Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233362e302f32332d3234203d3e203138383232.roa
File:                     3230302e3131392e3233362e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          pS3DfVAs6rXQ4lEoa3QnLuQGdwRG1aAtwkxsIkmbWug=
Subject key identifier:   9C:C0:D2:5B:B2:0F:23:F0:39:CF:BD:63:6B:35:A4:E4:D4:0D:0D:D7
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       41428A44AFFE3DFB4F39AFCAD0563F8EE5EE20B6
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233362e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:05 +0000
ROA not before:           Tue 02 Jun 2026 19:41:05 +0000
ROA not after:            Tue 01 Jun 2027 19:46:05 +0000
asID:                     18822
IP address blocks:        200.119.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:8a:44:af:fe:3d:fb:4f:39:af:ca:d0:56:3f:8e:e5:ee:20:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:05 2026 GMT
            Not After : Jun  1 19:46:05 2027 GMT
        Subject: CN=9CC0D25BB20F23F039CFBD636B35A4E4D40D0DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:3c:c0:44:87:7f:97:90:5c:8e:c8:ca:65:
                    7d:f6:a8:6e:4a:40:96:8d:f9:c9:4f:57:67:1f:6e:
                    fb:e2:bc:9a:86:85:9e:ac:eb:5c:b3:a8:dd:9b:b4:
                    7a:27:c8:7a:c8:c6:bb:b1:4d:14:ac:ea:e1:3d:59:
                    a5:47:37:d9:64:38:8b:a3:5c:ca:63:68:b3:0b:14:
                    fb:ee:db:85:58:e3:36:a3:a8:7d:0b:81:e2:30:06:
                    bd:44:9a:0f:3a:46:51:0d:90:f6:8b:b8:92:28:c8:
                    68:c3:29:46:2f:df:8e:21:94:8e:d9:5d:52:17:d9:
                    b6:4a:74:ed:4c:a1:18:62:55:69:a3:b9:48:fc:c1:
                    39:de:a1:54:e1:fb:46:17:cc:92:6e:00:37:b3:78:
                    55:f5:1e:12:9c:67:3b:ad:8c:86:61:81:ff:4d:55:
                    0d:72:2b:54:94:d1:26:9c:e6:2a:28:8a:46:74:b2:
                    bc:01:d4:95:7d:54:22:df:db:9a:b7:4b:4f:49:db:
                    59:9d:33:81:e0:aa:95:3c:7e:6b:72:5f:95:c5:da:
                    00:02:65:9c:b6:a8:ee:6e:84:9c:0e:cb:43:0b:87:
                    57:17:7a:93:08:9a:66:01:dc:6f:39:74:78:15:2e:
                    e3:0d:e9:c6:b5:af:25:b2:90:e2:8e:5a:8a:28:46:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:D2:5B:B2:0F:23:F0:39:CF:BD:63:6B:35:A4:E4:D4:0D:0D:D7
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233362e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:4d:13:08:e2:26:07:01:23:25:e7:37:37:1a:5f:d8:2c:
         59:a6:2f:0c:2d:18:fd:9f:c5:aa:e5:2c:6f:27:d7:f2:5c:6c:
         2b:21:c3:a7:8a:cd:be:d3:d9:c8:16:a7:ed:df:43:aa:3f:46:
         75:9f:91:bd:9d:b3:65:16:1f:27:71:3e:74:c0:cc:3b:11:80:
         bf:f4:99:87:0a:db:bf:b3:ab:35:37:1d:6f:23:cd:3f:ef:c7:
         61:82:63:7b:46:83:38:3c:ea:18:03:a8:00:61:69:97:36:61:
         d0:1a:d9:37:55:a2:8a:93:76:9c:01:c8:3a:5a:6e:8f:69:0a:
         06:22:fd:19:f5:75:ac:84:62:2d:c0:7a:06:b3:3b:47:b7:38:
         88:06:d1:14:81:a8:f3:04:48:d3:71:d7:ed:41:ee:fe:59:82:
         7b:62:68:1d:70:61:1b:56:7b:18:f4:21:17:cc:95:cb:ff:bd:
         f1:aa:40:3b:c7:ce:7e:d8:b4:ae:21:0c:54:cd:55:00:62:69:
         84:0f:c1:d3:0e:89:35:57:ad:0f:a1:9b:05:8d:8a:16:24:b4:
         aa:a5:1c:e4:1b:0a:dd:23:28:0d:bb:c2:97:6d:de:b6:3b:e3:
         be:e1:1a:e5:90:fa:ac:e9:fc:98:6f:3f:45:9b:c0:8e:16:2f:
         d8:69:b2:1e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQUKKRK/+PftPOa/K0FY/juXuILYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQxMDVaFw0yNzA2MDExOTQ2MDVaMDMxMTAvBgNV
BAMTKDlDQzBEMjVCQjIwRjIzRjAzOUNGQkQ2MzZCMzVBNEU0RDQwRDBERDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnzzARId/l5BcjsjKZX32qG5K
QJaN+clPV2cfbvvivJqGhZ6s61yzqN2btHonyHrIxruxTRSs6uE9WaVHN9lkOIuj
XMpjaLMLFPvu24VY4zajqH0LgeIwBr1Emg86RlENkPaLuJIoyGjDKUYv344hlI7Z
XVIX2bZKdO1MoRhiVWmjuUj8wTneoVTh+0YXzJJuADezeFX1HhKcZzutjIZhgf9N
VQ1yK1SU0Sac5iooikZ0srwB1JV9VCLf25q3S09J21mdM4HgqpU8fmtyX5XF2gAC
ZZy2qO5uhJwOy0MLh1cXepMImmYB3G85dHgVLuMN6ca1ryWykOKOWoooRrpnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnMDSW7IPI/A5z71jazWk5NQNDdcwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMyMzAzMDJlMzEzMTM5MmUzMjMzMzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHfs
MA0GCSqGSIb3DQEBCwUAA4IBAQAgbU0TCOImBwEjJec3Nxpf2CxZpi8MLRj9n8Wq
5SxvJ9fyXGwrIcOnis2+09nIFqft30OqP0Z1n5G9nbNlFh8ncT50wMw7EYC/9JmH
Ctu/s6s1Nx1vI80/78dhgmN7RoM4POoYA6gAYWmXNmHQGtk3VaKKk3acAcg6Wm6P
aQoGIv0Z9XWshGItwHoGsztHtziIBtEUgajzBEjTcdftQe7+WYJ7YmgdcGEbVnsY
9CEXzJXL/73xqkA7x85+2LSuIQxUzVUAYmmED8HTDok1V60PoZsFjYoWJLSqpRzk
GwrdIygNu8KXbd62O+O+4RrlkPqs6fyYbz9Fm8COFi/YabIe
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:17 2026 by rpki-client