Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35372e302f32342d3234203d3e203138383232.roa
File:                     3230302e3132342e35372e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          sEWEfPE8GtV0jZcj5E8+lD7fA9dO+NfxGPKiwXIwwl4=
Subject key identifier:   92:61:2F:7A:C9:E6:89:6A:28:F0:89:05:AE:66:DC:F9:65:C7:5E:17
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       01EC903B8D2F13B0A7C1AAEB911A8668E5198C7D
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35372e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:22 +0000
ROA not before:           Tue 01 Jul 2025 19:20:22 +0000
ROA not after:            Tue 30 Jun 2026 19:25:22 +0000
asID:                     18822
IP address blocks:        200.124.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ec:90:3b:8d:2f:13:b0:a7:c1:aa:eb:91:1a:86:68:e5:19:8c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:22 2025 GMT
            Not After : Jun 30 19:25:22 2026 GMT
        Subject: CN=92612F7AC9E6896A28F08905AE66DCF965C75E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:58:5c:d3:e3:9b:49:fc:d0:77:c3:dd:31:
                    36:37:4e:ad:0a:a8:b8:39:e5:c9:c3:4d:78:8b:0b:
                    66:49:12:92:33:95:4b:71:fc:6b:e2:fc:66:e6:86:
                    51:af:c6:32:d4:45:68:1d:ba:d6:92:77:ab:26:07:
                    0f:34:a4:53:fa:11:cb:fd:93:31:2b:87:3c:97:24:
                    80:18:da:8c:63:e1:d5:91:4c:4a:7e:af:29:ab:95:
                    21:6a:8d:cf:5c:36:be:3a:a7:b6:e0:84:88:f2:d5:
                    ee:66:b0:31:02:82:19:e4:79:77:c2:d5:26:57:12:
                    26:66:95:83:a0:63:a1:f0:05:2a:2a:a2:72:87:96:
                    0e:01:f3:bd:03:4c:2e:6d:84:cf:24:0c:c0:20:34:
                    f1:f6:d5:28:bc:81:89:bb:d7:ff:e7:b5:8d:d5:c7:
                    7d:b5:3c:cd:ad:85:d1:2e:22:7c:34:b7:e9:54:ff:
                    99:26:1a:06:20:c3:63:55:0f:b6:2f:7e:5c:cd:fc:
                    1f:74:55:5f:41:7a:03:b5:59:8a:ef:67:c3:5c:4e:
                    9d:08:e7:d5:5b:8e:61:7e:dc:39:77:f8:ba:57:c2:
                    af:c6:24:3a:1b:29:1f:4d:72:5a:45:a7:05:1c:1c:
                    3b:bc:5b:54:7b:05:72:e9:96:8b:25:2f:38:e3:ea:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:61:2F:7A:C9:E6:89:6A:28:F0:89:05:AE:66:DC:F9:65:C7:5E:17
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35372e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:ea:71:f4:3d:52:0c:e1:82:7e:8d:97:60:ad:13:07:b5:
         cc:80:89:61:35:22:bc:7c:fe:1e:ec:68:04:b0:bf:48:fd:07:
         59:9b:a8:91:0a:6f:e2:f4:20:37:0f:d6:c4:be:d9:4e:a0:93:
         7c:ba:08:7a:c3:71:98:c1:3a:bb:13:fa:26:2d:34:5b:3e:10:
         d2:a6:00:43:d0:60:8b:b1:07:cb:99:ac:1e:2e:c6:c7:df:b6:
         5e:45:8e:7e:fb:9a:f5:21:0d:ec:aa:43:43:4a:c7:ab:6f:e1:
         0c:26:52:55:3a:9c:87:95:fa:de:29:52:3a:a6:5f:cb:95:67:
         ca:35:d3:f2:12:d4:7b:99:93:19:45:0b:b5:6a:b4:60:24:47:
         36:5e:5d:3b:25:3d:5f:53:36:17:45:60:00:06:50:2b:db:80:
         ce:b2:d9:7c:01:f4:4a:6d:d1:de:79:99:00:1c:24:d2:87:45:
         9b:41:a2:ea:0d:34:fa:37:93:03:b5:aa:b8:25:f6:6f:bc:f3:
         b2:76:ca:6e:1e:3c:7e:b8:ef:a0:90:4e:cf:b4:ab:d1:29:b0:
         e9:dc:cd:af:d5:24:de:81:ef:d9:8d:f0:4f:be:08:e3:45:a5:
         ed:30:fa:d0:db:72:ab:a0:14:f3:ed:a4:16:8d:64:a8:5f:be:
         15:67:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:35:16 2025 by rpki-client