Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36322e302f32332d3234203d3e20323633313939.roa
File:                     3230302e38312e36322e302f32332d3234203d3e20323633313939.roa (raw, json)
Hash identifier:          O7gx5Cthht2zooTmIMRn5YqNOG04WP0obmqOouiWyxg=
Subject key identifier:   F6:24:EF:20:22:F7:C3:5D:32:5E:1A:31:87:F8:04:A1:2F:5D:77:2C
Certificate issuer:       /CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
Certificate serial:       729BA18037BE9578252302F900B2505E1783EE47
Authority key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36322e302f32332d3234203d3e20323633313939.roa
Signing time:             Fri 13 Jun 2025 07:22:03 +0000
ROA not before:           Fri 13 Jun 2025 07:17:03 +0000
ROA not after:            Fri 12 Jun 2026 07:22:03 +0000
asID:                     263199
IP address blocks:        200.81.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9b:a1:80:37:be:95:78:25:23:02:f9:00:b2:50:5e:17:83:ee:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
        Validity
            Not Before: Jun 13 07:17:03 2025 GMT
            Not After : Jun 12 07:22:03 2026 GMT
        Subject: CN=F624EF2022F7C35D325E1A3187F804A12F5D772C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:fa:5b:68:cd:c2:22:7a:ac:6c:6a:86:ee:
                    9b:1d:b7:92:97:0c:f7:47:78:68:91:3b:71:ff:d6:
                    70:a7:6c:1e:80:95:da:d3:45:c8:f6:3c:46:70:30:
                    1a:7c:f5:ba:b5:84:59:37:c9:f2:23:44:4d:98:a1:
                    76:9f:70:a5:ad:82:d4:7c:81:d3:1a:ba:a2:8a:f1:
                    1c:2a:1f:ce:96:6d:37:f4:e2:1f:83:97:05:0c:40:
                    0e:73:81:e4:8c:1f:ec:89:6e:c7:d0:59:77:12:4f:
                    f3:d1:46:a2:01:ca:22:d0:26:79:d8:84:87:a1:59:
                    d0:97:96:6b:7d:9f:71:c3:30:da:d9:89:5d:95:b2:
                    0f:28:d5:3c:b5:52:92:4b:62:38:a0:d1:be:d7:61:
                    8b:b9:f2:a8:cc:29:41:58:24:a3:a5:fb:00:6a:d1:
                    77:59:74:16:50:3a:21:2d:77:9b:b7:16:99:22:bd:
                    09:73:51:68:64:f3:e9:c1:c5:c8:d0:38:73:30:1b:
                    8e:92:8e:30:71:c1:dd:a0:22:ed:09:1e:64:6a:c5:
                    47:b3:41:be:af:6a:e1:d8:50:d0:04:30:f3:e8:00:
                    e4:07:d8:4b:ca:e8:15:48:cc:dd:a8:f2:6f:4e:45:
                    ef:8e:70:22:97:a2:50:0c:7c:f1:0b:30:61:39:56:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:EF:20:22:F7:C3:5D:32:5E:1A:31:87:F8:04:A1:2F:5D:77:2C
            X509v3 Authority Key Identifier:
                keyid:80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36322e302f32332d3234203d3e20323633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:dc:3b:38:76:b8:21:2f:ba:ce:eb:e9:6d:24:53:81:c8:
         63:55:39:42:6a:b8:7e:01:f6:6d:f7:0c:aa:8e:9d:d9:17:62:
         71:04:d4:03:7e:ea:64:3f:0e:13:e6:d1:e7:26:a1:5e:8f:62:
         dd:68:b2:75:77:d9:19:be:7c:98:b1:e9:36:c7:ef:13:d7:59:
         a6:af:9c:fd:a7:10:0e:aa:2d:e6:c4:61:33:32:cd:fe:be:8d:
         09:cc:6c:03:73:27:82:a5:6b:24:69:4c:e0:6e:0b:dc:18:50:
         bc:f2:e5:31:0d:b8:e6:c5:da:78:67:5c:d8:75:78:f6:fd:d6:
         a7:a5:ef:0d:14:46:2b:a1:72:e6:06:61:d1:c3:13:b3:1c:e3:
         e6:8e:50:87:26:c7:e4:72:9c:cf:00:d8:80:b1:95:4d:b6:93:
         47:57:b4:0c:7a:f3:4e:61:d1:f0:21:23:9e:35:00:17:e2:80:
         8b:22:ed:ef:87:44:4f:d4:12:80:99:a7:46:9c:69:00:91:45:
         95:8f:89:cb:75:b4:9c:2c:94:30:d8:83:28:96:fb:3a:4f:d2:
         22:4e:61:c9:e9:81:a4:14:ab:8c:dd:94:1a:e4:40:f2:4f:c0:
         41:12:8d:e4:76:2d:27:ca:ea:12:97:a9:71:64:c9:bd:ce:5a:
         03:54:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 20:32:24 2025 by rpki-client