Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138332e302f32342d3234203d3e203138383232.roa
File:                     3230302e37342e3138332e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Pt9LiJfFxxonILml0Fwf2hWhoYmPq2l4Jr05jV33B08=
Subject key identifier:   BC:63:19:FB:F8:EA:2E:FC:15:71:E5:51:39:47:7B:69:14:74:B8:B0
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       57C81B1DA744CFB8B4DCF993078128C62020E08F
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138332e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:30 +0000
ROA not before:           Tue 01 Jul 2025 19:20:30 +0000
ROA not after:            Tue 30 Jun 2026 19:25:30 +0000
asID:                     18822
IP address blocks:        200.74.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c8:1b:1d:a7:44:cf:b8:b4:dc:f9:93:07:81:28:c6:20:20:e0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:30 2025 GMT
            Not After : Jun 30 19:25:30 2026 GMT
        Subject: CN=BC6319FBF8EA2EFC1571E55139477B691474B8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:eb:8d:63:90:63:bc:5d:ac:ae:85:2e:28:
                    95:77:7a:cf:65:12:8a:29:41:b5:e2:93:c7:35:a9:
                    9e:d9:05:f3:4a:eb:01:04:45:2e:f3:75:62:33:c7:
                    e4:75:99:84:f5:2c:36:8d:ce:54:34:57:fa:69:30:
                    90:73:9f:f8:77:b3:44:91:87:67:a9:6d:27:a7:f8:
                    5f:47:8e:f5:e5:6f:79:7a:4f:9c:97:81:e2:2f:ca:
                    67:d9:60:fd:20:e5:a3:16:4d:d3:2a:07:f6:e8:99:
                    55:3c:3e:ea:14:18:03:70:2a:5b:89:b5:9d:4f:aa:
                    49:fa:24:ab:1b:bf:d5:e6:fb:e2:1c:2c:8d:c2:69:
                    26:c7:f1:d9:4c:3f:db:e5:41:ec:33:e1:ee:a8:ec:
                    05:c2:3b:a0:a4:97:3f:3f:e3:12:f8:54:ee:2b:46:
                    f9:5b:00:dc:fa:2e:43:8a:28:c3:30:37:7c:6a:08:
                    2e:79:f4:f3:cb:e0:6c:77:c9:f1:29:ae:fa:89:b4:
                    cd:c9:52:e0:48:56:b0:cb:a3:77:f4:34:33:f0:30:
                    11:38:52:b6:11:ae:80:b9:0d:8b:73:1d:d8:c3:53:
                    2b:07:dd:e8:54:94:e8:3a:3a:7b:7d:fa:7e:db:0e:
                    db:fa:cf:e2:6b:0c:5e:f3:48:1a:a7:ff:28:12:ce:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:19:FB:F8:EA:2E:FC:15:71:E5:51:39:47:7B:69:14:74:B8:B0
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138332e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:0b:c1:4f:3f:ba:a2:3d:f4:0b:d6:f6:93:a2:c5:24:b2:
         67:bd:64:6d:b9:1f:b2:8d:9a:70:cc:b7:ad:47:3d:12:8f:4d:
         14:ae:2a:99:21:f2:95:9f:01:95:4f:13:61:98:bf:a5:ac:c5:
         92:a1:bd:23:dc:89:8f:8b:25:c9:5e:22:33:80:ab:0b:9b:87:
         39:85:fc:b7:ca:a9:05:6f:92:16:6e:1a:5c:3c:f5:9c:3c:a9:
         16:3e:de:b3:c4:1a:a1:4b:de:eb:09:4d:11:10:3d:ad:36:51:
         ce:04:34:71:4e:a3:30:22:56:f1:16:08:b9:8b:f7:ab:d4:9d:
         e9:bd:09:6c:bd:84:d9:ac:21:e3:1f:f6:92:66:d0:6b:60:de:
         78:aa:b5:ee:0d:74:e8:3f:9e:0b:c2:62:98:8f:90:ef:36:d7:
         93:9a:7f:b3:8b:f9:3a:74:b5:6c:b0:6d:dc:6e:2e:2e:a0:ce:
         e2:36:31:14:08:01:46:70:76:61:d3:6c:26:7c:50:40:f5:9d:
         8a:1c:6a:16:59:b2:36:c4:d6:73:c6:b5:6f:db:d0:88:be:a1:
         63:fc:82:ca:9b:3c:e6:47:a6:01:c1:11:83:a7:3a:34:c3:d3:
         58:00:a2:64:2e:87:6a:0a:54:65:c8:eb:1a:9a:9c:1b:42:1e:
         bb:10:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:32:16 2025 by rpki-client