Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa
File:                     3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa (raw, json)
Hash identifier:          NmYkS88FYT78LWELNb11TspHZ20n5lhaEFiU4Q887dY=
Subject key identifier:   37:63:5B:14:40:7A:0D:2A:82:44:1D:6A:A4:54:3D:20:33:9B:2A:77
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       2B308E63F633BB5F7F43968AFBA59F5C000DEE6B
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa
Signing time:             Tue 08 Sep 2026 03:34:26 +0000
ROA not before:           Tue 08 Sep 2026 03:29:26 +0000
ROA not after:            Tue 07 Sep 2027 03:34:26 +0000
asID:                     265622
IP address blocks:        200.110.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:30:8e:63:f6:33:bb:5f:7f:43:96:8a:fb:a5:9f:5c:00:0d:ee:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Sep  8 03:29:26 2026 GMT
            Not After : Sep  7 03:34:26 2027 GMT
        Subject: CN=37635B14407A0D2A82441D6AA4543D20339B2A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:33:20:ce:cd:c1:7f:aa:94:7a:02:42:e3:
                    b2:14:8e:c0:17:85:94:54:c0:18:bf:99:19:62:15:
                    99:67:e0:a2:9b:de:af:76:96:db:45:6b:6e:62:98:
                    b1:00:8d:f0:21:e5:d2:6d:99:1c:35:56:a9:69:58:
                    73:62:99:0d:a3:86:9f:65:bc:1f:df:4f:e0:d2:23:
                    61:1d:ed:79:27:35:cf:4c:6a:ee:c4:9b:fc:a1:2d:
                    7f:25:c7:78:31:6c:bf:b9:e6:9c:8c:04:ec:29:16:
                    d7:c7:14:4b:14:30:bc:f5:30:ca:09:7e:2a:29:b3:
                    a4:a9:16:49:eb:59:7c:a6:38:1b:51:61:a5:69:9c:
                    d0:30:02:4e:8e:34:e0:11:7f:9d:c6:8f:d5:e8:c9:
                    8c:fd:12:3c:db:c0:da:54:11:4c:6b:50:6f:b8:70:
                    3c:93:9a:3a:52:81:b9:18:ea:3d:61:d6:df:2c:fd:
                    9b:24:9d:ff:75:50:7d:eb:52:f1:6c:43:c5:e2:d5:
                    21:47:3e:c5:a6:e7:50:c2:df:1c:ad:8d:81:11:39:
                    30:7a:5e:21:0f:8f:77:e7:d9:d2:a0:3f:12:41:ac:
                    f1:01:0f:1c:09:d7:08:73:0c:13:12:af:50:23:84:
                    51:f1:ab:af:5d:b7:9e:48:63:6d:d9:a2:7c:02:44:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:5B:14:40:7A:0D:2A:82:44:1D:6A:A4:54:3D:20:33:9B:2A:77
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:53:df:b5:16:4b:3e:75:4d:17:ad:f8:3c:29:42:62:ff:
         05:87:94:18:4d:b2:1a:b4:db:5d:2d:41:cc:01:82:e4:21:c0:
         ab:9f:73:7f:ee:4f:48:e6:ef:81:4d:c4:77:cd:af:d3:64:de:
         df:20:39:a3:03:1b:4a:a7:bf:b1:4e:2e:36:6a:d5:d9:fc:a9:
         8c:a6:55:7f:4a:19:06:66:05:de:c6:bf:7a:35:54:c8:60:96:
         59:76:fa:f7:89:95:7d:85:82:b4:ec:f3:a3:3b:72:20:c9:0a:
         11:60:06:95:79:61:56:45:75:b8:6d:55:19:4e:c4:c3:34:21:
         3c:0b:da:a3:1b:5b:b0:0f:33:7e:80:cb:8b:15:4c:f2:b7:39:
         1b:fd:13:36:60:4c:33:97:10:e3:9d:f1:67:e0:b3:a3:90:f4:
         6a:7e:d9:d6:50:52:55:9e:92:75:b9:1b:11:69:3d:99:6d:58:
         aa:82:36:89:6a:da:84:fa:e7:4b:7b:b0:d1:49:08:ce:f7:db:
         15:5c:69:31:d9:20:55:88:fb:19:9a:68:b0:6e:1a:0e:41:02:
         14:86:ab:a2:6c:e0:e4:1f:d7:f4:a6:08:e6:b2:c4:bc:1c:a4:
         5a:86:1d:a3:0e:2c:e4:a2:1e:55:23:89:f3:a5:39:cf:24:77:
         1f:34:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:21:00 2026 by rpki-client