Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234352e302f32342d3234203d3e203138383232.roa
File:                     3230302e3131392e3234352e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          9wCofF20jy26ze2DAIpABo7DXXASLV1NpD00xq3dGtI=
Subject key identifier:   58:AF:C3:0F:7D:21:13:EE:B1:D3:B8:97:33:A9:D7:9C:47:D7:A3:8A
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       127B4D853C2E5D7C596F45789D7E8F329AABBDF3
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234352e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:01 +0000
ROA not before:           Tue 01 Jul 2025 19:20:01 +0000
ROA not after:            Tue 30 Jun 2026 19:25:01 +0000
asID:                     18822
IP address blocks:        200.119.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 14:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7b:4d:85:3c:2e:5d:7c:59:6f:45:78:9d:7e:8f:32:9a:ab:bd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:01 2025 GMT
            Not After : Jun 30 19:25:01 2026 GMT
        Subject: CN=58AFC30F7D2113EEB1D3B89733A9D79C47D7A38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:3f:62:c6:e8:04:42:38:51:83:98:29:2a:
                    ed:0a:a1:b5:c2:6c:45:d8:da:f1:5f:8f:6b:63:d6:
                    50:be:76:a2:d1:ad:2f:98:4f:25:98:bc:7a:53:d5:
                    7a:05:39:c5:89:e0:44:c8:60:1f:ce:48:44:28:7d:
                    85:b1:46:20:47:18:47:c7:9a:d3:40:1c:4b:55:21:
                    b6:63:c0:66:62:d0:81:65:8d:b5:22:90:73:d4:08:
                    36:68:dc:5e:a3:f2:1e:b2:30:12:77:4e:b8:92:5f:
                    30:38:af:43:b1:d2:f3:be:32:6b:72:ec:ac:dc:8f:
                    a7:19:a2:fb:0b:e7:f0:89:d9:a3:62:e0:2f:90:b8:
                    d3:4e:36:19:65:ef:70:10:93:f8:e0:60:a0:32:5b:
                    06:16:e6:5b:18:12:66:8c:a4:ec:02:76:95:ee:ec:
                    b2:c5:32:a3:39:cd:71:48:60:00:92:ff:fa:97:18:
                    f7:fc:a5:0d:d9:e3:90:6e:ff:71:04:5d:37:44:28:
                    d1:09:65:5c:e8:ea:f8:f6:ec:41:9a:e7:69:20:bc:
                    9d:51:ff:f2:00:72:99:5b:3c:48:37:2f:21:18:b5:
                    d2:95:21:6d:18:67:f4:2b:e9:45:d7:63:b5:6e:61:
                    4c:1b:98:ad:a8:34:14:20:6e:ae:b6:d1:00:c3:78:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AF:C3:0F:7D:21:13:EE:B1:D3:B8:97:33:A9:D7:9C:47:D7:A3:8A
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234352e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:31:74:b5:2d:9b:52:04:22:1e:f7:3f:cf:3e:1f:2d:e1:22:
         54:54:d1:c1:36:0e:62:82:28:ba:b1:b3:cb:fa:32:34:a6:37:
         cd:e4:64:ac:2d:7b:2f:89:4d:6e:cf:04:5b:c8:18:17:8b:87:
         1b:f0:59:6f:ad:4a:f0:dc:2f:9d:ea:33:32:a7:48:2b:96:ed:
         e3:db:75:d3:af:a4:fa:a1:18:f9:35:45:6d:f6:3c:d0:e2:02:
         91:e0:62:21:05:9a:0e:e4:5e:52:0d:6b:0e:6f:e1:43:7b:97:
         f6:d0:f1:03:2d:b9:37:1d:e7:42:23:16:47:6f:94:62:d8:45:
         60:43:c9:13:2b:a5:bd:a7:6b:99:02:fe:7f:bd:7d:91:27:73:
         75:3e:1e:5b:bf:51:4e:36:24:c1:6a:36:47:06:95:a9:9b:2d:
         76:83:8d:a3:8a:5e:dd:56:02:45:5c:c9:de:1d:14:6b:d8:78:
         3e:f3:ae:0a:6a:f9:2b:a6:b1:f7:5f:61:58:e6:40:b4:6c:0e:
         a1:8b:05:3b:b0:96:ef:71:5c:6a:05:ab:64:10:f4:2e:e7:26:
         79:2a:61:53:2f:f3:89:61:24:ed:01:85:66:70:4f:90:e4:03:
         b6:eb:b9:90:56:e2:e8:8a:a5:c1:a8:e5:ee:c0:87:c0:e4:74:
         c1:21:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:30:08 2025 by rpki-client