Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136382e302f32342d3234203d3e203138383232.roa
File:                     3230302e37342e3136382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          B6hV56ZQtxvqCf3tmwAuRtWDK7iQjOl4ZIW40U3/8uA=
Subject key identifier:   97:D0:26:E0:0C:C0:8E:D0:77:C7:E8:F1:A1:8C:9D:42:56:4A:14:3E
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       5F0161A13CE9728D4F1D24A7BF2D1F933FDA8F79
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:46:08 +0000
ROA not before:           Tue 02 Jun 2026 19:41:08 +0000
ROA not after:            Tue 01 Jun 2027 19:46:08 +0000
asID:                     18822
IP address blocks:        200.74.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:61:a1:3c:e9:72:8d:4f:1d:24:a7:bf:2d:1f:93:3f:da:8f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:41:08 2026 GMT
            Not After : Jun  1 19:46:08 2027 GMT
        Subject: CN=97D026E00CC08ED077C7E8F1A18C9D42564A143E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:77:fc:1f:af:36:ca:5d:71:cd:64:81:96:
                    22:8f:c5:6a:9f:27:63:b3:ee:08:47:a1:a0:eb:62:
                    09:62:02:55:68:6d:f1:90:5d:6e:63:47:cf:4a:f0:
                    8a:41:52:fc:ce:17:a6:e8:41:9e:f9:31:fe:f8:6a:
                    11:f4:c1:ee:d2:d5:e6:e4:fa:04:89:a8:a5:ef:20:
                    3b:16:b9:59:af:81:a0:26:e4:40:1a:bd:6b:77:72:
                    51:a6:38:cc:69:a3:eb:04:a5:ab:16:04:26:79:1c:
                    db:fc:6f:a8:e0:84:f4:64:3a:22:4a:90:b8:53:bc:
                    be:28:f7:e9:5b:99:62:35:78:be:6e:7d:e9:a8:78:
                    f4:26:b9:51:77:10:0d:ca:98:71:78:eb:49:f1:36:
                    5c:a5:4a:23:8a:ec:d8:de:20:77:12:25:5e:ef:dd:
                    c3:13:54:c7:b6:17:4e:fc:3b:d3:2e:57:0e:8a:d8:
                    28:30:39:41:ad:6e:97:34:ad:96:dc:24:7b:b2:4d:
                    ef:d6:a9:a1:d8:28:ed:53:59:68:01:48:19:88:2a:
                    18:cf:63:e5:ed:67:b7:d4:f4:62:a0:c4:0f:39:05:
                    fb:49:45:bf:93:d1:10:0d:25:18:9c:ef:35:f2:00:
                    11:2f:4a:15:c2:73:3b:38:14:51:a3:e9:cb:04:32:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D0:26:E0:0C:C0:8E:D0:77:C7:E8:F1:A1:8C:9D:42:56:4A:14:3E
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3136382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:00:3f:5f:df:0f:03:fb:54:64:50:13:9d:84:62:f4:a3:
         09:ab:6b:e7:77:7f:2d:48:65:a6:38:b2:c9:a2:c4:e1:0d:88:
         62:20:e8:a1:e7:18:6d:fd:46:31:50:a0:23:de:01:2a:ee:8f:
         1f:57:32:e4:cb:57:e9:10:4b:b0:f2:10:cb:e0:3f:4d:0f:60:
         fc:d3:b1:82:8e:01:5b:c2:17:f5:48:23:ff:44:97:95:68:77:
         da:5e:a4:ff:8a:b5:6c:e3:9c:b3:37:6a:3f:20:07:16:15:56:
         1a:14:31:1a:03:ba:55:ed:14:40:fd:6f:f2:2d:54:d7:3f:ba:
         cd:0b:1a:09:13:db:5c:5f:ce:e1:0b:44:d6:7c:fa:35:e3:8e:
         5d:19:0e:f4:10:e6:cf:3d:f4:66:7b:33:2b:cb:5c:fd:63:1f:
         20:48:82:e9:90:79:e8:03:07:cc:79:06:44:0b:55:86:0e:ae:
         e1:a3:b9:39:9b:0a:0f:90:db:9b:57:d8:e9:3a:95:7b:35:c1:
         95:68:ad:b5:e8:54:bc:a3:f3:3d:bd:2a:af:2d:00:4b:8e:36:
         fe:85:13:ad:9c:7e:8c:dd:a1:c1:85:21:4e:13:c7:8b:b7:6e:
         d2:24:9f:ff:da:33:82:70:5c:d8:0e:fd:fc:86:4c:6e:e6:07:
         08:65:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:40 2026 by rpki-client