Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34322e302f32332d3233203d3e203138383232.roa
File:                     3230302e3132342e34322e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          LbqhA0mvBl3xWbxRaWP/kQUt7zjVN3ZLou/4pIHHECU=
Subject key identifier:   8B:A3:6D:12:1A:3A:0E:CB:23:C9:7D:83:1D:79:00:A8:54:B1:47:D8
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       7074391DCFD5A7696533A141B2218B46EFAED9F8
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34322e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:02 +0000
ROA not before:           Tue 01 Jul 2025 19:20:02 +0000
ROA not after:            Tue 30 Jun 2026 19:25:02 +0000
asID:                     18822
IP address blocks:        200.124.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:74:39:1d:cf:d5:a7:69:65:33:a1:41:b2:21:8b:46:ef:ae:d9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:02 2025 GMT
            Not After : Jun 30 19:25:02 2026 GMT
        Subject: CN=8BA36D121A3A0ECB23C97D831D7900A854B147D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:9a:ba:0e:20:05:dc:f5:3f:0f:0f:a1:1a:
                    88:4e:bd:7d:62:df:de:2d:12:9b:66:2d:44:c0:8b:
                    f3:32:59:79:07:28:e2:51:cd:c5:9f:fe:67:b7:2c:
                    3f:90:41:77:23:5f:e0:3d:b9:20:82:e0:3f:89:d9:
                    b4:bc:06:9d:88:5f:d0:73:1d:b3:b4:8f:11:b8:d8:
                    6a:f1:a1:53:8c:42:d8:70:25:e8:2d:c4:9d:06:e8:
                    e8:09:93:c3:70:29:45:b0:3d:9b:50:bf:d6:30:b3:
                    d7:e7:1f:c0:22:e3:6f:1d:3e:e8:d8:8a:94:81:df:
                    f3:26:40:79:dc:d6:00:b4:45:15:8a:cb:3c:b7:ae:
                    56:45:9e:a2:74:a4:9d:c5:8f:12:7e:f5:2c:6c:82:
                    3a:03:62:65:8a:05:78:65:cb:b8:46:14:68:5c:06:
                    20:cc:2d:10:c0:05:21:e8:0b:52:f9:47:e2:35:df:
                    cc:8f:b6:dc:2a:97:a6:73:c3:e2:de:3d:d6:a9:76:
                    33:26:ab:28:71:ad:6e:6e:9a:ae:40:05:2d:c7:36:
                    58:22:c6:81:92:0b:d7:11:55:bc:d1:6e:89:d1:af:
                    66:12:05:ab:f8:d9:da:6b:c7:eb:7a:10:63:5e:35:
                    4f:06:4b:98:78:8a:d6:0f:bd:ca:b2:f7:a2:5c:83:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:6D:12:1A:3A:0E:CB:23:C9:7D:83:1D:79:00:A8:54:B1:47:D8
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34322e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:17:8b:22:6a:c6:4a:60:32:6b:ca:5e:57:2a:d3:25:fc:
         cd:48:f0:55:f2:cc:44:1f:4d:a4:43:1e:74:c0:41:d3:87:2b:
         3d:dc:11:bb:55:5d:d7:95:8a:20:55:de:09:73:8a:4d:c5:89:
         f0:a6:ac:04:0c:f4:f2:26:86:fd:95:f7:b9:9a:9a:bc:ea:d4:
         ff:06:27:3f:1f:2d:a7:b0:eb:3c:cd:c5:1b:c3:eb:f1:0d:e4:
         80:98:be:28:44:bc:67:a6:74:97:1f:b6:ff:be:9b:06:2c:97:
         a8:d9:af:7f:6c:4e:71:6f:93:d9:ac:0c:6e:6d:a7:10:1a:c5:
         12:46:66:f1:7e:c0:b1:d7:76:15:b1:ec:7e:06:29:86:d1:61:
         c6:bf:fc:34:64:d4:d7:09:93:92:11:e5:24:35:d5:b9:5a:c6:
         3c:ee:71:85:24:af:e3:fc:62:57:22:d2:17:8e:2b:af:dc:6d:
         e8:30:47:fc:86:c6:3e:da:e4:9e:6b:40:62:af:e8:ed:14:01:
         1d:e7:4e:f6:6a:2a:3a:cb:c4:28:56:f9:b1:91:00:70:0b:7c:
         ee:1b:6e:d1:fd:61:d4:b0:cc:c9:a3:45:ba:6b:d8:30:86:7d:
         42:ad:dd:b2:75:8f:c5:28:53:6d:ef:58:d6:b8:0a:c8:4e:d2:
         50:04:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:32:14 2025 by rpki-client