Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa
File:                     3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa (raw, json)
Hash identifier:          6QbMareBEV4C1iJOikDT6Fo/DZ3cSYcOXmr4LZPaKiQ=
Subject key identifier:   DE:2A:8F:FF:78:B3:E3:EA:0B:1D:41:12:3E:76:17:4D:D1:D9:8A:6C
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       44325970BA2AB0661F91A7A85A268111603E481F
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa
Signing time:             Tue 08 Sep 2026 03:34:25 +0000
ROA not before:           Tue 08 Sep 2026 03:29:25 +0000
ROA not after:            Tue 07 Sep 2027 03:34:25 +0000
asID:                     265622
IP address blocks:        200.110.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:32:59:70:ba:2a:b0:66:1f:91:a7:a8:5a:26:81:11:60:3e:48:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Sep  8 03:29:25 2026 GMT
            Not After : Sep  7 03:34:25 2027 GMT
        Subject: CN=DE2A8FFF78B3E3EA0B1D41123E76174DD1D98A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:78:ce:b0:dd:aa:aa:5f:a4:a3:39:49:47:
                    c8:21:46:a4:32:9b:45:b9:47:22:af:fb:ba:4d:ed:
                    3e:aa:d1:cc:36:86:ab:4b:35:ae:b7:ad:ef:c6:1b:
                    0b:a6:aa:a4:dd:df:f7:89:20:66:b3:d6:b7:4f:ea:
                    bb:12:51:b2:f5:24:88:88:2e:be:3b:e9:86:7f:a3:
                    ef:d1:a3:af:56:6d:4b:95:a1:37:2e:8e:76:d9:3d:
                    84:1c:da:2a:ef:5e:39:32:0e:2b:33:40:45:5b:88:
                    22:4e:e4:d4:f5:f8:9b:e2:a1:1e:b7:9c:1e:cd:2c:
                    74:ae:34:7e:5b:04:32:df:0c:65:c2:2b:0f:e9:fb:
                    bd:5b:23:e7:47:29:dc:ae:44:2a:7c:5a:1c:b1:ee:
                    c1:99:bf:b2:fe:b8:4e:4e:88:82:29:3a:8d:68:b2:
                    93:c1:48:55:0f:ac:63:e0:b5:fc:63:55:0f:02:30:
                    cc:c4:fa:28:b8:a9:ff:15:b6:a7:b1:43:b3:34:98:
                    4e:2d:2f:66:5d:83:5b:89:ec:9b:1c:7c:8b:2e:a1:
                    ac:3d:38:18:5e:1e:dd:bd:3b:5e:39:2f:da:ac:27:
                    52:03:cc:90:de:ff:cc:e0:9d:bd:7e:14:16:63:57:
                    94:0b:b8:61:12:be:0e:0d:e2:ae:ed:31:86:5c:ac:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:8F:FF:78:B3:E3:EA:0B:1D:41:12:3E:76:17:4D:D1:D9:8A:6C
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:95:39:af:31:7c:93:35:07:39:ed:0a:b6:ea:2f:69:c3:
         52:0a:ae:1f:83:ab:9d:bd:45:9f:fd:7e:3d:0d:2d:8a:be:9f:
         a8:77:3b:56:63:d2:b9:df:29:c4:01:7b:0e:9c:89:6b:24:57:
         ca:ae:4b:c6:fd:76:df:d8:04:23:75:89:11:71:f5:5e:4b:c8:
         48:d4:25:44:78:04:40:6e:df:3c:05:a7:3c:f4:f4:f8:17:0a:
         55:8f:6f:61:b0:9b:9d:bc:bb:9b:92:76:37:f7:88:5a:98:97:
         9a:4e:ba:95:9e:c0:58:95:3a:95:17:40:b0:d1:70:0b:fb:3d:
         f9:49:de:67:19:a8:0e:75:65:c7:a8:e1:5a:43:11:2f:5c:d0:
         01:19:bb:04:d1:eb:57:fa:e7:15:70:a3:6e:01:80:ed:98:35:
         27:21:5e:b7:d2:2e:28:49:8b:47:56:97:b9:64:fb:f7:e4:ca:
         7b:e2:71:c2:42:8d:76:11:d0:ac:32:ae:3d:47:b5:d1:c9:1d:
         57:89:51:81:01:94:ea:e7:e8:28:83:e2:dd:11:a5:2e:ad:f8:
         f2:1c:ed:21:ee:a9:c0:e0:48:ae:a4:74:1f:18:26:44:27:2b:
         50:3d:f5:f7:6f:f6:53:04:47:c9:e1:70:b3:0c:0e:3a:20:e4:
         5b:90:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:21:02 2026 by rpki-client