Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232392e302f32342d3234203d3e203138383232.roa
File:                     3230302e3131392e3232392e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          s8Zn7TxnCKaBC538btHYHWQM6vLxETezNysgyZFa5dE=
Subject key identifier:   F5:3A:0A:23:82:93:8A:E3:4B:CC:C1:4D:BA:8A:FD:DC:D1:F6:21:46
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       32F016C011EADC3705847F2569DEE0C47347A353
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232392e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:02 +0000
ROA not before:           Tue 02 Jun 2026 19:41:02 +0000
ROA not after:            Tue 01 Jun 2027 19:46:02 +0000
asID:                     18822
IP address blocks:        200.119.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f0:16:c0:11:ea:dc:37:05:84:7f:25:69:de:e0:c4:73:47:a3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:02 2026 GMT
            Not After : Jun  1 19:46:02 2027 GMT
        Subject: CN=F53A0A2382938AE34BCCC14DBA8AFDDCD1F62146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:c5:6f:76:74:2a:dd:6f:ae:45:f1:73:ea:
                    2b:d7:7e:9e:f8:9f:dc:50:dd:81:8b:2f:64:b7:c3:
                    bc:6a:0f:61:1b:8a:e5:1e:f0:a0:80:14:77:bb:6a:
                    ee:ce:2c:b2:6f:15:d9:cb:7a:73:83:a8:22:73:96:
                    b8:aa:f6:fd:b7:0c:73:b1:6b:18:81:86:aa:21:4f:
                    71:42:f7:e8:bd:ad:b2:ee:07:7d:b5:95:8c:e1:28:
                    b5:e5:1b:21:44:a2:1f:cb:05:8c:64:c6:43:31:2a:
                    1a:a4:41:c3:91:05:14:46:35:18:1d:79:2b:79:55:
                    65:53:ef:65:4d:5a:f2:40:80:da:06:33:a8:71:98:
                    6f:0c:6a:aa:b2:0b:47:52:bb:90:49:38:19:09:44:
                    c7:8c:a1:85:98:54:32:07:01:c7:a5:69:f4:c2:57:
                    ba:9d:64:cb:be:74:cc:32:be:8b:54:d3:a1:67:74:
                    d3:de:7b:bb:e3:90:33:4e:4a:aa:2c:db:44:4e:38:
                    b9:df:51:a0:11:8b:57:ae:5f:f7:97:2e:5b:ee:b6:
                    68:13:73:e7:96:5d:c9:21:8f:ac:8b:71:bd:da:9f:
                    15:15:72:7d:4e:20:ff:f2:3f:69:08:58:5a:a6:83:
                    6d:a6:4b:b2:1a:e9:ee:b7:c5:5a:1c:7e:cf:bc:cb:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3A:0A:23:82:93:8A:E3:4B:CC:C1:4D:BA:8A:FD:DC:D1:F6:21:46
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3232392e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:8d:66:30:cd:c0:ed:b4:91:e8:36:c7:e5:7e:15:93:45:
         bd:cf:59:8d:2b:10:cc:5a:10:ab:07:f6:5f:77:a1:af:ec:e8:
         f8:b3:20:9e:8a:88:35:65:03:0d:d8:2d:18:77:34:d9:bf:a3:
         78:8c:69:ee:69:88:a9:b5:e5:bd:bd:94:a3:5b:f3:7e:cb:95:
         fe:8f:50:aa:f8:05:16:f6:c0:27:9f:ae:be:a6:64:62:f7:61:
         33:34:7e:33:14:c2:a7:44:2d:e0:73:96:bb:68:0c:e4:a2:4c:
         8d:06:3c:75:b8:15:27:8e:e9:c6:4d:4d:cf:70:4c:e1:cd:26:
         e3:39:d4:0b:0c:5c:bb:e3:a1:5d:09:f8:9b:34:e5:d2:b9:a4:
         c0:21:50:15:cc:f7:a7:14:ff:be:69:0c:91:19:4b:91:0b:2e:
         ad:bd:72:cc:5c:0a:d6:fe:1e:48:f2:ea:9f:00:1b:d2:80:25:
         c5:87:76:76:a4:de:3e:2b:8b:a2:10:ff:7c:54:12:b6:d1:ca:
         4f:a7:41:60:80:ab:37:52:1e:30:f1:35:63:c1:c7:fb:25:42:
         0e:01:a2:69:2b:90:06:7f:4a:cf:c3:31:6a:a4:71:13:f9:ff:
         4e:6c:6a:4c:c9:6c:e9:a1:96:14:75:4b:e2:b1:71:e2:74:cd:
         9f:15:f6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:50:42 2026 by rpki-client