Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35372e302f32342d3234203d3e203138383232.roa
File:                     3230302e3132342e35372e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          A2l81Jv94ey2Zp/foWVYhfrsiRLITpovwkUsvNlEJyo=
Subject key identifier:   F7:5A:91:44:79:AF:7F:2E:C1:C1:00:AF:58:B2:49:0F:C6:7D:D8:42
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       1CF55C00C7BE85AC40B126DDE05B67B582D6B5F5
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35372e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:51 +0000
ROA not before:           Tue 02 Jun 2026 19:40:51 +0000
ROA not after:            Tue 01 Jun 2027 19:45:51 +0000
asID:                     18822
IP address blocks:        200.124.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f5:5c:00:c7:be:85:ac:40:b1:26:dd:e0:5b:67:b5:82:d6:b5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:51 2026 GMT
            Not After : Jun  1 19:45:51 2027 GMT
        Subject: CN=F75A914479AF7F2EC1C100AF58B2490FC67DD842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:41:23:90:a5:38:48:80:ed:46:09:bf:c6:
                    fc:b4:e8:e8:a0:d1:c8:0a:06:87:6e:33:1a:10:0f:
                    35:6d:a1:0e:61:26:03:ed:67:98:83:e7:f7:f5:fd:
                    6c:d0:eb:0a:69:70:1d:55:ce:be:38:c7:02:17:de:
                    f1:00:48:0c:16:5c:c1:47:c5:51:2c:a5:c8:20:ef:
                    98:79:95:99:cf:99:79:a7:ef:9e:d5:13:f5:15:0a:
                    b3:c7:91:0f:4c:23:ef:74:20:a4:04:31:6a:a1:8f:
                    1a:56:9d:00:7a:87:39:63:73:6e:98:24:e7:39:94:
                    7c:3b:3d:50:ca:b4:92:bf:d7:1e:b4:77:dd:bc:c6:
                    df:ac:af:f0:fb:93:cc:54:4d:95:30:b9:c0:95:da:
                    42:82:56:46:22:ac:81:b5:85:4c:bc:58:64:75:e6:
                    a4:ee:ca:16:8c:8a:9f:41:f8:32:1b:75:47:f9:81:
                    e4:38:50:31:18:1a:b0:7b:a8:d6:2b:0d:c6:28:8e:
                    90:18:b0:f1:9e:0d:80:26:85:2e:bd:05:a7:52:ee:
                    6b:7b:57:82:64:32:71:78:61:ee:cb:ab:a3:50:3c:
                    dd:fb:3c:ac:1c:cf:fc:5a:8a:54:9b:9e:9a:c3:a7:
                    e9:63:04:6d:f3:9a:71:38:65:f8:56:b3:7a:c7:db:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:91:44:79:AF:7F:2E:C1:C1:00:AF:58:B2:49:0F:C6:7D:D8:42
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3132342e35372e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:81:74:26:e4:0c:da:04:2a:c2:18:8c:8b:3b:f1:dd:55:d5:
         36:99:40:c7:b0:23:90:76:28:e0:84:ff:6f:0c:2c:19:06:a4:
         ce:99:6d:24:79:ca:f0:63:c9:76:df:72:b6:19:5c:1d:ce:4e:
         18:ed:9a:7c:e5:08:d6:01:46:b7:4e:6b:8b:97:dd:c2:3a:06:
         70:31:71:75:5e:16:21:9a:d1:bb:50:6f:12:1c:1b:42:18:0c:
         9a:fc:ab:a4:ac:94:55:11:ed:ec:8d:60:f2:ae:8e:7a:ba:6c:
         c5:f8:98:30:a6:13:66:d9:dd:bc:c4:17:45:af:e4:4f:74:c5:
         23:04:74:58:f7:2e:2e:90:32:45:71:92:aa:aa:86:5b:f5:d9:
         d6:a2:05:4d:59:cc:c6:dc:b1:b0:67:78:b0:76:f2:e6:62:9e:
         c6:41:e6:c4:25:fd:c8:85:81:da:26:c1:05:48:c3:6b:44:17:
         6e:f4:c0:19:1f:70:20:e5:54:16:0f:68:de:66:46:3a:ba:09:
         00:d4:37:d2:f4:44:55:48:96:73:07:98:f0:a3:51:5f:17:92:
         e2:13:eb:5c:92:9e:1f:53:6b:06:61:78:35:90:b8:b3:b9:24:
         d3:f5:67:67:ff:e0:43:54:08:99:2c:19:42:bd:ed:d6:f7:39:
         0a:87:69:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHPVcAMe+haxAsSbd4FtntYLWtfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNjA2MDIxOTQwNTFaFw0yNzA2MDExOTQ1NTFaMDMxMTAvBgNV
BAMTKEY3NUE5MTQ0NzlBRjdGMkVDMUMxMDBBRjU4QjI0OTBGQzY3REQ4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqEEjkKU4SIDtRgm/xvy06Oig
0cgKBoduMxoQDzVtoQ5hJgPtZ5iD5/f1/WzQ6wppcB1Vzr44xwIX3vEASAwWXMFH
xVEspcgg75h5lZnPmXmn757VE/UVCrPHkQ9MI+90IKQEMWqhjxpWnQB6hzljc26Y
JOc5lHw7PVDKtJK/1x60d928xt+sr/D7k8xUTZUwucCV2kKCVkYirIG1hUy8WGR1
5qTuyhaMip9B+DIbdUf5geQ4UDEYGrB7qNYrDcYojpAYsPGeDYAmhS69BadS7mt7
V4JkMnF4Ye7Lq6NQPN37PKwcz/xailSbnprDp+ljBG3zmnE4ZfhWs3rH2zoRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU91qRRHmvfy7BwQCvWLJJD8Z92EIwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMyMzAzMDJlMzEzMjM0MmUzNTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh8OTAN
BgkqhkiG9w0BAQsFAAOCAQEAmIF0JuQM2gQqwhiMizvx3VXVNplAx7AjkHYo4IT/
bwwsGQakzpltJHnK8GPJdt9ythlcHc5OGO2afOUI1gFGt05ri5fdwjoGcDFxdV4W
IZrRu1BvEhwbQhgMmvyrpKyUVRHt7I1g8q6OerpsxfiYMKYTZtndvMQXRa/kT3TF
IwR0WPcuLpAyRXGSqqqGW/XZ1qIFTVnMxtyxsGd4sHby5mKexkHmxCX9yIWB2ibB
BUjDa0QXbvTAGR9wIOVUFg9o3mZGOroJANQ30vREVUiWcweY8KNRXxeS4hPrXJKe
H1NrBmF4NZC4s7kk0/VnZ//gQ1QImSwZQr3t1vc5Codp0A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:19 2026 by rpki-client