Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130342e302f32342d3234203d3e20323635363232.roa
File:                     3230302e3131302e3130342e302f32342d3234203d3e20323635363232.roa (raw, json)
Hash identifier:          KxxwWvaPzHIr2awqulNEmg51s6Xqn2Rtea+RSEkxitQ=
Subject key identifier:   3B:59:B2:2B:A9:EA:16:22:4C:44:60:94:D7:A9:ED:E5:21:CC:63:DC
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       69245D96A74523EA44C16B4B532E0FC33A514182
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130342e302f32342d3234203d3e20323635363232.roa
Signing time:             Tue 08 Sep 2026 03:34:25 +0000
ROA not before:           Tue 08 Sep 2026 03:29:25 +0000
ROA not after:            Tue 07 Sep 2027 03:34:25 +0000
asID:                     265622
IP address blocks:        200.110.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:5d:96:a7:45:23:ea:44:c1:6b:4b:53:2e:0f:c3:3a:51:41:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Sep  8 03:29:25 2026 GMT
            Not After : Sep  7 03:34:25 2027 GMT
        Subject: CN=3B59B22BA9EA16224C446094D7A9EDE521CC63DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:3a:79:84:26:96:11:c9:8f:60:27:ee:88:
                    8e:1d:8e:c2:53:af:a1:4e:c7:b4:ba:82:56:c0:72:
                    1e:bb:94:c7:72:40:29:5b:c2:9e:71:2d:e3:5c:dd:
                    d3:ce:22:cb:0e:e9:58:12:94:f1:99:61:10:5a:4c:
                    03:e3:65:87:09:16:46:ce:50:9a:fe:3a:03:4b:e4:
                    13:9f:25:69:d2:2d:78:8f:1c:2d:af:94:43:70:38:
                    86:36:f3:3b:2c:7b:77:61:13:b1:4b:f0:0c:4b:01:
                    62:5e:f3:76:aa:3c:f2:92:6e:42:b7:1a:9e:44:1b:
                    0f:d4:95:53:e0:7c:e7:0c:73:cb:25:00:64:0a:49:
                    09:05:ed:fb:5f:1d:2c:fc:0d:c6:29:52:2e:13:75:
                    e3:fc:75:70:9e:bd:a7:a0:fe:be:cc:29:0b:af:37:
                    2f:e0:d8:1d:e3:58:de:82:d7:cc:20:15:56:b5:ff:
                    7d:af:15:8c:ce:27:bb:aa:ef:ff:f1:10:32:8f:69:
                    8f:44:54:14:76:b1:46:12:25:63:49:6f:79:19:05:
                    58:b8:1d:4d:cb:f6:73:31:16:b4:d1:f6:61:b9:2d:
                    31:05:15:1e:0e:57:a6:7e:00:2b:80:81:ee:7e:92:
                    92:61:5b:88:66:6e:0f:53:b5:6c:d7:9a:91:04:0e:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:59:B2:2B:A9:EA:16:22:4C:44:60:94:D7:A9:ED:E5:21:CC:63:DC
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130342e302f32342d3234203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:b5:d9:13:13:30:a2:9a:3e:00:d8:3e:70:a1:62:38:d9:
         96:36:df:c9:4b:94:f5:a4:d6:d4:64:4c:f6:63:e8:76:1d:87:
         86:f0:49:0e:32:e7:d9:60:bc:d2:c6:d0:07:c4:29:03:28:36:
         aa:89:3e:75:07:9c:28:5d:82:2c:0c:d2:72:4b:e8:6f:1f:d5:
         f0:3d:3a:bf:a4:52:49:a1:4f:8c:d3:0e:80:1f:e6:10:e6:03:
         0d:aa:d4:96:c3:32:66:1c:98:74:c8:9a:ac:59:49:99:32:6c:
         ce:cb:09:2a:5d:a2:24:da:56:36:ed:57:fa:a5:47:73:99:87:
         8e:01:77:50:28:15:c6:50:e5:04:1d:8b:80:f9:a9:fd:04:90:
         7b:23:45:de:3b:f0:ad:4b:5d:c2:a6:f2:be:7f:b8:ac:4d:18:
         05:d2:62:fa:7d:6e:f0:28:f3:ed:59:3b:f3:b8:50:d7:44:91:
         bb:ec:90:76:64:1b:2a:ce:56:4d:d7:81:68:34:a6:fe:a7:3d:
         00:db:26:d2:64:cd:a9:a1:4e:ab:3c:91:58:74:43:e3:1f:15:
         de:24:3c:84:31:e9:ad:fa:0a:11:f6:04:fc:2e:bb:85:c7:c6:
         97:ff:41:3d:3e:65:a4:61:6e:96:ef:9a:c5:26:d1:2f:3d:ac:
         34:96:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:21:03 2026 by rpki-client