Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f32322d3232203d3e203138383232.roa
File:                     3230302e3132342e33322e302f32322d3232203d3e203138383232.roa (raw, json)
Hash identifier:          GZeHrU9ZEByHLJuyFW0mGZ7l+R/ZL7h7MyorL5a+FIk=
Subject key identifier:   95:BF:41:D6:15:9E:E1:BA:0C:FD:E2:20:DF:5D:75:D6:0F:4F:6E:BF
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       60CADFE25276D661F90A1DCB141EAD46E4873F52
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f32322d3232203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:17 +0000
ROA not before:           Tue 01 Jul 2025 19:20:17 +0000
ROA not after:            Tue 30 Jun 2026 19:25:17 +0000
asID:                     18822
IP address blocks:        200.124.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ca:df:e2:52:76:d6:61:f9:0a:1d:cb:14:1e:ad:46:e4:87:3f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:17 2025 GMT
            Not After : Jun 30 19:25:17 2026 GMT
        Subject: CN=95BF41D6159EE1BA0CFDE220DF5D75D60F4F6EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:73:b4:19:15:52:46:59:d1:1b:3c:77:f9:
                    e5:94:cd:8b:5c:58:74:5d:a0:84:83:9f:09:07:24:
                    87:2c:bb:3a:cf:50:13:96:2f:6a:0d:90:12:2c:26:
                    d1:98:7a:16:a0:c7:e1:e6:2c:70:88:18:a5:f4:f6:
                    97:97:13:64:34:69:b2:fa:bd:e3:b0:78:93:11:31:
                    be:45:69:49:a5:87:62:0f:a2:b2:17:35:e7:b7:b9:
                    fa:be:9e:0f:83:91:6f:de:21:44:fb:ae:c5:13:32:
                    67:41:95:35:7b:fb:84:4a:14:44:ef:4a:fb:91:b2:
                    09:d6:26:6f:f5:f5:e8:f9:07:71:95:19:97:75:cd:
                    71:5e:be:f8:74:c6:48:f9:3a:be:d5:3c:7d:c0:2c:
                    ed:8f:14:98:4f:9f:32:ec:21:d1:37:f1:0c:af:c4:
                    ef:d8:21:23:16:09:f1:c3:d3:36:65:e8:04:75:05:
                    11:e3:1d:f2:66:e1:20:5f:63:ff:de:b2:ae:c2:06:
                    73:1d:e6:c3:9c:d4:53:79:49:48:59:f9:68:e1:7e:
                    bc:f4:0c:8d:d6:02:0c:6b:49:9f:c5:af:bf:bb:f3:
                    89:78:b5:c9:bd:ac:e3:f7:79:61:b7:1f:63:26:bb:
                    b3:d4:b0:7c:f9:f9:56:c7:06:b2:2f:4e:57:b7:4c:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BF:41:D6:15:9E:E1:BA:0C:FD:E2:20:DF:5D:75:D6:0F:4F:6E:BF
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f32322d3232203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:9e:d5:3c:f6:97:74:2f:43:a0:82:c1:ba:f6:25:72:07:27:
         a7:e0:bb:b2:32:46:e6:60:12:8c:95:72:bf:50:14:5e:5c:84:
         86:bf:75:4c:5a:e5:5b:67:e7:8d:b3:6f:7b:0e:58:dd:c3:44:
         ed:a2:55:0a:28:f6:82:9e:75:cd:df:fb:87:2c:e0:62:ed:08:
         93:a4:6f:ca:cc:6e:e1:b9:43:89:95:fd:c7:07:ac:55:72:f2:
         cf:fd:25:53:15:52:3b:ee:b3:91:e0:c0:46:77:b4:44:84:b5:
         54:a3:09:52:e5:16:b8:d2:5c:3d:51:7c:c5:ca:0f:e4:17:52:
         25:8b:f7:99:c4:55:b0:e9:8b:38:48:2f:aa:3e:8e:c3:0a:48:
         5d:fa:16:b4:1d:2d:7c:48:b7:86:81:a3:11:00:3c:e1:bc:00:
         a0:5d:1c:04:3b:d5:93:7b:4e:8a:93:7c:1b:7b:d6:ac:0f:5f:
         ea:3f:d5:1b:98:39:25:c2:74:77:25:de:fd:33:0d:53:d7:18:
         86:c9:07:d2:11:8f:09:c0:a4:46:b2:5e:73:be:8d:e0:73:08:
         d8:25:d8:87:65:36:65:86:38:d2:e8:78:1e:1f:70:93:d2:e6:
         c2:c2:de:12:36:47:be:d5:e8:21:ad:f2:21:6e:1e:10:07:be:
         b7:36:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:33:15 2025 by rpki-client