Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34362e302f32332d3233203d3e203138383232.roa
File:                     3230302e3132342e34362e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          RIxAkrdPgbiCfONa7JB0I48GYmoA7wq+nzsWW4cOWVU=
Subject key identifier:   FE:67:3E:91:81:7B:06:6B:EA:FC:83:20:91:19:3A:1C:90:DE:8D:AB
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       75A0A4D9D74772E6BABECEE4829481EA9822643E
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34362e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:03 +0000
ROA not before:           Tue 01 Jul 2025 19:20:03 +0000
ROA not after:            Tue 30 Jun 2026 19:25:03 +0000
asID:                     18822
IP address blocks:        200.124.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a0:a4:d9:d7:47:72:e6:ba:be:ce:e4:82:94:81:ea:98:22:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:03 2025 GMT
            Not After : Jun 30 19:25:03 2026 GMT
        Subject: CN=FE673E91817B066BEAFC832091193A1C90DE8DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:e7:77:4e:3f:bd:ff:be:55:f2:f3:37:11:
                    e9:a4:e8:09:d4:69:01:d7:64:a6:a3:f1:75:36:28:
                    7f:d3:8e:fe:1b:a4:c2:94:dc:e7:bf:f4:48:be:10:
                    9c:32:2d:97:25:b1:81:25:34:6e:b1:47:34:d0:8f:
                    b2:95:b6:b0:32:76:7f:d1:47:e3:dc:2c:2a:ca:95:
                    2e:28:69:d3:ac:c1:ea:e8:42:fd:b7:79:84:8c:99:
                    b7:91:f5:38:66:54:11:ca:d5:17:bf:4e:43:45:2e:
                    f8:dc:78:51:03:d1:7d:09:c0:32:01:03:fe:bf:e3:
                    96:3c:fd:83:5a:ca:b7:f2:89:8c:30:01:74:81:ac:
                    04:ed:b8:e1:21:59:3b:e5:16:27:b5:7c:8c:9a:a0:
                    fd:ce:3e:e1:94:d4:35:8a:3a:91:f2:57:5d:6f:ec:
                    bb:21:fe:5c:04:1c:1a:3c:ae:fe:af:ec:45:7f:f2:
                    22:db:de:39:fb:45:e1:8e:3f:55:a0:99:23:13:be:
                    22:4f:21:95:61:91:ed:e7:a8:39:b9:ce:92:de:4e:
                    fc:18:6d:80:96:da:94:cb:6d:bc:11:87:aa:33:44:
                    9c:ce:71:aa:6c:36:2f:ef:41:e7:e0:17:e3:e6:83:
                    f7:02:da:c6:d1:50:18:0c:a8:a4:09:ce:44:bc:24:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:67:3E:91:81:7B:06:6B:EA:FC:83:20:91:19:3A:1C:90:DE:8D:AB
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34362e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:97:a4:fe:bb:28:fd:11:6b:06:48:fb:b3:2e:5d:b0:17:28:
         ed:24:08:63:bd:8a:e7:81:2f:4a:78:30:13:68:66:7c:b0:7b:
         8e:d0:c4:a6:09:f1:37:e3:cb:24:0d:4c:43:70:75:49:66:49:
         50:d8:f1:b6:6e:af:f0:66:7c:ac:a9:b7:ae:ba:d5:1b:3e:c1:
         10:04:48:0d:74:f6:60:16:b6:5a:f4:54:00:e8:f8:e7:19:2d:
         78:0d:eb:7a:50:69:d0:22:cf:6e:97:6d:33:76:34:15:95:81:
         85:ba:01:14:ad:cb:3b:f5:65:cb:50:26:a5:12:b2:47:1b:63:
         18:bf:02:83:76:8a:0a:f6:d8:03:cf:06:e8:5f:4c:1b:ef:b8:
         87:38:8b:c2:2c:36:90:ad:48:76:6e:12:bc:3b:96:6b:ca:bd:
         d3:21:ec:31:ff:16:f8:08:fb:66:73:68:67:94:e2:eb:35:2a:
         51:54:51:22:9d:a2:4f:da:94:f3:40:e3:0a:20:3c:9c:ce:30:
         76:3b:95:7d:25:53:e7:80:7a:9c:4e:7e:3b:4e:a3:6b:c7:dd:
         f7:a2:01:bd:04:3e:af:42:56:77:de:20:45:12:6a:b2:e8:d6:
         03:b0:a1:d8:bc:2e:18:e3:1e:54:8e:b5:73:c6:1a:21:f9:1e:
         7a:07:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:31:20 2025 by rpki-client