Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136332e302f32342d3234203d3e203138383232.roa
File:                     3230302e37342e3136332e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          q0Bl0CffEL/0Tx2nNQFoy7gQ7dNvXVPX6phckUsqMZw=
Subject key identifier:   A7:45:AE:7F:6C:0A:2D:2B:EC:11:FF:A3:88:FD:1E:37:FF:EE:F7:35
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       39C737D2A8FBD73A6367D28D8C928453908D82DA
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136332e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:27 +0000
ROA not before:           Tue 01 Jul 2025 19:20:27 +0000
ROA not after:            Tue 30 Jun 2026 19:25:27 +0000
asID:                     18822
IP address blocks:        200.74.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c7:37:d2:a8:fb:d7:3a:63:67:d2:8d:8c:92:84:53:90:8d:82:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:27 2025 GMT
            Not After : Jun 30 19:25:27 2026 GMT
        Subject: CN=A745AE7F6C0A2D2BEC11FFA388FD1E37FFEEF735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:ca:0e:35:13:a8:9b:01:19:00:60:df:a4:
                    a7:57:98:ad:0a:82:3e:8a:5e:db:5f:b0:34:92:96:
                    f6:03:9d:e1:e1:38:3a:35:cb:a6:2b:ee:51:50:7f:
                    f1:0d:79:34:5b:21:41:2c:17:80:2e:6f:8d:3e:92:
                    bb:43:dd:a2:68:9b:d1:cf:7f:f0:c4:48:b4:74:2c:
                    f9:cb:d9:0e:01:5e:05:f5:f9:9a:46:ea:80:bb:8a:
                    51:4e:bd:e1:d5:1c:65:40:4f:e5:61:54:37:13:4a:
                    25:fc:84:b9:ac:f9:1a:52:7e:62:a1:84:5e:55:14:
                    a5:fc:f5:a6:a1:71:05:a8:2d:5a:79:68:85:da:51:
                    83:0f:b3:cb:0d:c9:c5:1a:51:bc:47:05:33:be:95:
                    49:94:01:6e:a0:1c:fc:00:c3:2e:c7:e3:72:6d:a4:
                    e3:99:3c:32:49:47:4d:6d:1d:ea:0d:1f:ed:cf:0c:
                    67:3d:03:f8:64:40:a1:a3:63:3a:5f:68:26:c5:1a:
                    dd:98:52:7f:cd:ab:64:62:31:d3:0d:78:b9:ac:bb:
                    f8:5c:21:77:85:b2:9c:bd:b3:b1:e6:4c:d7:8c:25:
                    e3:e7:c2:ee:54:3d:b5:08:38:ad:93:6f:77:ef:4b:
                    e5:7d:83:97:99:3e:be:82:c2:1c:85:d5:60:70:b9:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:AE:7F:6C:0A:2D:2B:EC:11:FF:A3:88:FD:1E:37:FF:EE:F7:35
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136332e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:47:c7:4a:ad:61:03:12:5b:37:d2:37:24:ed:de:8d:c8:03:
         09:a9:2a:b5:cd:59:84:bd:68:32:71:89:31:df:3f:58:ca:c0:
         ca:ba:58:31:c8:af:e6:6f:f6:93:c1:85:18:b2:87:0c:9c:e6:
         36:29:88:32:5e:b9:b6:cd:1e:b7:8d:ad:30:d3:c6:7b:23:9b:
         9e:a5:cd:3c:c9:d9:ca:aa:0a:97:d0:e0:6b:b9:fd:83:c1:03:
         25:c1:3d:a3:8d:fb:e2:f2:4e:37:bf:4f:d6:c9:08:41:d1:ff:
         e4:3b:cb:ff:a9:10:4b:2a:02:b2:bc:42:7d:1e:17:79:94:6c:
         1b:7e:81:12:be:31:ab:8b:31:9d:2f:0a:3c:8f:e4:0f:75:84:
         ca:1f:5d:2f:cf:e4:bc:43:fa:91:30:1c:4d:44:40:7f:c9:4c:
         4a:ed:75:6b:b7:e8:3c:65:9d:cc:2e:14:4c:f5:cc:9b:4d:69:
         48:28:b6:96:1f:c6:bd:f7:af:6d:c3:14:1a:48:38:00:f5:38:
         70:c5:6a:16:6d:14:3f:9f:cd:44:e8:18:de:fe:37:c7:3e:d4:
         89:22:a3:af:28:82:46:74:39:d1:f1:4a:ec:ab:89:83:9c:51:
         0c:55:59:b1:c6:d2:84:2e:10:6b:71:0c:2e:eb:45:c9:48:33:
         c0:64:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:19:28 2025 by rpki-client