Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33362e302f32332d3234203d3e203138383232.roa
File:                     3230302e3132342e33362e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          D1V69CoFjgRIODwM3oIZR+aNT7tJxqWy1TqcPLgUees=
Subject key identifier:   80:EE:C5:92:93:D2:F2:94:62:AE:BF:C5:B6:17:F9:46:17:44:61:0A
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       18E50D6B408D6702251CFC0E1D86ABD1EC1CF0C7
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33362e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:59 +0000
ROA not before:           Tue 02 Jun 2026 19:40:59 +0000
ROA not after:            Tue 01 Jun 2027 19:45:59 +0000
asID:                     18822
IP address blocks:        200.124.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:0d:6b:40:8d:67:02:25:1c:fc:0e:1d:86:ab:d1:ec:1c:f0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:59 2026 GMT
            Not After : Jun  1 19:45:59 2027 GMT
        Subject: CN=80EEC59293D2F29462AEBFC5B617F9461744610A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:b6:cd:8b:61:00:e4:1a:34:15:3a:7a:5c:
                    31:bc:1e:52:5c:de:8d:fc:4a:67:c0:7b:7f:24:18:
                    34:09:aa:9a:11:dd:b4:86:fa:46:84:b8:97:1b:8c:
                    64:40:16:07:41:01:63:6a:9f:50:49:9f:66:8c:18:
                    4f:98:18:fb:42:97:4c:93:4d:d5:d7:a0:bb:b5:c1:
                    51:e7:03:71:9b:bd:81:63:84:95:ff:48:1d:b7:93:
                    a4:54:6f:a5:cc:75:5f:51:e3:50:02:af:63:1e:d0:
                    2e:80:8a:0d:09:82:64:3f:52:53:20:13:f7:76:0c:
                    52:51:41:ad:0e:5e:bb:7d:66:c7:cc:44:ec:cb:e3:
                    e1:d3:64:56:ee:1d:3f:d7:65:41:7e:0d:da:6d:99:
                    79:70:4f:e8:75:44:a5:ef:29:d7:f6:1a:d1:d7:0e:
                    ca:b1:f0:67:e3:db:27:34:3c:3c:8a:c2:87:92:3c:
                    1b:d8:b3:73:29:1b:3e:fc:db:8e:d0:04:fd:27:70:
                    0e:0a:09:2a:f9:10:45:be:09:89:29:5f:12:43:7d:
                    2e:df:7e:23:9c:78:88:1d:55:51:ec:12:08:1d:3f:
                    38:a7:d0:5c:0f:76:92:e7:4e:dd:2f:01:52:99:39:
                    08:6a:35:c3:2f:ba:83:4c:b8:cd:72:5d:99:62:8f:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EE:C5:92:93:D2:F2:94:62:AE:BF:C5:B6:17:F9:46:17:44:61:0A
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e33362e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:3f:fb:85:7a:01:22:e5:05:a6:20:e2:a5:5c:07:b5:79:
         71:9e:b0:f3:05:f6:60:bc:3b:a2:73:c3:09:f2:99:ec:9d:1f:
         4f:9f:62:e5:7b:92:da:eb:4c:31:1a:55:d2:be:53:89:08:05:
         1c:6a:40:79:7f:03:ac:fc:25:0e:eb:f2:4d:84:a7:7d:6b:f6:
         66:fb:be:7e:0f:9f:db:47:dc:2d:67:68:69:5c:3c:1e:b0:4c:
         2e:85:ab:98:80:14:e3:49:17:c6:2b:80:48:73:46:ac:d1:b6:
         d7:fe:c6:d5:de:6b:2c:1a:ce:e8:8e:cd:7a:2c:cd:f5:6c:65:
         f3:3e:a9:52:d1:52:af:5d:d7:7e:39:b8:12:4a:00:18:f9:9d:
         48:f5:e0:41:4d:ed:54:b1:85:e6:6d:3d:d1:3e:63:f7:75:8f:
         25:2f:9d:1f:ae:91:f1:88:bc:15:37:91:fd:ba:e4:a7:d6:2e:
         a0:04:1a:1d:ab:37:b4:de:7b:cd:c9:99:ea:91:55:f1:ea:ba:
         d5:f6:12:d0:d5:25:23:fb:e5:6e:2e:d1:c1:e2:17:39:96:ed:
         76:f5:13:aa:77:85:fb:ef:6a:f6:37:7b:1f:64:93:80:ff:d3:
         13:20:80:33:ad:3e:30:83:32:00:44:20:03:dc:28:46:fc:cf:
         09:08:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:43:34 2026 by rpki-client