Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa
File:                     3230302e38312e35382e302f32332d3234203d3e203532323538.roa (raw, json)
Hash identifier:          ig6LFV8OVKUpuLOtT6QYaMpvDkCOYu4zjXD4Nf/Jtpc=
Subject key identifier:   FD:C0:BB:C4:8C:0F:13:A5:E6:58:B0:1B:2F:46:60:9B:DC:74:54:0E
Certificate issuer:       /CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
Certificate serial:       39224D053CD85087AEF85B8ADC354F6AB7CBA3C4
Authority key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa
Signing time:             Tue 02 Jun 2026 16:45:10 +0000
ROA not before:           Tue 02 Jun 2026 16:40:10 +0000
ROA not after:            Tue 01 Jun 2027 16:45:10 +0000
asID:                     52258
IP address blocks:        200.81.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:22:4d:05:3c:d8:50:87:ae:f8:5b:8a:dc:35:4f:6a:b7:cb:a3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
        Validity
            Not Before: Jun  2 16:40:10 2026 GMT
            Not After : Jun  1 16:45:10 2027 GMT
        Subject: CN=FDC0BBC48C0F13A5E658B01B2F46609BDC74540E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:2d:d4:5c:d4:69:b2:7e:6d:ea:39:4d:45:
                    34:69:a7:ae:e9:1c:64:c0:0d:ce:b5:5a:4e:67:cd:
                    1a:88:87:12:e7:2d:10:f1:97:62:d7:aa:bc:7e:33:
                    89:3f:d9:0f:f8:f7:75:84:c6:b3:9e:08:e2:59:54:
                    7e:8d:ca:bf:ed:0e:05:97:52:ed:8c:1e:17:58:eb:
                    54:eb:63:d5:3f:b3:dd:c2:cc:e2:62:00:4f:a8:3d:
                    37:4d:55:a5:c9:cd:e5:5d:3a:bd:89:ab:f5:07:42:
                    66:db:e5:19:ec:2e:cf:97:84:ca:9e:4b:a2:82:1f:
                    81:73:ef:89:99:16:c5:2c:4f:7e:be:e7:91:2a:01:
                    74:74:24:3e:f7:f8:46:9c:1f:3f:a0:41:8c:16:76:
                    08:5e:9f:39:1b:8f:4b:7f:48:6c:b7:28:8c:03:99:
                    12:bf:b6:8c:24:84:fc:d2:d3:ff:ad:6e:c8:d5:d1:
                    ae:60:57:52:3d:38:66:9b:cf:5f:db:b9:3a:9b:0b:
                    d0:d9:84:7b:fb:8f:47:c6:35:19:90:24:08:bb:c7:
                    1a:a4:0a:9b:24:b6:d9:79:83:06:f1:48:6a:9c:54:
                    31:97:26:98:8e:25:a7:e2:02:0a:91:38:27:2a:3f:
                    d0:cc:1e:38:aa:d1:2a:ca:96:85:79:a5:ff:66:56:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C0:BB:C4:8C:0F:13:A5:E6:58:B0:1B:2F:46:60:9B:DC:74:54:0E
            X509v3 Authority Key Identifier:
                keyid:80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:b0:1b:49:3e:c9:c7:c4:1d:e5:32:ce:16:ef:7e:3d:32:3b:
         13:52:a7:77:ab:4e:c0:a1:ea:3e:01:20:6e:26:90:a8:59:5c:
         d7:d5:32:d5:d4:a4:85:fa:f7:1d:c6:ca:7f:33:24:3c:13:1d:
         bf:67:00:f3:00:15:18:04:3b:d2:2b:5f:a8:ab:35:91:75:c6:
         df:b5:29:07:22:1f:ca:41:95:59:f2:4f:4f:fe:16:b5:4a:a5:
         c8:a2:f9:5b:8f:ea:b3:c6:84:4f:6b:18:12:e3:0f:d7:de:c4:
         36:e8:89:c3:37:84:52:3c:65:11:21:34:7f:aa:bd:e5:7e:28:
         d1:1b:8a:96:94:b5:eb:02:de:a9:67:0e:80:d6:b4:a5:4d:f4:
         89:84:e3:75:71:da:62:49:b1:99:04:52:84:df:d3:4e:48:88:
         24:ea:16:e5:43:e9:19:15:39:4f:56:d7:f8:52:3c:89:dd:12:
         88:00:27:17:ee:04:8b:54:69:08:a0:fc:91:42:58:44:bf:7f:
         6b:2a:67:be:79:ce:91:4f:d5:56:a7:76:04:0d:15:8e:c2:50:
         8d:d1:85:f6:70:5a:86:e6:c3:89:3f:c5:fd:a0:b9:98:8a:70:
         30:e1:6e:86:d9:2b:76:fb:bf:4f:60:76:c7:f3:54:eb:72:9b:
         5e:bb:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:48 2026 by rpki-client