Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f31392d3230203d3e203134323539.roa
File:                     3230302e3132342e33322e302f31392d3230203d3e203134323539.roa (raw, json)
Hash identifier:          lPEXMH196VSv1+mGSsrXd6NXan+sfpZri5sb7h72KdY=
Subject key identifier:   F9:47:CB:9A:E7:37:72:0E:C4:5C:6A:43:A6:42:4E:5D:4C:F7:34:1B
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       5726DECB5468EACE5BDB69AFC8A26E143D2AAC3B
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f31392d3230203d3e203134323539.roa
Signing time:             Tue 02 Jun 2026 19:45:56 +0000
ROA not before:           Tue 02 Jun 2026 19:40:56 +0000
ROA not after:            Tue 01 Jun 2027 19:45:56 +0000
asID:                     14259
IP address blocks:        200.124.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:26:de:cb:54:68:ea:ce:5b:db:69:af:c8:a2:6e:14:3d:2a:ac:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:56 2026 GMT
            Not After : Jun  1 19:45:56 2027 GMT
        Subject: CN=F947CB9AE737720EC45C6A43A6424E5D4CF7341B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:a2:b4:7d:b5:00:68:07:fa:a3:e0:43:5c:
                    c5:14:8d:78:a0:66:f2:77:d1:28:92:39:97:f2:95:
                    06:31:b5:5a:ab:16:4a:dd:c8:3d:9b:68:b6:57:9c:
                    c1:80:7f:c3:9d:56:1f:d9:13:52:fa:d9:cf:24:4e:
                    f2:d0:b0:1f:70:0b:9f:62:6c:c2:99:92:6e:ae:77:
                    70:6f:6c:8d:f5:4e:5b:9c:f9:6c:57:93:ac:90:4a:
                    1d:70:93:63:ca:bf:9d:88:9e:b7:04:05:67:b9:7c:
                    34:50:bb:c9:21:ac:ca:f9:46:8c:10:c8:30:21:b4:
                    cd:ef:13:5a:47:e1:56:a1:29:6d:5f:55:77:91:10:
                    ce:b3:3c:4b:80:c3:1b:18:7f:cb:d3:e5:35:fa:2d:
                    c1:e4:9f:01:cb:f6:53:77:7f:f8:62:d8:e6:54:7d:
                    c7:47:6b:c8:be:98:e8:22:49:8f:c4:af:73:eb:08:
                    64:2d:ba:b5:d7:d8:c7:36:3f:2f:79:8c:36:52:45:
                    1c:bf:64:ec:ea:ed:22:69:2e:b0:e0:ce:2b:cd:69:
                    52:db:60:23:c0:a7:35:18:63:c0:c8:42:3d:cb:96:
                    ae:0c:79:cf:8f:7c:b9:31:0a:25:ae:d9:db:c7:b6:
                    c5:c5:97:31:ff:3b:cb:7a:a4:3f:d8:85:c2:25:75:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:CB:9A:E7:37:72:0E:C4:5C:6A:43:A6:42:4E:5D:4C:F7:34:1B
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33322e302f31392d3230203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:60:96:08:51:9f:1a:c5:23:b8:14:dd:36:dc:6e:45:c5:d0:
         f1:2c:a4:66:c5:b4:1e:b0:76:dc:d5:1c:a0:67:ec:98:c3:35:
         9f:52:61:b6:6b:92:b0:cd:8b:12:cf:db:8f:8f:51:31:c3:9c:
         24:fb:72:91:68:e1:91:d7:3a:bd:ca:64:10:78:3f:1e:3a:c5:
         35:b5:bf:6f:3f:d0:c1:08:c0:65:64:ce:12:78:2e:b7:b0:03:
         79:60:2d:a3:3a:e2:ab:61:3f:79:76:87:b9:3d:8a:c5:7a:a2:
         35:84:22:e6:6e:09:c5:de:13:dc:6f:97:a6:e5:c6:13:fe:90:
         41:67:83:48:a0:d7:26:f6:8d:dd:80:3f:d1:93:10:88:73:86:
         f4:47:8d:a6:fa:53:c8:28:0c:1f:89:69:f6:1a:e9:60:97:80:
         99:45:27:f9:c5:65:e0:b4:47:a8:fb:d5:ea:af:d2:44:3d:a6:
         a9:dc:a6:76:34:80:24:48:cb:f9:f6:f0:e3:b0:bb:e5:c5:9f:
         43:22:5d:ae:76:85:32:78:ff:2c:fd:4a:1e:64:73:64:05:a3:
         de:60:f1:43:69:b1:a0:ef:d7:59:a8:8d:31:e6:dd:a4:ab:67:
         1a:d1:20:2d:97:65:2d:24:08:97:88:92:c5:d4:d3:75:f0:a1:
         07:7c:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:24 2026 by rpki-client