Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233302e302f32332d3234203d3e203138383232.roa
File:                     3230302e3131392e3233302e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          LsZwncF/gl27dVOWdj3lp12J//pTVXIqUXhZq/pplz8=
Subject key identifier:   64:F1:CB:76:39:AC:1A:6A:88:E3:20:9C:6F:6B:A3:3C:9B:BD:4B:D0
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4659B87E624CDEDA53249030DD44BD266691DE21
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233302e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:00 +0000
ROA not before:           Tue 01 Jul 2025 19:20:00 +0000
ROA not after:            Tue 30 Jun 2026 19:25:00 +0000
asID:                     18822
IP address blocks:        200.119.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:b8:7e:62:4c:de:da:53:24:90:30:dd:44:bd:26:66:91:de:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:00 2025 GMT
            Not After : Jun 30 19:25:00 2026 GMT
        Subject: CN=64F1CB7639AC1A6A88E3209C6F6BA33C9BBD4BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:2f:05:26:df:e3:c8:c5:1a:75:75:39:a5:
                    25:8a:f0:ff:3d:0d:83:5d:8c:a9:ca:28:92:b2:71:
                    f1:87:19:92:06:74:4f:77:6e:c3:6c:08:eb:3e:5b:
                    01:99:f1:16:7e:1b:9b:a8:3c:c1:f6:48:33:3e:06:
                    c1:10:a2:e7:96:65:31:ef:7c:db:25:71:c7:88:72:
                    71:b8:83:5b:96:cf:1e:5b:77:18:3f:fd:79:ec:4d:
                    ce:ce:2a:33:89:07:9e:66:86:e7:47:b6:a1:07:5c:
                    5e:e2:2f:02:df:32:c0:18:6d:c8:03:e4:7c:25:c5:
                    a5:83:9b:1c:95:a8:83:76:af:7f:96:b6:81:c3:a8:
                    f9:b4:a3:c5:39:51:71:67:1c:f5:e4:b3:07:32:68:
                    00:87:2c:47:27:b8:5c:10:c5:db:34:1f:8e:2a:44:
                    8e:b4:91:6e:cb:af:60:06:23:d0:dc:11:26:6b:4b:
                    c7:65:a6:a8:2d:c2:a8:e7:d1:bd:4b:0a:fb:f1:a0:
                    cf:4f:98:e9:73:52:ba:b6:a5:48:7d:29:86:6a:d8:
                    be:3b:74:40:c5:ce:5e:c9:d9:43:f2:d2:1d:66:bc:
                    29:be:23:a4:05:00:5c:36:bc:a5:15:90:e8:79:e5:
                    4c:40:bb:3c:bb:7d:97:4b:4b:83:70:43:22:c9:8d:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F1:CB:76:39:AC:1A:6A:88:E3:20:9C:6F:6B:A3:3C:9B:BD:4B:D0
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e3131392e3233302e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:0c:1e:98:a9:43:2c:67:77:68:fe:a2:21:66:a9:3a:e9:
         6b:f2:09:63:03:0b:eb:05:8a:ef:f5:b5:39:31:6d:27:1a:92:
         a2:5a:99:ef:07:a8:21:aa:6e:26:af:ae:34:e6:3d:0f:5b:bf:
         26:e2:72:2f:df:c3:f0:cf:5e:44:5c:c5:52:34:69:b0:21:fa:
         e7:4c:60:86:0c:f2:26:0e:32:a5:cb:9a:15:15:1e:e3:28:a4:
         8d:39:6c:1f:9d:09:40:a6:f8:21:3e:50:ff:30:9d:e7:92:c0:
         f5:08:cc:2c:34:71:16:88:05:ed:45:ad:cd:de:a0:64:b2:8d:
         13:4f:bf:be:80:73:31:20:78:5f:8b:13:28:f6:bd:4b:13:24:
         14:e5:24:70:90:62:1b:e5:72:7b:f1:e2:99:c3:e0:79:c0:fe:
         b1:c0:b1:02:e6:6f:42:41:ed:87:dc:5d:95:04:b2:85:62:98:
         e7:55:14:20:bc:de:f1:6a:6d:9a:b3:c5:de:ca:37:4d:b3:7a:
         06:a7:dc:fb:e4:f8:4a:a9:c7:9b:f1:e2:9d:93:51:79:b1:58:
         60:30:1c:c4:cd:34:f5:b9:cb:54:79:16:25:3a:61:de:90:27:
         17:d4:21:5c:e5:01:44:1d:8a:01:4e:64:07:4b:70:18:50:90:
         2c:8c:30:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:46:44 2025 by rpki-client