Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35382e302f32342d3234203d3e203138383232.roa
File:                     3230302e3132342e35382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          grdRsYhTJBPwkVz+jG8cn7msdPnhQGXZ1IaQ5iX7c00=
Subject key identifier:   06:49:B6:F5:D4:2B:94:FA:99:91:7A:E7:81:52:7D:7D:C8:A5:88:F6
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       3E1AE81DBBB4AEB4C788509F45AD2623C004824E
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:25 +0000
ROA not before:           Tue 01 Jul 2025 19:20:25 +0000
ROA not after:            Tue 30 Jun 2026 19:25:25 +0000
asID:                     18822
IP address blocks:        200.124.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1a:e8:1d:bb:b4:ae:b4:c7:88:50:9f:45:ad:26:23:c0:04:82:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:25 2025 GMT
            Not After : Jun 30 19:25:25 2026 GMT
        Subject: CN=0649B6F5D42B94FA99917AE781527D7DC8A588F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:85:98:97:0e:82:59:bd:d2:83:e2:5f:e3:
                    a3:09:5c:9d:b7:87:fc:9c:7d:06:ac:8b:ef:e5:53:
                    11:8c:43:df:22:fe:d0:e5:a6:3a:0f:9b:de:95:97:
                    17:ee:14:f9:40:58:cf:1d:32:36:5a:a6:c9:f7:92:
                    a8:ea:51:24:bf:91:76:04:48:24:c3:73:62:ce:a6:
                    42:0a:26:b0:d1:2b:83:6c:f8:50:39:60:9c:fe:09:
                    9f:06:e9:33:93:ae:6e:ec:00:8f:cf:32:23:68:53:
                    96:ea:a1:d8:ec:91:63:2c:86:4b:df:c8:cb:db:b6:
                    16:f9:f0:d8:3f:c7:53:88:24:2f:61:1b:64:fd:a1:
                    18:89:e2:b8:f2:51:30:88:fb:a6:24:55:3a:e9:83:
                    04:61:21:b5:ed:fc:c2:0c:d5:db:fe:38:2a:d5:91:
                    87:2d:b2:4a:37:b0:66:06:54:d9:1e:60:9b:ed:58:
                    1b:74:fa:aa:79:94:65:87:ba:94:da:07:ed:07:44:
                    3e:24:1e:6d:e1:ce:18:db:d6:f3:09:f8:e1:4f:10:
                    a2:24:cd:e8:85:dd:3b:1d:8a:aa:5d:72:d3:6c:3a:
                    85:5c:e6:44:97:7e:05:0b:52:e2:84:02:dd:5f:b6:
                    18:f0:16:97:6e:d5:0a:59:14:4d:73:2d:92:ce:0f:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:49:B6:F5:D4:2B:94:FA:99:91:7A:E7:81:52:7D:7D:C8:A5:88:F6
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:35:10:7c:89:5a:b5:af:67:b1:f5:a8:08:95:36:2b:4b:
         c8:d1:29:8e:5c:56:28:24:74:8f:19:ef:7b:2b:02:de:4e:b3:
         1f:0b:36:ce:a4:c8:06:51:0c:7d:d6:82:d0:7a:ac:de:e2:68:
         3a:69:8f:3d:79:63:5a:e5:e5:d1:be:8f:c6:49:4f:dc:fc:c8:
         eb:d0:58:fb:7c:72:67:3c:90:c8:96:d8:6b:f2:94:e4:68:f5:
         a1:9f:4e:95:60:f5:c1:d4:89:3d:b3:17:93:36:0d:c1:58:f1:
         78:b3:50:ea:99:3f:ef:9a:75:e4:51:4c:8e:a4:e5:78:22:9d:
         98:ab:9a:a4:11:90:1f:9c:a7:94:c7:81:e3:53:9e:fa:56:9c:
         2e:f7:bd:27:fd:ac:8b:e5:d9:0f:1a:f6:7c:26:8d:fb:5a:ae:
         ea:57:b0:74:3b:5b:24:78:a1:4c:a0:41:4b:c7:5d:c3:12:e1:
         c8:54:37:40:5b:cd:0a:d8:df:1e:8b:a3:db:0f:a0:3c:3a:78:
         e3:49:da:59:e8:f1:e8:49:5f:e8:de:94:1a:c7:ef:d1:00:8e:
         54:df:a7:ff:a3:2f:b5:a0:51:29:25:2e:7f:9d:84:18:63:66:
         97:b8:79:58:ce:6f:13:07:60:ba:2a:85:92:e8:76:c8:36:cf:
         a4:ab:d3:c1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPhroHbu0rrTHiFCfRa0mI8AEgk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMjVaFw0yNjA2MzAxOTI1MjVaMDMxMTAvBgNV
BAMTKDA2NDlCNkY1RDQyQjk0RkE5OTkxN0FFNzgxNTI3RDdEQzhBNTg4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHWYWYlw6CWb3Sg+Jf46MJXJ23
h/ycfQasi+/lUxGMQ98i/tDlpjoPm96VlxfuFPlAWM8dMjZapsn3kqjqUSS/kXYE
SCTDc2LOpkIKJrDRK4Ns+FA5YJz+CZ8G6TOTrm7sAI/PMiNoU5bqodjskWMshkvf
yMvbthb58Ng/x1OIJC9hG2T9oRiJ4rjyUTCI+6YkVTrpgwRhIbXt/MIM1dv+OCrV
kYctsko3sGYGVNkeYJvtWBt0+qp5lGWHupTaB+0HRD4kHm3hzhjb1vMJ+OFPEKIk
zeiF3TsdiqpdctNsOoVc5kSXfgULUuKEAt1fthjwFpdu1QpZFE1zLZLODwvxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBkm29dQrlPqZkXrngVJ9fciliPYwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMyMzAzMDJlMzEzMjM0MmUzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh8OjAN
BgkqhkiG9w0BAQsFAAOCAQEAoEk1EHyJWrWvZ7H1qAiVNitLyNEpjlxWKCR0jxnv
eysC3k6zHws2zqTIBlEMfdaC0Hqs3uJoOmmPPXljWuXl0b6PxklP3PzI69BY+3xy
ZzyQyJbYa/KU5Gj1oZ9OlWD1wdSJPbMXkzYNwVjxeLNQ6pk/75p15FFMjqTleCKd
mKuapBGQH5ynlMeB41Oe+lacLve9J/2si+XZDxr2fCaN+1qu6lewdDtbJHihTKBB
S8ddwxLhyFQ3QFvNCtjfHouj2w+gPDp440naWejx6Elf6N6UGsfv0QCOVN+n/6Mv
taBRKSUuf52EGGNml7h5WM5vEwdguiqFkuh2yDbPpKvTwQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:40:29 2025 by rpki-client