:54:33:a1:10:41:72:35:df:f6:91:
                    a7:a8:f6:4b:57:b2:fb:bf:47:2c:64:34:1c:bd:df:
                    bb:00:43:96:49:2b:f5:75:65:11:12:b1:0f:85:49:
                    a9:33:61:c4:46:21:c9:77:37:99:fb:3e:22:18:33:
                    bd:71:c7:0c:25:5a:90:4d:cb:9c:97:a4:db:ee:ee:
                    f5:2f:6e:14:5f:5c:0d:57:fd:38:05:9b:eb:73:c3:
                    17:7c:87:cb:65:6c:f5:07:17:e1:a8:bc:5e:4b:1a:
                    df:50:35:02:c7:e7:01:1b:11:b7:d5:23:b8:89:a5:
                    05:da:9d:d5:e1:1f:8f:92:42:b7:54:d5:b2:93:32:
                    42:30:1e:2d:d3:7d:f6:1d:6f:bf:7f:1b:ec:29:59:
                    9e:8f:a1:3e:e6:04:a7:46:d3:57:57:a1:5c:73:f3:
                    eb:d5:b2:84:5e:00:dc:ba:cd:86:c3:05:4d:b8:e8:
                    43:96:88:c8:3a:0f:be:ef:31:03:7a:de:8c:59:ad:
                    a6:aa:59:77:fa:22:75:0a:7a:2c:9b:8b:52:c3:8b:
                    e7:77:16:32:1e:5c:6e:f9:cc:ec:e5:56:d4:d7:6c:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3A:EB:1A:F3:2D:0C:21:1E:FD:FC:9D:C2:90:67:B7:B1:08:B5:91
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232372e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:76:f5:59:99:b6:0d:65:76:14:4d:08:94:8b:3a:25:67:a6:
         1d:68:19:e9:a5:40:a0:d7:b1:32:91:d2:46:8d:53:2e:fc:a8:
         b5:75:e9:61:7e:1b:ba:aa:53:22:83:ea:1a:92:a4:4a:c6:ef:
         b6:31:ae:29:60:6a:b1:89:b9:5f:7a:52:2a:f3:35:3b:56:f3:
         e0:05:19:e4:2e:9d:89:69:d3:75:13:e1:66:a3:df:8e:b1:26:
         da:5d:2f:a2:a0:34:ae:3c:e4:ba:fb:81:67:c1:3d:72:37:f7:
         f8:07:e3:fc:15:4a:f2:1f:51:8b:88:95:f8:73:6b:04:c5:ff:
         f3:61:bf:56:ea:d5:46:64:75:99:62:57:0b:36:33:4d:60:80:
         aa:dd:b4:41:2c:7e:b0:95:f6:85:82:5d:fb:2a:fe:ae:b0:db:
         54:b1:e6:1c:e7:a4:01:53:9d:b2:a4:5d:ed:42:63:0d:5f:ab:
         17:f4:62:5b:0b:41:d8:ff:14:73:4e:8f:10:45:bf:cc:30:3d:
         a6:98:96:b0:37:0d:cb:7a:e1:cd:62:5d:62:eb:a5:fc:a6:86:
         59:83:99:fa:1b:dd:df:e2:19:63:52:2a:bc:ea:89:bc:e7:d4:
         50:0c:c9:0e:9a:13:75:2c:fb:59:b1:34:c7:8f:33:18:9f:57:
         cd:5d:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:42:51 2025 by rpki-client