Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233322e302f32322d3234203d3e203138383232.roa
File:                     3230302e3131392e3233322e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          jlMNR1A4oBHlulMf3o8c2QyA1A3Wd5pbn7NZo8zaiik=
Subject key identifier:   90:D1:A7:2C:D6:E6:5D:50:88:5F:88:3B:57:2A:AE:D5:2A:50:FE:E4
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       3DEEE15A8E429AA936BE24E562A80B4B41A89D4A
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233322e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:04 +0000
ROA not before:           Tue 02 Jun 2026 19:41:04 +0000
ROA not after:            Tue 01 Jun 2027 19:46:04 +0000
asID:                     18822
IP address blocks:        200.119.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ee:e1:5a:8e:42:9a:a9:36:be:24:e5:62:a8:0b:4b:41:a8:9d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:04 2026 GMT
            Not After : Jun  1 19:46:04 2027 GMT
        Subject: CN=90D1A72CD6E65D50885F883B572AAED52A50FEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:40:27:54:80:81:f0:a6:df:5d:59:6a:60:
                    b3:46:e2:e5:6a:27:6c:46:24:83:de:ab:e2:b7:06:
                    dc:03:ca:b0:5a:98:e8:38:29:04:18:69:e2:e6:81:
                    ef:63:2c:a0:c8:ee:77:e7:db:4a:02:c7:8c:16:a6:
                    cd:b4:6a:61:44:6f:d2:e0:f9:9b:95:6e:a6:38:44:
                    68:90:57:3a:06:59:c1:26:41:1c:5f:a2:c8:ed:87:
                    05:1b:38:ed:e0:35:31:55:73:61:d0:6a:d1:2d:71:
                    d9:68:06:83:7e:dd:73:33:f5:2f:34:45:99:be:be:
                    b0:ed:da:42:33:75:44:29:66:f1:26:f4:7b:1f:9a:
                    57:02:df:43:cf:c6:b9:1f:50:43:cc:9d:08:0a:b6:
                    c1:12:d0:53:d9:bc:d9:9f:8f:60:81:fe:92:3c:e5:
                    72:02:6e:20:6b:18:2b:ef:8c:7c:b6:b0:63:1c:a5:
                    19:87:d5:60:be:66:5e:e0:38:78:70:7e:1c:60:90:
                    d4:23:40:82:86:53:d6:54:68:07:38:85:fd:de:d5:
                    b3:5f:e8:b8:97:7b:4e:a2:ef:fa:1d:64:cc:53:f0:
                    2a:40:81:74:3e:cc:f9:0e:3f:6f:64:f1:cb:05:c8:
                    ce:a6:54:b6:2d:59:0e:b4:f1:3c:24:15:f1:99:83:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D1:A7:2C:D6:E6:5D:50:88:5F:88:3B:57:2A:AE:D5:2A:50:FE:E4
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233322e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:25:07:6d:98:d3:4d:81:59:de:0d:78:93:41:38:18:15:
         55:36:85:38:7a:f0:17:f3:7a:24:ab:1a:58:91:e1:26:de:0e:
         4d:0c:c6:e1:2f:49:e2:05:d0:15:a8:d2:48:de:ab:d8:42:6b:
         99:f1:14:dc:e9:05:6f:27:06:04:f1:ad:a3:fd:32:9f:ba:51:
         3d:78:52:a7:66:b2:47:3f:dd:e8:9e:6e:ea:83:88:71:e5:e1:
         7c:86:67:c5:bc:46:ab:86:ac:10:7b:a4:f7:b2:b4:5f:b2:0f:
         af:1b:35:40:65:6d:08:4c:f0:1a:cd:0b:4c:3f:5d:a2:c7:52:
         d7:74:7f:e1:c1:a9:5b:31:73:a4:61:9a:92:a6:af:ad:dc:b9:
         d0:1c:cd:32:a1:5f:cc:2a:30:6a:3d:51:1c:af:df:f3:4a:92:
         b8:41:c6:1a:6c:fb:05:f9:29:10:56:1f:fb:71:3b:75:b1:25:
         39:51:cb:f0:09:09:e0:1b:90:e4:50:a5:7b:ce:52:85:a7:3f:
         4a:52:8d:d1:7b:6e:64:47:76:b0:46:63:ca:3d:75:bf:47:ea:
         02:f5:73:c4:4c:e2:69:cc:8c:e8:b3:1d:02:2b:2d:e6:e4:dc:
         f3:d7:53:cf:ca:93:14:e0:03:d8:91:7c:e9:22:b8:6c:33:86:
         33:1a:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:50:46 2026 by rpki-client