Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138342e302f32342d3234203d3e203138383232.roa
File:                     3230302e37342e3138342e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          QQHhtOYq1mnbqYs/K9mAnwwd1B45Sp4uEEXIkpKONUE=
Subject key identifier:   9F:23:4E:74:D2:90:93:93:AB:99:8D:0B:03:CE:F4:37:BA:AC:E7:69
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       43BDFD9F80D117AE20E1C91A888D98DC818447EF
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138342e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:10 +0000
ROA not before:           Tue 01 Jul 2025 19:20:10 +0000
ROA not after:            Tue 30 Jun 2026 19:25:10 +0000
asID:                     18822
IP address blocks:        200.74.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:fd:9f:80:d1:17:ae:20:e1:c9:1a:88:8d:98:dc:81:84:47:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:10 2025 GMT
            Not After : Jun 30 19:25:10 2026 GMT
        Subject: CN=9F234E74D2909393AB998D0B03CEF437BAACE769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:0c:2a:50:f8:71:91:f3:ff:2c:f2:c3:ed:
                    1f:02:ae:79:f5:c0:eb:e5:ba:20:19:1f:75:5a:d8:
                    09:65:b7:a0:7c:8f:58:02:c4:9d:93:0a:5d:be:cd:
                    5c:c2:d9:b4:9b:1e:1b:90:3c:58:56:77:d9:5d:63:
                    69:f8:c5:7c:fa:32:e1:68:ef:f3:78:b7:26:c2:b8:
                    25:46:54:2f:12:6a:8d:e5:e6:74:83:dd:cd:d8:29:
                    a5:7e:ac:dd:b5:91:5e:2c:94:bc:5a:a7:23:0c:c1:
                    f2:50:31:ae:f5:ec:5c:61:4f:1a:68:3e:ef:9d:e7:
                    7b:8c:27:ed:30:0f:18:22:42:8e:52:a8:d8:e9:53:
                    58:a3:ff:32:ad:53:89:8b:ac:06:b4:d5:d4:ae:ca:
                    02:ec:ad:d4:0a:80:84:cf:a1:a7:82:24:40:5d:c0:
                    a8:a0:ba:cb:62:cf:f2:b2:fa:a4:86:c0:de:36:95:
                    4f:28:20:10:20:93:0b:ab:60:ae:25:b6:36:50:7c:
                    72:4c:a8:ce:e0:00:30:9c:bd:e4:71:c4:94:55:b6:
                    14:cb:b1:5c:66:1a:4c:da:9f:f7:67:6d:15:6e:e0:
                    b8:0b:69:30:0a:55:56:ef:09:87:9d:61:72:76:1e:
                    b1:6f:c1:67:34:c7:f7:8f:58:5b:e6:77:a9:7e:0d:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:23:4E:74:D2:90:93:93:AB:99:8D:0B:03:CE:F4:37:BA:AC:E7:69
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138342e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:9d:95:11:25:ac:29:00:55:2b:ff:5c:0e:5f:88:d1:62:
         96:f0:64:9e:76:ba:24:23:97:c9:64:d5:56:b4:6a:96:2c:ef:
         57:a8:25:96:cc:ff:1b:21:fd:58:1f:58:18:3e:18:11:1f:49:
         ed:49:02:f3:f1:98:b2:05:ca:bf:65:ae:d4:5f:21:e2:b4:5b:
         a8:26:67:24:d7:6f:43:01:84:6d:2e:15:50:02:a9:ea:95:1f:
         22:6d:8e:91:a7:e0:e8:3e:2b:27:c6:1f:d6:2e:8f:ef:fb:41:
         3f:82:8b:5b:0b:fa:64:ec:4a:fe:99:b5:c0:65:88:17:a2:80:
         e1:22:5a:6c:41:fc:75:71:03:bc:57:29:42:27:ee:90:db:ab:
         48:2d:d6:25:97:2e:2c:1d:e0:84:04:77:31:01:ec:91:4e:3f:
         8d:1c:0a:e1:f9:58:1f:50:27:1e:00:29:7f:a4:59:80:a3:fe:
         4f:af:ee:51:dc:1b:0f:ad:31:51:0a:ed:ed:4e:b6:73:e4:d1:
         36:53:f6:4d:d2:80:d7:f8:7d:c5:2c:85:ae:9c:04:37:34:6a:
         fa:96:c7:39:1f:0f:b5:6a:fd:7a:9c:7b:6b:9c:92:71:bb:e0:
         92:49:3f:14:47:14:f7:0e:95:01:fa:d6:41:51:bb:35:9b:48:
         85:ac:b3:cb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQ739n4DRF64g4ckaiI2Y3IGER+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMTBaFw0yNjA2MzAxOTI1MTBaMDMxMTAvBgNV
BAMTKDlGMjM0RTc0RDI5MDkzOTNBQjk5OEQwQjAzQ0VGNDM3QkFBQ0U3NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgAwqUPhxkfP/LPLD7R8Crnn1
wOvluiAZH3Va2Allt6B8j1gCxJ2TCl2+zVzC2bSbHhuQPFhWd9ldY2n4xXz6MuFo
7/N4tybCuCVGVC8Sao3l5nSD3c3YKaV+rN21kV4slLxapyMMwfJQMa717FxhTxpo
Pu+d53uMJ+0wDxgiQo5SqNjpU1ij/zKtU4mLrAa01dSuygLsrdQKgITPoaeCJEBd
wKigustiz/Ky+qSGwN42lU8oIBAgkwurYK4ltjZQfHJMqM7gADCcveRxxJRVthTL
sVxmGkzan/dnbRVu4LgLaTAKVVbvCYedYXJ2HrFvwWc0x/ePWFvmd6l+DSQlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnyNOdNKQk5OrmY0LA870N7qs52kwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMyMzAzMDJlMzczNDJlMzEzODM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhKuDAN
BgkqhkiG9w0BAQsFAAOCAQEAONKdlRElrCkAVSv/XA5fiNFilvBknna6JCOXyWTV
VrRqlizvV6gllsz/GyH9WB9YGD4YER9J7UkC8/GYsgXKv2Wu1F8h4rRbqCZnJNdv
QwGEbS4VUAKp6pUfIm2Okafg6D4rJ8Yf1i6P7/tBP4KLWwv6ZOxK/pm1wGWIF6KA
4SJabEH8dXEDvFcpQifukNurSC3WJZcuLB3ghAR3MQHskU4/jRwK4flYH1AnHgAp
f6RZgKP+T6/uUdwbD60xUQrt7U62c+TRNlP2TdKA1/h9xSyFrpwENzRq+pbHOR8P
tWr9epx7a5yScbvgkkk/FEcU9w6VAfrWQVG7NZtIhayzyw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:30:07 2025 by rpki-client