Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f31392d3230203d3e203134323539.roa
File:                     3230302e3132342e33322e302f31392d3230203d3e203134323539.roa (raw, json)
Hash identifier:          xnqy/WbuziTeEIugdb+ok6LpG/M9lagh3788a0apef0=
Subject key identifier:   14:EE:66:8E:4C:BA:F6:CD:73:35:68:BA:53:EB:05:0D:EB:F3:D0:C0
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       50CE8320FB0BD6F87F56A27214F9407E37748F09
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f31392d3230203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 19:25:20 +0000
ROA not before:           Tue 01 Jul 2025 19:20:20 +0000
ROA not after:            Tue 30 Jun 2026 19:25:20 +0000
asID:                     14259
IP address blocks:        200.124.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ce:83:20:fb:0b:d6:f8:7f:56:a2:72:14:f9:40:7e:37:74:8f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:20 2025 GMT
            Not After : Jun 30 19:25:20 2026 GMT
        Subject: CN=14EE668E4CBAF6CD733568BA53EB050DEBF3D0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:3e:5e:22:6d:32:45:17:d0:79:2f:23:23:
                    37:d5:19:56:c9:02:e7:13:02:0f:89:a2:0c:9a:45:
                    07:e9:12:bd:a8:0b:95:0b:67:6a:b4:84:53:4b:a6:
                    69:cb:68:cc:ee:85:98:b0:9b:07:a6:cf:4e:ce:77:
                    4b:11:ea:45:f7:7f:41:95:13:bb:40:55:b2:5d:12:
                    b0:d2:c0:89:80:58:50:fa:e9:dd:7b:25:ff:c0:6a:
                    fa:68:73:92:c2:01:4e:52:9e:84:d9:46:2e:db:ae:
                    c6:94:fa:a6:cb:5d:30:83:ab:49:64:b7:9e:b9:b7:
                    b1:b9:6c:3b:90:25:74:95:be:6e:b2:a5:33:49:e0:
                    28:f5:39:8f:ca:c6:1d:92:7f:3a:2b:92:44:d5:f4:
                    af:2b:fd:44:1e:96:bb:56:44:ce:d0:0d:83:2b:bc:
                    74:e7:20:7e:38:ee:0f:3e:5e:22:22:19:22:d7:5d:
                    da:1b:f1:15:eb:65:77:3e:a6:75:6d:a8:58:37:50:
                    f6:d4:42:c6:12:11:ce:54:a5:29:10:55:56:24:44:
                    09:1c:3a:d2:75:20:b0:41:c1:ef:6a:d7:f3:69:31:
                    1b:11:df:a6:6a:a3:91:9f:99:be:fb:81:d8:01:17:
                    77:db:d3:fb:e1:76:89:0b:cb:62:d9:21:bf:cd:79:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EE:66:8E:4C:BA:F6:CD:73:35:68:BA:53:EB:05:0D:EB:F3:D0:C0
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f31392d3230203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:92:c7:fa:bb:37:46:4c:49:66:16:cd:d5:9d:23:80:d5:
         cc:d1:22:cb:fc:42:86:07:83:8c:71:07:c8:a9:30:0d:3b:13:
         47:c0:81:a2:be:16:0b:65:41:0a:00:78:cf:20:b8:11:d2:b3:
         1f:ac:81:81:4b:14:59:f7:35:5f:3a:60:9b:c8:b9:99:3e:9b:
         6d:02:35:62:18:7f:b4:c4:1b:ca:07:7f:5c:e7:76:83:5c:0e:
         82:11:d7:fb:6e:55:70:fd:2b:ff:8c:69:64:a9:48:b8:dc:08:
         60:10:be:35:a0:02:96:be:6c:b7:1c:0a:99:bc:f8:c5:56:59:
         fa:74:73:2f:94:c8:40:c3:6f:d8:d3:c7:6d:dc:b0:6d:8f:42:
         30:61:97:df:08:21:b5:0e:b6:ab:35:b1:44:4d:72:f1:5f:a2:
         14:51:9b:36:9a:6c:48:3c:40:99:9d:9b:97:f7:94:da:4a:4e:
         de:30:8e:88:ac:ab:7f:c2:c0:47:2d:02:47:87:7e:e5:06:5e:
         62:cd:1e:e2:0f:62:60:44:21:ec:ed:b4:46:2e:78:20:30:a7:
         26:aa:ea:4a:ff:87:92:52:44:0f:b8:3f:6a:fe:85:2b:9d:c2:
         09:a0:76:ef:96:c4:72:e8:74:23:15:8b:19:8f:de:97:c0:ee:
         3f:50:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:36:54 2025 by rpki-client