Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232352e302f32342d3234203d3e203138383232.roa
File:                     3230302e3131392e3232352e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          9i6RwotsBUSJRytgEFv86ALLWJUkQKbDU1mL44/mUsU=
Subject key identifier:   61:1E:63:86:71:79:81:01:01:61:1C:78:4E:0D:FA:B6:DB:C9:1D:51
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       180C40CB779A3323DD82465607EF693FC61B5490
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232352e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:58 +0000
ROA not before:           Tue 02 Jun 2026 19:40:58 +0000
ROA not after:            Tue 01 Jun 2027 19:45:58 +0000
asID:                     18822
IP address blocks:        200.119.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0c:40:cb:77:9a:33:23:dd:82:46:56:07:ef:69:3f:c6:1b:54:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:58 2026 GMT
            Not After : Jun  1 19:45:58 2027 GMT
        Subject: CN=611E63867179810101611C784E0DFAB6DBC91D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:12:87:a3:09:55:9e:ce:d4:9e:ca:98:7d:
                    cf:43:2a:0e:2f:9f:cb:06:8a:57:e3:d2:9b:07:a1:
                    f6:2e:54:75:46:08:94:f0:cf:0d:2b:d4:46:74:9f:
                    56:64:a0:e9:66:6a:65:25:c4:13:f7:03:89:8a:b2:
                    75:7b:50:7e:13:5a:a2:2f:f6:56:35:a6:f5:08:3c:
                    0f:53:39:c8:d6:2c:ea:2c:af:cc:ef:ec:43:1e:56:
                    ba:88:ef:81:34:ce:e1:e2:89:11:fa:e4:f9:99:9c:
                    e5:df:ee:7a:26:21:f2:1c:0a:cf:ee:61:cb:3b:82:
                    00:53:ac:5b:2e:9a:f0:8c:62:9f:4d:f0:9f:2c:c6:
                    45:f3:dd:77:eb:bf:e2:aa:69:e6:a1:fc:16:d8:cc:
                    61:d5:b1:f0:81:7d:82:ee:0b:76:a7:0d:72:65:90:
                    16:e4:3c:f5:13:e4:8e:c5:2d:29:cd:ae:3e:9b:10:
                    2a:4f:95:a3:71:a6:de:5e:84:c6:5c:13:6c:36:0b:
                    bd:d8:49:18:4d:34:9a:20:0a:a1:05:c3:d1:02:b9:
                    67:0e:f7:3a:49:30:81:fe:79:0b:4d:69:aa:89:92:
                    e4:ee:b5:19:3d:4f:3a:39:10:31:72:cf:89:29:30:
                    af:27:30:0d:e8:87:39:84:7b:c8:35:eb:69:02:a6:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1E:63:86:71:79:81:01:01:61:1C:78:4E:0D:FA:B6:DB:C9:1D:51
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232352e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:71:23:1f:08:cc:a3:07:f5:76:f2:e7:db:2d:c0:16:c4:1e:
         6b:aa:93:5b:da:35:1e:d9:ad:37:00:3b:28:44:3d:73:dd:7c:
         62:df:93:2a:a1:19:7a:77:b4:59:75:41:6f:47:6a:a1:c3:15:
         7b:c1:b5:7e:72:36:35:66:87:a8:f3:09:05:c2:a5:a7:89:c3:
         ae:21:dd:83:fb:5e:93:cd:3d:bd:b7:c3:eb:dc:15:5c:6a:91:
         64:a0:99:8e:0b:bf:38:88:2d:fd:2c:66:f8:0d:db:24:d2:78:
         27:a5:1d:4c:fe:29:4b:9a:40:ae:70:98:29:58:70:95:94:3b:
         9e:9d:14:14:87:16:87:24:aa:a4:eb:b3:4c:e2:36:ca:42:6f:
         31:0f:64:67:74:70:1c:64:21:21:53:06:11:83:ac:a0:af:a0:
         0b:57:2a:b8:09:73:4f:df:10:fd:4b:b7:c0:f0:f6:d6:cf:58:
         91:7d:a7:73:0f:79:f6:92:d1:2b:c2:7d:82:37:c9:c6:5c:e0:
         81:e8:01:4a:b4:5e:f3:7f:47:c5:4f:05:40:65:ce:4e:4d:21:
         df:dd:39:c6:04:aa:8d:27:d0:d2:7a:16:97:13:2a:7b:cc:18:
         c7:15:7d:35:7a:0f:d0:bd:05:40:f9:ea:1b:18:cc:3c:7c:71:
         fd:72:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:14:00 2026 by rpki-client