Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa
File:                     3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          NDGT+tZ8qsaP94duhN8nn/UwV0BoIie6loIVFNzsTx4=
Subject key identifier:   F9:A6:BE:29:C3:96:8F:10:6A:A2:1F:77:E6:2D:E1:2E:E0:A2:CD:B3
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       67BB6EBFC0CC8AE12E74E2AC6AB737D39CF0E07F
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:30 +0000
ROA not before:           Tue 01 Jul 2025 19:20:30 +0000
ROA not after:            Tue 30 Jun 2026 19:25:30 +0000
asID:                     18822
IP address blocks:        200.119.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bb:6e:bf:c0:cc:8a:e1:2e:74:e2:ac:6a:b7:37:d3:9c:f0:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:30 2025 GMT
            Not After : Jun 30 19:25:30 2026 GMT
        Subject: CN=F9A6BE29C3968F106AA21F77E62DE12EE0A2CDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:0f:cc:6f:13:21:21:b1:a5:98:16:00:3a:
                    78:b9:13:40:d9:1d:2a:7c:73:e3:c2:3e:3d:6f:bf:
                    b6:54:5f:0f:ef:02:7d:26:d9:6c:31:93:59:24:f7:
                    9d:a6:19:58:c4:43:b2:2d:b1:9d:be:9b:25:98:b7:
                    69:36:b9:39:9e:01:48:4f:fe:bb:fe:7c:fb:34:76:
                    2c:25:e0:f4:e1:3f:bc:ed:e5:84:7c:34:6f:7e:74:
                    60:2a:cb:db:fa:96:3d:af:c3:1a:d3:41:22:11:58:
                    bf:a0:72:47:6f:f6:f5:4c:ae:58:f4:1d:4a:3f:00:
                    99:4e:3a:53:cf:dc:09:b9:1b:5a:4b:a4:58:5c:9b:
                    b3:ff:44:87:fd:42:dc:96:ad:22:c2:f6:10:8f:14:
                    f8:99:03:b1:ba:20:f9:7c:1d:bd:b1:c0:00:cb:29:
                    ab:02:11:d1:2f:d0:2a:a3:f6:af:8a:90:bf:9b:93:
                    c1:6e:34:07:21:19:ed:5b:17:77:fc:14:db:69:e5:
                    b0:5d:ac:2b:65:a3:6a:98:db:74:45:8c:05:4e:d8:
                    be:f0:f7:ab:5d:97:68:9e:d9:ca:4c:54:35:ba:ad:
                    fe:91:b1:28:59:a9:9b:1f:83:52:77:f1:4c:af:74:
                    ce:d8:9b:2f:68:4d:40:1e:58:1b:a3:b6:23:16:04:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:BE:29:C3:96:8F:10:6A:A2:1F:77:E6:2D:E1:2E:E0:A2:CD:B3
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:05:e0:a7:72:6f:7d:71:43:c5:f0:9b:a1:5f:97:2d:c5:
         17:51:f5:df:49:1c:d9:47:ef:60:d7:15:2f:dd:3d:65:21:0e:
         ce:a0:e9:06:22:76:53:80:32:ce:ee:30:ab:15:fc:c9:ec:95:
         08:1a:34:3e:f3:a7:45:44:f9:b0:f8:be:55:a7:90:0a:98:0b:
         c5:3f:16:88:3b:2b:bd:9a:84:a6:50:06:39:71:1d:38:ec:35:
         0b:15:39:a4:0e:9c:c7:37:66:d1:08:a9:50:73:43:70:5b:e0:
         03:9d:a1:e9:f4:54:1a:67:09:0f:5f:9f:94:a7:04:5c:0f:6e:
         5c:c1:5a:11:c6:0d:4b:2f:bd:fd:7a:d1:c5:b1:cf:af:a5:34:
         f0:bc:63:32:39:e6:96:8e:69:54:00:b3:35:c9:c7:4a:52:d7:
         a9:34:5f:7b:c0:9c:19:c2:87:3e:d7:7f:f5:08:99:9e:1c:49:
         9f:06:c5:91:03:27:74:bc:41:9a:e3:c5:ff:ce:7b:60:69:4e:
         5c:25:14:94:d1:59:9f:d1:c2:25:0d:e4:ec:5e:45:04:9a:2d:
         b2:8e:65:ed:1b:02:46:08:a7:00:5e:1e:7e:e0:8a:6b:9a:33:
         b6:29:26:d8:37:4f:58:6d:ba:99:57:f5:14:64:c4:83:bb:0b:
         0b:b5:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:43:21 2025 by rpki-client