Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34362e302f32332d3233203d3e203138383232.roa
File:                     3230302e3132342e34362e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          UQO9F+mcv9mcpvsk7wAvTm0W0jKjX1KXRuYIrL+OdKs=
Subject key identifier:   D1:A4:53:B9:7B:1C:4E:BF:17:C2:35:F5:24:E0:D7:A8:34:49:35:B1
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       6119802F9FDFD2ED9A6AC076CABAD3745FB018FF
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34362e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:46 +0000
ROA not before:           Tue 02 Jun 2026 19:40:46 +0000
ROA not after:            Tue 01 Jun 2027 19:45:46 +0000
asID:                     18822
IP address blocks:        200.124.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:80:2f:9f:df:d2:ed:9a:6a:c0:76:ca:ba:d3:74:5f:b0:18:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:46 2026 GMT
            Not After : Jun  1 19:45:46 2027 GMT
        Subject: CN=D1A453B97B1C4EBF17C235F524E0D7A8344935B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:89:cc:91:27:16:1f:e1:64:a5:b5:a9:3f:
                    93:dc:aa:d0:58:ef:e0:5d:8a:28:cd:d8:86:03:f8:
                    e4:8e:be:e4:e9:63:11:41:ee:6a:cf:1f:d0:b2:55:
                    82:df:15:f5:c5:be:27:94:40:f3:bb:9d:77:d0:ff:
                    b3:eb:34:de:4a:43:5f:01:7f:ad:c5:77:7a:08:da:
                    c3:22:57:08:9a:08:19:3e:e3:ef:31:20:5f:b1:6d:
                    95:1c:ff:11:ed:67:c7:2e:15:fd:6a:f6:d1:87:6e:
                    bf:ec:29:ea:27:91:5c:ae:6b:7b:dd:05:cd:c7:14:
                    2c:2f:9c:59:58:7b:f0:4c:52:39:1b:6c:a2:80:c9:
                    12:06:7e:42:83:dc:31:4f:b6:b5:e5:16:08:d6:57:
                    51:54:8b:c0:57:97:4c:be:d0:73:57:69:22:52:f8:
                    e9:97:7c:00:5b:b8:e1:0e:04:ec:ae:c1:9d:26:0c:
                    d2:22:8f:d5:d4:15:05:59:24:f9:46:28:a2:e6:9a:
                    27:e0:7a:06:19:e2:b8:be:cf:c1:44:9b:9e:f3:92:
                    f8:53:54:c8:00:61:ff:a7:01:0f:ca:b6:23:45:1d:
                    0b:8d:98:9f:43:d8:80:0a:e6:bc:c0:c9:4c:f2:81:
                    21:fd:45:5f:96:ef:2e:30:60:af:d9:31:31:b4:cd:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A4:53:B9:7B:1C:4E:BF:17:C2:35:F5:24:E0:D7:A8:34:49:35:B1
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e34362e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:28:1f:de:2c:5d:ce:48:95:be:3a:b5:a9:b6:54:21:4b:
         18:c2:4d:ed:c5:f2:e9:f8:1a:50:1d:fc:9d:dd:b6:2b:86:28:
         00:de:f5:61:9d:88:25:ae:f2:36:66:83:e2:e9:ac:97:06:9a:
         a7:d8:b0:13:f6:fd:07:17:50:85:42:31:15:ec:a2:70:f6:82:
         53:a2:08:d8:84:91:3f:dd:f0:b6:29:2f:f4:b0:18:40:ff:7a:
         2c:3d:53:df:2b:0b:78:f8:06:e0:19:7d:c9:3c:5e:8e:41:2a:
         3c:b4:c8:94:98:93:94:5d:88:da:3d:c4:80:f1:b2:65:ac:4c:
         37:22:21:61:33:8b:db:7d:84:cb:57:68:27:6a:8b:a1:93:8d:
         7b:ba:71:0c:bc:47:2c:c0:d8:50:b6:60:69:ca:ab:49:de:f5:
         d0:d8:73:a9:87:c6:0b:84:0e:35:25:d5:7a:78:1c:bc:5b:ca:
         37:ba:01:6b:78:74:3f:8d:e3:65:12:40:36:d4:b9:bb:63:07:
         dc:08:71:ac:a5:b3:ae:7b:8f:68:32:ca:d2:88:e5:e0:ec:4e:
         3d:73:aa:a6:2f:71:04:1d:ca:9c:c2:e1:bf:e5:df:69:dd:3b:
         2b:d4:aa:e6:1f:17:5b:8f:d8:dd:b8:5a:27:77:ad:3e:6a:7f:
         02:ee:4b:ed
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYRmAL5/f0u2aasB2yrrTdF+wGP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQwNDZaFw0yNzA2MDExOTQ1NDZaMDMxMTAvBgNV
BAMTKEQxQTQ1M0I5N0IxQzRFQkYxN0MyMzVGNTI0RTBEN0E4MzQ0OTM1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZInMkScWH+FkpbWpP5PcqtBY
7+BdiijN2IYD+OSOvuTpYxFB7mrPH9CyVYLfFfXFvieUQPO7nXfQ/7PrNN5KQ18B
f63Fd3oI2sMiVwiaCBk+4+8xIF+xbZUc/xHtZ8cuFf1q9tGHbr/sKeonkVyua3vd
Bc3HFCwvnFlYe/BMUjkbbKKAyRIGfkKD3DFPtrXlFgjWV1FUi8BXl0y+0HNXaSJS
+OmXfABbuOEOBOyuwZ0mDNIij9XUFQVZJPlGKKLmmifgegYZ4ri+z8FEm57zkvhT
VMgAYf+nAQ/KtiNFHQuNmJ9D2IAK5rzAyUzygSH9RV+W7y4wYK/ZMTG0zeypAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0aRTuXscTr8XwjX1JODXqDRJNbEwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMyMzAzMDJlMzEzMjM0MmUzNDM2MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAch8LjAN
BgkqhkiG9w0BAQsFAAOCAQEAddEoH94sXc5Ilb46tam2VCFLGMJN7cXy6fgaUB38
nd22K4YoAN71YZ2IJa7yNmaD4umslwaap9iwE/b9BxdQhUIxFeyicPaCU6II2ISR
P93wtikv9LAYQP96LD1T3ysLePgG4Bl9yTxejkEqPLTIlJiTlF2I2j3EgPGyZaxM
NyIhYTOL232Ey1doJ2qLoZONe7pxDLxHLMDYULZgacqrSd710NhzqYfGC4QONSXV
engcvFvKN7oBa3h0P43jZRJANtS5u2MH3AhxrKWzrnuPaDLK0ojl4OxOPXOqpi9x
BB3KnMLhv+Xfad07K9Sq5h8XW4/Y3bhaJ3etPmp/Au5L7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:43:12 2026 by rpki-client