Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138302e302f32332d3233203d3e203138383232.roa
File:                     3230302e37342e3138302e302f32332d3233203d3e203138383232.roa (raw, json)
Hash identifier:          PM6enGy74xiWbIPF1mmxeljqj4gm253U4fCQ+42sOuM=
Subject key identifier:   AB:5C:9C:AB:3A:20:30:1C:50:48:86:F5:EF:14:B4:F9:18:E2:DF:D4
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       267000ED34D8DE96B6D0BAF59E9A45973738512F
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138302e302f32332d3233203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:24 +0000
ROA not before:           Tue 01 Jul 2025 19:20:24 +0000
ROA not after:            Tue 30 Jun 2026 19:25:24 +0000
asID:                     18822
IP address blocks:        200.74.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:70:00:ed:34:d8:de:96:b6:d0:ba:f5:9e:9a:45:97:37:38:51:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:24 2025 GMT
            Not After : Jun 30 19:25:24 2026 GMT
        Subject: CN=AB5C9CAB3A20301C504886F5EF14B4F918E2DFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:4e:da:5f:0f:df:e5:97:60:ab:75:76:64:
                    81:60:00:ff:c6:d7:8e:45:c1:dd:e7:15:2a:ba:fc:
                    a4:55:b9:5a:c6:59:5a:d5:76:8b:1c:fa:81:bc:c0:
                    52:80:ee:0e:f7:7a:c5:af:77:a3:a9:db:e8:6b:50:
                    bf:40:fe:2a:b8:ac:ab:f5:1a:a7:37:12:30:a9:ac:
                    e8:8a:09:64:1d:f3:ac:dc:0d:d0:aa:92:bb:ce:60:
                    29:1a:7e:d2:d8:ee:71:57:43:ec:95:9c:f1:65:8b:
                    aa:82:1f:1c:74:10:3d:de:1e:cb:8d:73:c6:e0:d2:
                    ef:09:1e:f4:46:83:23:2d:b9:69:d6:59:08:41:0b:
                    cf:0b:05:da:be:5a:fc:20:a4:c3:57:6e:25:49:d1:
                    66:69:9e:c6:0a:60:9e:35:79:95:8c:06:c2:27:d7:
                    70:45:d7:b6:ff:ee:76:4b:72:6e:79:a7:ec:e7:c5:
                    a3:90:69:cc:2d:21:5a:1e:24:e4:94:2b:90:37:dc:
                    4e:d7:d2:44:b4:3a:a2:88:5a:2b:6d:2e:bb:8b:03:
                    8f:bc:b9:db:38:c1:26:57:a2:b9:0f:74:c3:f2:b4:
                    33:81:04:5a:90:d4:30:03:47:2b:65:d2:08:60:99:
                    1a:cb:41:79:91:0e:54:33:92:04:b9:2e:c1:e5:5e:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:9C:AB:3A:20:30:1C:50:48:86:F5:EF:14:B4:F9:18:E2:DF:D4
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3230302e37342e3138302e302f32332d3233203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:90:59:14:57:8e:63:49:72:06:79:ce:1b:23:f1:78:11:63:
         3f:e6:1e:79:07:7d:47:e2:fd:bb:8b:0a:42:82:7a:d3:61:95:
         b8:9b:e2:65:95:2a:c3:bf:31:07:e8:cb:df:72:6f:d1:5f:3e:
         3f:22:7e:49:71:de:88:03:97:86:71:12:cf:9f:c8:fb:58:8c:
         44:cf:6b:e6:59:47:90:20:cc:20:74:63:e9:23:7b:70:52:3d:
         c9:9a:42:d3:8f:3d:8f:6e:03:ca:9b:e5:97:86:de:15:3d:09:
         f0:04:e8:3f:bf:0b:18:71:f6:35:5e:a4:24:bb:8e:6a:ff:1b:
         a4:4d:e6:76:a7:54:a0:e7:b4:bc:fc:a0:e7:8a:4c:b3:13:5e:
         d5:6a:49:57:51:d8:b8:fe:11:37:ef:a8:b5:fc:c8:76:d7:ba:
         33:b6:ce:48:c4:fc:e3:9b:b1:9a:bf:2a:3e:6b:b0:18:b8:ed:
         68:19:e1:44:25:75:c7:78:59:55:4e:9b:b0:be:8a:5f:88:e7:
         07:23:5e:45:75:20:ba:da:2b:e9:1b:af:68:53:bd:01:9e:24:
         f5:1c:9d:e5:2c:04:73:bc:ff:9f:4d:f9:3f:17:64:40:98:f9:
         ed:70:9a:f8:80:69:b4:9d:e8:65:64:de:d1:c5:4e:e8:43:5b:
         26:3b:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:58:53 2025 by rpki-client