Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa
File:                     3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          W5apjq7KjM7By09IrtsKFWLvoun6+N3JQaF60UVprwU=
Subject key identifier:   52:67:CC:6A:42:F6:00:29:AE:06:07:EA:29:00:7E:97:86:E3:B0:40
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       265253FDCCA090D2288BC7202D9A073B74E740F8
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:48 +0000
ROA not before:           Tue 02 Jun 2026 19:40:48 +0000
ROA not after:            Tue 01 Jun 2027 19:45:48 +0000
asID:                     18822
IP address blocks:        200.119.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:52:53:fd:cc:a0:90:d2:28:8b:c7:20:2d:9a:07:3b:74:e7:40:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:48 2026 GMT
            Not After : Jun  1 19:45:48 2027 GMT
        Subject: CN=5267CC6A42F60029AE0607EA29007E9786E3B040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:78:02:f8:cc:dc:23:da:00:80:7f:82:cd:
                    7f:2e:36:08:6d:b6:5f:a6:2a:dd:06:4b:f5:6d:f6:
                    fc:b5:50:4d:97:8b:dd:98:1d:89:56:c4:b6:25:1a:
                    74:28:53:2b:63:2d:4c:92:37:57:9f:58:45:c5:72:
                    8b:c4:a7:8e:8d:67:3a:10:d1:ec:94:cd:4e:82:d8:
                    be:51:bb:0a:a9:8e:e7:99:35:1b:39:72:09:fc:0d:
                    9f:e5:d0:dc:93:e7:05:2c:2a:1c:9b:eb:17:41:a7:
                    2b:dc:04:92:4c:b1:a7:7f:c1:ce:1b:a9:f1:e6:e1:
                    99:49:91:85:55:5c:99:f1:c5:7c:62:24:79:a4:dd:
                    6e:0e:d6:a9:9d:cb:fa:3d:9c:d2:76:6d:52:b0:cb:
                    85:93:d9:c5:79:e3:f4:48:aa:44:66:1e:8e:60:55:
                    2b:da:bd:3b:27:a1:8e:f7:37:3d:78:b1:4d:d1:9c:
                    cf:8d:c4:5c:99:55:b1:14:af:75:f7:23:8c:6a:34:
                    d8:9f:2c:67:94:07:1a:1c:bc:9d:c8:37:06:39:46:
                    2b:62:6b:74:e9:40:67:5f:cb:ce:82:1c:0c:26:a7:
                    40:2a:07:52:4f:6c:67:65:e4:70:50:19:24:89:80:
                    c3:97:8f:cc:a2:ed:78:fd:b5:08:cc:04:03:2a:94:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:67:CC:6A:42:F6:00:29:AE:06:07:EA:29:00:7E:97:86:E3:B0:40
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3234382e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:fb:17:ac:ab:75:d7:cc:9b:59:29:2e:fa:2b:67:31:b3:
         f9:19:8e:e9:5d:5c:81:85:73:2d:0d:51:7a:1a:e3:af:6d:61:
         58:06:22:41:e0:ef:46:92:ce:d7:3b:94:18:dc:68:8a:15:0b:
         35:41:b0:cc:8c:1b:62:57:87:32:64:d7:bf:45:07:3b:69:e8:
         07:92:37:01:2a:95:b6:fe:30:67:56:fb:94:dc:00:32:5c:5a:
         68:2c:66:d9:f6:d6:6a:2b:e6:6a:22:01:fa:d3:1a:c8:3b:de:
         77:c4:2e:29:c5:69:38:fd:71:27:8b:17:d1:80:8a:c6:c2:81:
         19:a2:b5:0f:a9:ab:3e:2d:66:ad:bc:a1:f2:3a:b4:32:bd:8d:
         6d:e0:6f:5c:b3:7e:ea:70:fd:b0:fe:64:4f:89:93:97:5c:7e:
         b6:52:ff:bb:6c:b0:0c:c1:51:5f:b8:bc:60:a4:25:ea:78:54:
         78:37:44:0d:17:f8:f7:9a:3c:2b:62:86:d3:49:45:ac:de:35:
         b5:3b:40:41:1e:4e:4a:8b:40:80:e6:37:4f:c6:c8:1e:c8:7d:
         6b:2b:b0:f6:13:33:94:da:45:93:62:2f:b7:78:11:0c:18:bd:
         b5:68:fb:18:40:3d:09:62:c2:cb:99:d4:3c:64:61:3d:00:7e:
         be:62:aa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:46:46 2026 by rpki-client