Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa
File:                     3230302e38312e35382e302f32332d3234203d3e203532323538.roa (raw, json)
Hash identifier:          /+2prDEs7YuVyNLzaZGcFokg/fjEiA22KPVeY9JebZg=
Subject key identifier:   6B:A0:1B:2A:CF:F0:E9:DC:8A:39:C1:E3:2D:B7:88:3F:AD:EE:8E:63
Certificate issuer:       /CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
Certificate serial:       031323E465BCC4DEDDA6C9114185BCE5A2E9922D
Authority key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa
Signing time:             Tue 01 Jul 2025 16:24:18 +0000
ROA not before:           Tue 01 Jul 2025 16:19:18 +0000
ROA not after:            Tue 30 Jun 2026 16:24:18 +0000
asID:                     52258
IP address blocks:        200.81.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:13:23:e4:65:bc:c4:de:dd:a6:c9:11:41:85:bc:e5:a2:e9:92:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
        Validity
            Not Before: Jul  1 16:19:18 2025 GMT
            Not After : Jun 30 16:24:18 2026 GMT
        Subject: CN=6BA01B2ACFF0E9DC8A39C1E32DB7883FADEE8E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:ec:7e:4c:6d:04:44:83:dd:89:2a:1c:f4:
                    59:f6:c8:11:9f:88:3e:a3:5d:06:05:9e:00:1d:82:
                    76:76:21:12:c5:1a:69:2d:f4:e0:53:f7:cc:31:b0:
                    5b:5d:eb:37:6a:6c:ed:dc:ff:92:78:0e:e0:16:8b:
                    47:78:b3:9f:31:db:ee:6b:be:29:57:73:c2:6d:60:
                    ec:60:c1:c8:f0:3b:f3:7a:20:37:a2:bf:7f:45:c9:
                    7a:cc:05:a6:5a:c7:b6:bf:d1:fc:4d:07:70:65:75:
                    0d:e3:89:5c:1b:a9:80:7f:c4:65:92:f0:e8:3f:81:
                    0f:b6:83:45:eb:d3:03:6f:a9:6a:98:8f:57:ef:e0:
                    a8:a3:f3:be:70:e2:9c:76:a9:b7:0c:5e:a0:4e:6c:
                    e9:71:3c:99:4e:14:8b:f4:e9:ca:d8:ce:6e:47:e4:
                    17:4a:00:ae:04:56:07:69:db:be:b0:ba:80:7e:a0:
                    94:a4:59:a1:be:31:f2:48:33:16:2b:70:1d:72:4f:
                    9a:dd:32:96:3e:dd:2a:55:e8:74:55:be:57:20:57:
                    53:31:30:f8:75:89:3c:33:64:ea:fa:27:f5:6f:11:
                    08:ad:e1:6b:3c:68:2f:09:d0:8a:0a:5d:a0:7f:01:
                    2a:03:b9:9e:de:46:2c:68:6f:30:80:2c:4f:0a:e7:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:1B:2A:CF:F0:E9:DC:8A:39:C1:E3:2D:B7:88:3F:AD:EE:8E:63
            X509v3 Authority Key Identifier:
                keyid:80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:28:25:91:38:a2:35:d5:ae:c9:ce:00:70:f4:3b:11:81:
         5c:93:ec:b7:ae:35:72:bb:14:77:bf:7a:0a:c5:b8:3c:1a:98:
         18:c0:6a:73:a5:f7:9d:84:ec:6c:c1:45:c0:08:2d:24:94:97:
         cf:50:99:13:88:61:b7:9b:18:77:39:44:56:22:db:0d:78:a1:
         82:0c:c4:28:9f:b1:ba:b7:8c:1e:8a:c2:5c:c9:39:ff:79:ff:
         f6:d0:ae:02:39:c8:7c:47:08:8f:f7:9b:7b:c4:00:01:c0:98:
         b0:9a:cd:c3:c8:55:2f:ec:37:ec:cb:f1:14:38:12:09:ee:84:
         ec:81:c6:05:c2:38:a8:46:f5:d2:fe:e2:7e:96:3e:a6:79:49:
         2f:bf:f9:bc:8c:1a:23:9c:64:a1:3b:d1:9e:75:9e:10:69:53:
         f1:3f:bf:db:4a:dd:2a:0c:29:e4:95:37:c7:18:da:86:ea:d4:
         bf:96:12:c2:0b:97:91:c1:bf:ed:bf:0d:49:57:81:94:c6:b0:
         30:15:0b:1c:bb:bb:53:cb:19:99:5e:18:32:d5:1f:a2:2f:58:
         c8:ad:8c:8d:a9:94:6e:6a:3f:69:25:ee:ad:2d:bc:07:42:1e:
         9d:41:34:c3:6b:e2:48:45:e0:6b:08:2e:2f:4e:47:ff:08:61:
         77:f9:64:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 04:46:08 2025 by rpki-client