Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138302e302f32332d3233203d3e203138383232.roa
File:                     3230302e37342e3138302e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          wwX1amjh00lRNKyWx/lLUOiT04ICKT3gG7Tewe1f3Vk=
Subject key identifier:   79:73:E5:A3:B0:05:B8:0E:39:B4:23:17:2E:26:92:0A:77:08:58:F2
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       250596DB525B6313D62E156F5CA62DDBC1E2E47A
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138302e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:53 +0000
ROA not before:           Tue 02 Jun 2026 19:40:53 +0000
ROA not after:            Tue 01 Jun 2027 19:45:53 +0000
asID:                     18822
IP address blocks:        200.74.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:96:db:52:5b:63:13:d6:2e:15:6f:5c:a6:2d:db:c1:e2:e4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:53 2026 GMT
            Not After : Jun  1 19:45:53 2027 GMT
        Subject: CN=7973E5A3B005B80E39B423172E26920A770858F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:74:f8:02:38:1a:a3:fe:d6:2c:b5:c6:cb:
                    5e:06:94:e8:97:79:8a:4d:7f:31:95:2b:4b:a6:1d:
                    fd:56:88:bb:b0:1d:8b:ca:23:a0:47:74:ee:f6:13:
                    da:0e:ff:74:d5:a3:ef:c5:24:24:14:3c:77:2c:c8:
                    52:92:8a:1e:39:7c:2c:51:39:2d:0a:04:a2:db:d9:
                    90:24:f5:26:31:aa:7f:62:91:ae:e2:c0:19:48:8e:
                    1b:8a:fc:8f:97:b3:84:e0:1b:6b:c4:9d:18:2b:58:
                    3b:6a:53:32:4c:c3:be:d9:10:e6:51:0b:47:16:ce:
                    ad:42:dc:bb:f7:fe:64:d5:07:d7:ab:9e:25:17:be:
                    d2:57:78:6b:16:8b:6f:7a:b7:8b:b4:7a:17:f9:5b:
                    da:d5:4d:b9:fe:1e:7e:cd:3a:21:05:65:04:b2:6e:
                    9c:e5:fa:9f:0a:58:77:91:f3:6f:64:6c:0f:39:54:
                    9a:ff:e5:87:42:46:b7:3c:3b:9e:79:44:78:15:94:
                    5b:c5:43:0a:29:1b:16:b4:d4:6b:4a:83:ef:5b:f8:
                    11:c3:cc:27:ad:07:8e:ac:63:86:c9:8b:90:bc:e4:
                    a5:26:78:63:e3:f2:b7:24:8d:39:23:75:bc:f5:6e:
                    41:87:bb:80:28:4e:4d:84:d0:a4:77:c8:a1:19:e0:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:73:E5:A3:B0:05:B8:0E:39:B4:23:17:2E:26:92:0A:77:08:58:F2
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138302e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:36:0e:72:84:8b:4a:46:38:d8:a9:10:92:52:5f:e4:14:
         01:ca:b9:07:e2:ca:74:71:77:54:98:df:25:12:bf:27:2c:e0:
         ed:22:f5:0d:18:3f:8f:06:da:dd:d8:29:f7:d7:57:da:7e:c3:
         f3:87:3c:c1:13:78:f8:fd:26:57:77:e3:dd:d0:e1:bf:32:e2:
         d0:59:1d:3c:b3:c5:cd:5f:57:8b:57:19:fa:a9:73:9b:4b:51:
         9b:7d:01:4a:7a:96:cc:b3:96:a6:85:ef:94:d2:84:70:e6:d4:
         c1:80:b1:73:75:03:46:30:2f:21:92:59:aa:49:04:fc:40:4a:
         99:cc:34:14:48:f4:62:df:92:bf:2b:bc:83:ca:46:1e:e8:51:
         1a:41:b8:93:8c:dc:04:fb:9a:71:5b:01:7c:b3:0e:79:6c:d3:
         90:46:c9:b4:59:9e:4f:fa:73:da:fa:1b:ca:f2:90:46:e1:23:
         b7:df:d1:49:db:49:29:00:20:a2:f8:5f:c2:12:39:b4:c3:b5:
         1a:9f:14:39:db:7c:4d:1d:09:07:98:8f:f4:f7:d5:68:70:77:
         c5:cb:71:70:27:4c:d4:ff:a6:eb:3b:38:d5:82:8e:f0:39:97:
         bb:e2:c1:1c:a4:e9:42:e6:f9:91:45:59:69:9b:4a:47:15:48:
         62:c4:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:44:03 2026 by rpki-client