Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138332e302f32342d3234203d3e203138383232.roa
File:                     3230302e37342e3138332e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          OhC4BjK0CQtataIgBhF6cOaWhd0ya8Gu2ny8+PDcG6w=
Subject key identifier:   25:67:8F:0A:6C:7C:35:08:82:66:CE:74:4C:81:98:1E:D1:67:DA:6B
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       5BC2EB18ECA5ED4EF01D2E21C72C9AD749D4E332
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138332e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 19:45:59 +0000
ROA not before:           Tue 02 Jun 2026 19:40:59 +0000
ROA not after:            Tue 01 Jun 2027 19:45:59 +0000
asID:                     18822
IP address blocks:        200.74.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c2:eb:18:ec:a5:ed:4e:f0:1d:2e:21:c7:2c:9a:d7:49:d4:e3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jun  2 19:40:59 2026 GMT
            Not After : Jun  1 19:45:59 2027 GMT
        Subject: CN=25678F0A6C7C35088266CE744C81981ED167DA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:6e:34:0e:b3:9b:3c:02:72:2f:26:ae:9e:
                    60:e1:ad:7e:f6:5a:eb:ea:1f:b2:93:79:5d:03:f5:
                    1e:40:c5:7f:72:c6:94:e9:27:2c:7b:0d:d9:fc:7d:
                    40:85:ef:e3:df:93:4b:d3:62:df:9a:7a:f9:c9:cc:
                    4c:1c:6b:52:60:70:dc:18:2c:5f:a3:ba:d9:70:77:
                    3b:95:fc:57:01:f8:87:ca:1d:be:cc:b9:c6:b1:da:
                    26:0d:fa:63:7f:b8:a2:08:45:d4:be:47:5f:9c:70:
                    9d:d7:7c:a2:4b:3d:c5:6a:f0:6d:92:f1:1c:9f:52:
                    54:4b:d2:20:76:4c:0e:cc:39:69:46:ad:04:2e:9e:
                    15:cb:90:49:6c:ae:f7:f2:dd:c2:93:77:a4:14:85:
                    28:3e:ac:8c:c6:cf:6f:f1:1a:a9:c5:85:50:cc:35:
                    5e:f1:a4:82:74:91:48:bf:0f:85:f3:18:12:a5:88:
                    41:92:7e:43:40:bf:e0:08:8c:ae:80:82:cd:18:11:
                    08:54:92:6a:0a:4f:0b:aa:07:c8:1f:50:b7:5d:43:
                    2a:f7:21:a9:d7:db:78:40:d6:ad:3d:d4:6e:c6:94:
                    c9:f2:b4:45:95:a0:b5:44:5d:fd:1c:c0:09:39:cc:
                    a0:3f:89:7e:48:40:01:b5:e5:7c:09:78:09:fe:e8:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:67:8F:0A:6C:7C:35:08:82:66:CE:74:4C:81:98:1E:D1:67:DA:6B
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138332e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:99:0e:9b:be:13:12:6d:89:d1:50:ee:4c:bc:ab:87:86:9c:
         a5:f3:0f:48:d0:21:f5:bd:9e:31:8a:48:1a:06:2f:24:79:16:
         ce:c0:7e:6d:5a:d7:8f:d0:4d:d4:28:b2:71:0b:32:bf:1f:47:
         a7:2e:29:48:a5:ca:4d:8f:8b:f2:85:41:58:05:1b:9d:de:42:
         70:3f:52:eb:98:61:8e:6d:bf:e6:b7:a8:65:b2:f7:c4:b3:1d:
         cb:14:41:ec:60:3e:13:30:c2:86:bc:c8:94:e8:88:8e:30:35:
         51:2b:92:d9:7c:a3:78:84:9f:3a:c7:85:7d:5c:74:27:3f:f8:
         ba:3f:37:ef:07:da:c5:11:b3:55:c7:7d:6c:7e:1b:3e:31:ec:
         1d:90:ff:3b:04:4f:57:4b:bc:40:74:d7:25:5c:f5:1b:13:a6:
         36:66:b4:1e:6e:2a:8a:24:91:35:2f:87:a7:26:09:08:ca:ae:
         16:62:fa:bb:48:97:37:73:dc:92:52:8d:87:9f:a0:78:fa:3f:
         93:16:c4:98:d2:d0:ba:b9:99:e5:a0:ce:be:c4:94:3d:d2:9a:
         c4:f9:fb:32:41:7e:ad:18:1e:d2:b4:e3:d6:87:43:b4:ea:ab:
         e4:32:68:c5:35:a9:74:1a:79:da:5d:11:b4:93:77:fe:65:c8:
         54:c5:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:43 2026 by rpki-client