Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33362e302f32332d3234203d3e203138383232.roa
File:                     3230302e3132342e33362e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          wiqxJKscmj71dMragTaq/JNmeABHysBuery0c/PwSdY=
Subject key identifier:   B9:B2:22:7B:DA:19:7F:A5:63:31:D8:C9:F8:AF:4C:5A:C4:5D:0F:B5
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       053660D36443F2D769067AC10D9CE0828D52FA86
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33362e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:26 +0000
ROA not before:           Tue 01 Jul 2025 19:20:26 +0000
ROA not after:            Tue 30 Jun 2026 19:25:26 +0000
asID:                     18822
IP address blocks:        200.124.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:36:60:d3:64:43:f2:d7:69:06:7a:c1:0d:9c:e0:82:8d:52:fa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:26 2025 GMT
            Not After : Jun 30 19:25:26 2026 GMT
        Subject: CN=B9B2227BDA197FA56331D8C9F8AF4C5AC45D0FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:5e:d0:3f:f2:11:e8:41:0c:22:5f:56:90:
                    16:d4:b2:84:5f:3a:4f:3e:e9:19:55:55:7e:f5:0f:
                    20:02:b5:4f:94:b9:31:9e:6e:9d:25:61:ee:96:a6:
                    9e:a7:44:fa:68:59:8c:ca:00:a5:23:db:b3:ee:6d:
                    22:f9:0a:a3:49:a6:8e:f3:f4:dc:36:31:af:24:f6:
                    3a:f1:5b:d8:14:fe:20:fb:97:b8:dc:28:0c:4f:10:
                    d4:5d:c3:d2:a6:d7:75:24:d4:31:74:df:03:76:5b:
                    4f:89:98:e1:68:f8:02:64:37:ec:eb:49:f0:0b:e4:
                    a3:d2:37:9d:5c:63:c5:a2:a2:34:8e:69:76:8b:86:
                    7c:58:64:44:b5:fa:0a:3b:73:6b:bd:fd:28:53:30:
                    02:6d:bd:5f:a5:e2:e9:1d:84:61:4f:c0:98:a6:33:
                    d1:b8:f1:c9:36:5a:8c:d7:5f:79:64:62:57:fa:76:
                    3a:3e:35:a2:e2:00:d6:d0:0a:83:da:24:fa:63:6d:
                    07:78:d8:ab:43:cc:eb:9a:96:0e:ec:64:42:96:a4:
                    73:58:ed:a2:b1:3c:cf:e8:2b:38:30:39:28:6a:4b:
                    db:a9:a5:a9:4b:a1:80:e2:24:db:ac:da:fa:37:16:
                    94:b9:70:d3:8e:dd:cc:e6:f9:90:0a:81:67:0a:76:
                    f1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B2:22:7B:DA:19:7F:A5:63:31:D8:C9:F8:AF:4C:5A:C4:5D:0F:B5
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33362e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:c3:03:25:0c:0b:24:81:a7:9a:78:6b:0a:ac:fe:f3:dc:
         9d:cd:8e:a0:50:35:ec:45:ad:eb:1a:4b:04:61:b0:ea:94:18:
         b1:93:18:fb:f8:22:65:68:a0:30:e6:bd:f2:3e:57:0d:0f:dd:
         cf:7e:05:fb:2e:8c:42:0f:b1:c9:0f:81:5c:ed:bf:c5:0e:9b:
         56:35:6a:5b:dc:1c:46:38:1f:c2:d6:da:cf:fc:2b:23:a8:f9:
         b5:28:d1:e4:cf:79:6f:2f:79:48:84:81:d2:07:86:78:3d:8b:
         0e:8b:72:83:eb:0b:ec:89:24:ee:82:ef:bb:4b:2f:ee:3a:7b:
         cd:fd:1c:a4:21:cc:ff:12:36:a6:38:bb:85:69:48:17:1f:94:
         4e:fa:3f:1c:19:1a:31:74:91:c1:0b:ae:8b:b0:55:7c:1a:0c:
         ba:4f:4b:1c:c3:4a:e3:ae:26:2e:ce:b7:82:1a:ab:43:4d:78:
         9e:24:c8:f1:c0:a0:b0:75:7e:07:e3:91:81:92:e9:4e:2a:e7:
         c9:17:86:a6:d9:3a:08:56:fd:61:3d:1e:4e:36:5a:a1:09:3d:
         07:ad:6b:d1:71:5a:c5:8f:a3:b4:01:72:57:1f:b3:3c:bb:c2:
         7b:79:b1:d1:e3:ae:94:fa:10:0a:33:bb:bf:4a:7b:6d:9d:6a:
         b1:1b:5f:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBTZg02RD8tdpBnrBDZzggo1S+oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMjZaFw0yNjA2MzAxOTI1MjZaMDMxMTAvBgNV
BAMTKEI5QjIyMjdCREExOTdGQTU2MzMxRDhDOUY4QUY0QzVBQzQ1RDBGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjV7QP/IR6EEMIl9WkBbUsoRf
Ok8+6RlVVX71DyACtU+UuTGebp0lYe6Wpp6nRPpoWYzKAKUj27PubSL5CqNJpo7z
9Nw2Ma8k9jrxW9gU/iD7l7jcKAxPENRdw9Km13Uk1DF03wN2W0+JmOFo+AJkN+zr
SfAL5KPSN51cY8WiojSOaXaLhnxYZES1+go7c2u9/ShTMAJtvV+l4ukdhGFPwJim
M9G48ck2WozXX3lkYlf6djo+NaLiANbQCoPaJPpjbQd42KtDzOualg7sZEKWpHNY
7aKxPM/oKzgwOShqS9uppalLoYDiJNus2vo3FpS5cNOO3czm+ZAKgWcKdvFRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUubIie9oZf6VjMdjJ+K9MWsRdD7UwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMyMzAzMDJlMzEzMjM0MmUzMzM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAch8JDAN
BgkqhkiG9w0BAQsFAAOCAQEAnFPDAyUMCySBp5p4awqs/vPcnc2OoFA17EWt6xpL
BGGw6pQYsZMY+/giZWigMOa98j5XDQ/dz34F+y6MQg+xyQ+BXO2/xQ6bVjVqW9wc
Rjgfwtbaz/wrI6j5tSjR5M95by95SISB0geGeD2LDotyg+sL7Ikk7oLvu0sv7jp7
zf0cpCHM/xI2pji7hWlIFx+UTvo/HBkaMXSRwQuui7BVfBoMuk9LHMNK464mLs63
ghqrQ014niTI8cCgsHV+B+ORgZLpTirnyReGptk6CFb9YT0eTjZaoQk9B61r0XFa
xY+jtAFyVx+zPLvCe3mx0eOulPoQCjO7v0p7bZ1qsRtfCQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:40:32 2025 by rpki-client