Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35302e302f32332d3234203d3e203138383232.roa
File:                     3230302e3132342e35302e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          XBJI4DxCNWPWKYH2VJBG71IHKtYsf3i0yFO+b9nRnq8=
Subject key identifier:   5D:6C:DF:D5:9F:1F:78:14:FD:92:6E:C3:1D:E9:07:DA:26:DB:26:47
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       2A264DE61027CEF2EE5E4E325DB2AE67F76BE05D
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35302e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:05 +0000
ROA not before:           Tue 02 Jun 2026 19:41:05 +0000
ROA not after:            Tue 01 Jun 2027 19:46:05 +0000
asID:                     18822
IP address blocks:        200.124.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:4d:e6:10:27:ce:f2:ee:5e:4e:32:5d:b2:ae:67:f7:6b:e0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:05 2026 GMT
            Not After : Jun  1 19:46:05 2027 GMT
        Subject: CN=5D6CDFD59F1F7814FD926EC31DE907DA26DB2647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:b0:c1:ed:51:b4:b5:f3:ce:14:94:a0:3c:
                    95:19:e6:2b:a1:2b:f3:d2:ff:8d:12:f2:5c:fd:d3:
                    7d:d5:3b:9d:0b:a7:3f:01:8a:25:14:7b:7b:3e:7a:
                    19:64:87:fa:24:3e:ba:9b:81:dc:9b:38:92:38:58:
                    1c:c5:08:a6:63:c7:08:f5:c3:99:ff:29:c2:af:36:
                    8e:fc:e6:7b:48:b7:56:95:10:db:88:a8:f1:bd:43:
                    b7:fd:55:99:4c:ee:60:98:f0:d8:78:e4:45:f3:35:
                    ad:ca:9b:45:b7:9c:30:87:38:58:59:03:f3:9f:c4:
                    7d:45:c9:55:a5:40:0a:a4:01:d2:6e:5e:bd:bc:d5:
                    5c:78:03:06:40:a4:dc:93:32:f3:e5:6d:11:8e:c7:
                    c8:59:37:c2:e0:4b:2e:7d:64:0d:49:a6:01:71:b8:
                    2f:19:64:62:0b:02:8b:1a:2d:98:69:b0:eb:e0:d4:
                    c8:e7:82:d0:e3:17:26:99:c4:9d:5f:88:47:b4:de:
                    5a:cb:95:66:eb:40:7b:54:46:41:14:49:b2:df:9c:
                    71:40:b3:04:c4:59:ac:2c:b9:fa:0e:a2:c7:3d:8c:
                    d6:96:1f:2a:1e:9b:03:6b:20:26:24:5a:56:e4:04:
                    85:26:ed:79:b3:90:6e:53:39:64:da:b0:a6:5f:0f:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:DF:D5:9F:1F:78:14:FD:92:6E:C3:1D:E9:07:DA:26:DB:26:47
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35302e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:34:0c:ee:05:e0:d8:1e:19:5e:2b:f3:9d:a8:5a:05:92:39:
         00:73:af:87:86:a8:9c:d6:0d:b1:75:88:f6:0a:6c:b6:b2:65:
         26:05:6a:0e:9e:b0:36:07:a1:d0:53:2e:8a:d9:e5:a7:05:fa:
         43:0c:39:74:fb:64:51:79:d7:dd:48:a7:80:2d:bd:7d:72:27:
         a3:cf:43:d8:d5:4e:d6:84:a1:da:ab:ff:d9:b1:55:59:b4:78:
         30:d1:ba:6e:e9:50:1c:8c:2e:45:3b:bc:3c:b0:93:a2:64:d5:
         73:5f:3f:87:ee:96:aa:a7:f3:30:60:27:63:2b:8e:32:be:cd:
         7e:ab:9b:b3:5a:67:4d:92:bc:ed:10:03:4f:90:2b:7f:f8:6d:
         6a:53:2d:6d:71:cf:9b:8a:b9:9a:a3:a2:98:d8:0c:f4:55:95:
         27:35:76:71:f7:3e:17:77:9d:8a:50:87:6e:fc:7d:59:f9:db:
         9b:dd:d6:03:35:f3:30:30:53:18:bd:91:04:a9:29:57:bf:f2:
         ed:ca:cb:81:af:de:cb:74:e8:57:fc:19:6a:3b:7f:fa:03:69:
         16:81:e9:3d:01:40:b8:d3:4d:81:7f:ad:ee:65:a1:6e:45:13:
         81:ed:7d:ed:6a:c5:b5:68:2c:5d:e9:fe:f4:d6:b3:fe:17:5d:
         e6:6b:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:43:26 2026 by rpki-client