Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232342e302f31392d3234203d3e203134323539.roa
File:                     3230302e3131392e3232342e302f31392d3234203d3e203134323539.roa (raw, json)
Hash identifier:          7Qn+rrJviRxdt4hLfpCIIqrgBlJn3zt6260u2jIFuho=
Subject key identifier:   17:F2:7B:10:DC:DB:BD:B4:AB:74:72:CC:24:EF:C5:7F:79:62:51:7F
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       789A3DFA2FFB4579DAE9301FE7A0ABAE0ED40D4C
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232342e302f31392d3234203d3e203134323539.roa
Signing time:             Tue 02 Jun 2026 19:45:58 +0000
ROA not before:           Tue 02 Jun 2026 19:40:58 +0000
ROA not after:            Tue 01 Jun 2027 19:45:58 +0000
asID:                     14259
IP address blocks:        200.119.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9a:3d:fa:2f:fb:45:79:da:e9:30:1f:e7:a0:ab:ae:0e:d4:0d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:58 2026 GMT
            Not After : Jun  1 19:45:58 2027 GMT
        Subject: CN=17F27B10DCDBBDB4AB7472CC24EFC57F7962517F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:9e:ed:a8:e4:2f:f2:aa:5e:8e:e8:51:6e:
                    77:10:58:c8:da:5b:e1:2d:d0:a9:21:ee:96:5a:b2:
                    1d:0d:1c:35:8a:b0:dc:73:08:b6:f7:38:a5:b1:1c:
                    cb:ed:10:ea:df:65:8a:09:8e:ed:ff:30:bf:b6:30:
                    dd:25:37:55:0a:11:e3:a8:8d:52:03:5e:64:81:4f:
                    a1:fc:28:a7:6d:9c:ac:97:d6:ec:8e:0c:2f:c4:b3:
                    f3:8b:e3:f2:fe:e2:90:ce:ce:f1:56:9f:ba:b8:b6:
                    6d:ca:06:2b:1d:72:41:05:98:28:85:84:c5:60:87:
                    b1:74:1a:78:d3:a4:c8:8e:02:af:c2:92:35:91:39:
                    40:8f:80:7e:db:e8:b8:d8:c1:02:77:e7:f6:f0:fd:
                    53:16:db:ac:3a:00:f6:12:b6:a9:cb:e9:2e:8e:b5:
                    69:25:70:69:f3:76:50:40:fa:0d:32:bd:9a:e1:e5:
                    f2:cf:59:6e:b3:ca:7b:e8:8d:36:9f:30:2c:2f:9b:
                    9f:4d:05:30:d1:c7:a7:12:28:7f:ac:15:2e:06:d8:
                    ee:42:e9:a3:6c:89:6b:24:f3:a4:c6:6a:ff:79:d5:
                    fd:7e:29:48:41:fd:be:57:93:84:62:06:f6:07:18:
                    2e:22:55:e7:c1:2e:ce:0c:d1:08:7e:17:e9:dc:6d:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F2:7B:10:DC:DB:BD:B4:AB:74:72:CC:24:EF:C5:7F:79:62:51:7F
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232342e302f31392d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:32:59:6a:df:97:b0:1e:e0:ef:cd:e4:c0:e1:1c:af:c7:33:
         80:8b:20:0d:10:8d:c8:e0:ed:8f:41:eb:74:22:2e:42:23:7a:
         a3:76:dc:25:e1:05:9b:5a:8e:f6:69:56:fe:e4:2d:7e:8e:9d:
         a4:9e:6e:d0:7d:25:a9:49:ba:94:d4:d0:be:e2:19:58:f8:07:
         7e:c8:e0:70:a8:7e:27:39:f2:30:8c:81:a9:47:5a:d4:9c:37:
         97:fc:e2:f7:39:5c:99:32:6a:62:60:d3:cf:06:e6:2f:d4:71:
         fa:35:65:db:b8:c3:6d:6c:ff:a1:88:9a:b8:51:a5:5d:d7:dd:
         ad:18:94:89:b2:3d:2e:ef:a3:a7:a2:50:23:c9:11:2b:4a:4d:
         a6:d0:b3:b2:c2:5c:58:51:41:bb:e2:39:31:da:26:b6:3e:bc:
         ef:80:df:2d:ac:f3:12:2b:e4:ca:fa:05:7d:3f:30:2c:cb:36:
         f3:55:80:64:2f:b6:91:13:72:18:97:23:04:17:af:3e:98:00:
         d8:9b:a1:7d:76:1f:5d:fd:9e:2b:45:c5:d7:89:24:89:61:de:
         ba:4f:56:d5:96:23:e8:52:6b:b1:74:62:9d:2c:f9:12:0f:c5:
         79:49:a8:6f:35:63:50:f8:c2:85:3d:1c:41:b6:ca:47:b7:3f:
         5a:57:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:44:22 2026 by rpki-client