Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136302e302f31392d3234203d3e203134323539.roa
File:                     3230302e37342e3136302e302f31392d3234203d3e203134323539.roa (raw, json)
Hash identifier:          fx2Vx2ruLeP4+1r0UD61trVG1j2tqLYcERdc6BqMRzw=
Subject key identifier:   F8:B6:07:DD:BA:A8:6A:D9:A4:4E:10:86:5C:14:93:CC:53:69:72:8F
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       427118E3F7DB68D18591ABA4E3F16703DF895314
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136302e302f31392d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 19:25:08 +0000
ROA not before:           Tue 01 Jul 2025 19:20:08 +0000
ROA not after:            Tue 30 Jun 2026 19:25:08 +0000
asID:                     14259
IP address blocks:        200.74.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:71:18:e3:f7:db:68:d1:85:91:ab:a4:e3:f1:67:03:df:89:53:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:08 2025 GMT
            Not After : Jun 30 19:25:08 2026 GMT
        Subject: CN=F8B607DDBAA86AD9A44E10865C1493CC5369728F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:65:7a:d6:05:b1:db:3b:31:0c:4b:f3:e6:
                    77:19:26:06:e4:82:e8:ed:c6:42:b2:b0:68:c2:c3:
                    88:5a:d9:c3:48:c8:c0:7e:aa:79:d1:7d:1b:57:02:
                    d9:07:58:2a:4e:e9:27:7d:1d:a3:1d:e7:fe:28:9e:
                    5e:04:3d:63:ee:dc:5a:6d:64:c4:73:69:9b:44:84:
                    00:dd:57:cb:1e:64:da:69:ab:89:b5:00:8e:93:1a:
                    2a:57:d1:bc:d3:c3:b8:cc:a5:41:69:90:9d:fb:05:
                    47:c9:c0:75:b0:50:06:03:3c:2a:92:d0:2b:d9:06:
                    3d:c8:03:5f:de:54:02:6a:68:cd:f6:90:14:14:04:
                    44:df:6b:46:f6:ad:d2:8d:c2:32:84:ab:9a:d1:a5:
                    86:68:03:bb:86:fd:ff:e4:76:a0:f7:9c:be:bd:6d:
                    8b:08:c4:b4:cc:ad:7d:8e:94:94:9a:78:ef:14:c3:
                    e8:bd:d7:ec:0a:75:68:58:d7:9a:df:8b:ea:09:23:
                    e3:72:77:6e:be:57:b6:35:b3:ce:4e:2a:3b:4f:38:
                    75:0e:bf:f6:1f:60:24:d8:2c:a8:40:05:d6:39:f1:
                    92:0d:4c:37:75:83:1b:f2:93:1d:5c:f5:12:0f:e9:
                    fc:e1:a6:39:50:8d:9e:10:fa:d7:fb:4b:70:4a:3f:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:07:DD:BA:A8:6A:D9:A4:4E:10:86:5C:14:93:CC:53:69:72:8F
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136302e302f31392d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:95:49:18:9e:ad:a2:2a:0d:1d:48:b3:cc:b3:18:38:27:
         b3:c1:05:c2:a0:ea:fd:22:41:ac:e6:21:a9:e4:ed:95:19:5c:
         34:00:63:68:d3:08:f9:53:ef:0a:77:d0:dd:88:b4:64:f9:7d:
         98:ed:18:dc:69:3a:64:4b:90:4f:e1:2c:ab:06:62:9f:cf:47:
         c8:4d:77:5f:db:d7:4c:9d:12:31:a2:b6:1a:8a:b5:39:35:23:
         42:49:12:29:4d:f1:cd:7b:7f:38:cb:31:c6:5f:67:9c:88:33:
         44:20:8d:d9:7b:ec:02:c8:82:a8:85:9d:5b:51:2b:97:f3:88:
         c9:a4:40:b6:ef:90:41:58:ce:13:83:62:b9:c4:dd:3a:83:a0:
         ca:de:31:68:dc:3c:fd:9c:e9:54:98:66:43:ff:df:60:18:c5:
         80:44:3a:9b:97:39:55:a0:26:a9:44:06:75:3e:77:27:aa:f7:
         20:fe:71:62:a3:ab:ad:85:73:b6:68:d6:ba:69:25:53:fd:5a:
         14:25:89:21:56:62:66:0a:3d:3f:3c:db:c6:0c:dd:a4:b6:8f:
         68:34:77:3a:51:c1:ba:68:c7:76:d3:d3:68:e6:99:f4:3e:a6:
         df:1a:c2:f6:eb:73:00:79:87:be:62:3f:8b:b4:3f:90:77:9b:
         a2:34:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:00:21 2025 by rpki-client