Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35302e302f32332d3234203d3e203138383232.roa
File:                     3230302e3132342e35302e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          qI49XylPUoeGG5HwNQobrG9u5ccg/vH5ECu6nUS5w8E=
Subject key identifier:   A2:97:B5:71:72:D4:D0:9B:59:91:27:0D:DA:57:2C:22:B7:6B:27:26
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       15F515714F5963DFA657B48AAAA23D882FAFE489
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35302e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:18 +0000
ROA not before:           Tue 01 Jul 2025 19:20:18 +0000
ROA not after:            Tue 30 Jun 2026 19:25:18 +0000
asID:                     18822
IP address blocks:        200.124.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f5:15:71:4f:59:63:df:a6:57:b4:8a:aa:a2:3d:88:2f:af:e4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:18 2025 GMT
            Not After : Jun 30 19:25:18 2026 GMT
        Subject: CN=A297B57172D4D09B5991270DDA572C22B76B2726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:1e:95:da:ca:59:1a:13:69:99:c5:06:24:
                    4c:6d:a5:f5:61:78:04:72:53:56:88:93:78:35:38:
                    34:ce:a1:96:1d:38:bd:17:1a:ce:04:da:e5:6e:d3:
                    c3:76:bf:e9:a3:e4:37:76:2b:46:8a:69:8f:5d:71:
                    38:91:0a:a9:69:61:29:be:72:48:e8:34:aa:34:f2:
                    02:bc:ee:66:2d:4f:be:9a:84:0e:51:9c:9c:9f:6b:
                    3b:24:2c:3f:56:e3:ca:02:6a:a1:2d:32:e3:70:bd:
                    0f:83:3c:43:e5:36:62:24:e6:68:27:d8:ce:8a:3a:
                    6d:f4:e7:5f:df:54:19:1d:52:bb:20:09:3c:6b:79:
                    30:54:0d:d1:90:db:46:7f:97:1d:4f:9d:ca:20:06:
                    6d:5c:5f:9f:73:1a:c2:b3:c8:6f:58:83:6c:4e:9c:
                    cd:e2:bd:a2:a4:6b:b2:2c:51:62:4e:18:7d:ba:ec:
                    41:2b:69:34:7f:98:43:bf:42:cf:9a:74:f4:59:af:
                    39:c5:fd:35:2a:ad:d9:a4:7a:e2:29:14:99:46:71:
                    e4:9e:23:a5:ec:55:43:36:59:9d:ec:4f:31:c6:0b:
                    2a:d1:32:39:0d:c8:cb:4e:53:00:ab:b3:3f:6e:da:
                    35:58:f1:97:d7:29:f8:f9:e4:ff:ef:b1:36:a7:b4:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:97:B5:71:72:D4:D0:9B:59:91:27:0D:DA:57:2C:22:B7:6B:27:26
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35302e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:45:31:f5:6b:aa:f9:9e:38:bf:6a:6b:80:0a:e8:98:b9:
         60:11:23:16:46:ee:8d:73:04:ab:fd:bf:c6:1f:d7:52:5b:f4:
         81:a5:dc:94:1f:9c:05:c7:f7:b1:4b:23:7e:d0:0e:04:3d:75:
         fb:ef:99:eb:cc:64:12:e9:75:4c:d1:39:46:d5:c7:98:3e:d0:
         6e:21:65:85:bb:96:00:44:a3:2f:66:f4:0a:70:7e:e8:76:c0:
         bf:eb:1b:05:d6:e2:ee:6e:e0:02:65:d7:6e:a2:78:4e:ce:3b:
         a1:69:6e:b1:2b:80:57:08:5b:a6:61:ac:98:95:f7:5a:33:34:
         03:9e:4c:f5:ab:b9:73:ed:43:c1:46:22:df:ea:7c:9a:fc:ea:
         7d:4a:07:e0:b5:f5:1c:84:3f:97:96:b9:75:9d:57:d9:94:11:
         c5:1e:c3:f9:31:de:0b:d6:1f:db:43:0d:7f:83:88:3a:e7:b0:
         7f:b6:a8:a5:f3:f3:65:ae:c9:8a:ce:79:df:21:a2:3b:0c:62:
         c0:3f:bf:ca:28:06:e1:f6:2e:10:94:0a:bc:78:79:80:d6:e3:
         00:ac:7d:e8:c9:57:d7:2b:e4:84:1d:cc:8e:79:41:d5:e9:c0:
         65:91:43:d1:51:43:d3:7b:75:7d:35:63:af:76:fd:d8:fa:77:
         c1:c6:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:40:27 2025 by rpki-client