Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38362e302f32332d3234203d3e203238303032.roa
File:                     3230302e302e38362e302f32332d3234203d3e203238303032.roa (raw, json)
Hash identifier:          DnucnR9cIpLwtGCw2dgsQTB6D+g5SetTeExdkY2qiB0=
Subject key identifier:   EB:FE:2A:F2:BC:6B:51:F3:CE:35:05:87:9D:EE:7F:FE:C6:C4:6E:78
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7D5EFC74FF59423B1CD66579F62DA3C2702F803B
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38362e302f32332d3234203d3e203238303032.roa
Signing time:             Sun 07 Sep 2025 00:43:35 +0000
ROA not before:           Sun 07 Sep 2025 00:38:35 +0000
ROA not after:            Sun 06 Sep 2026 00:43:35 +0000
asID:                     28002
IP address blocks:        200.0.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Sep 2025 01:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5e:fc:74:ff:59:42:3b:1c:d6:65:79:f6:2d:a3:c2:70:2f:80:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Sep  7 00:38:35 2025 GMT
            Not After : Sep  6 00:43:35 2026 GMT
        Subject: CN=EBFE2AF2BC6B51F3CE3505879DEE7FFEC6C46E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:4f:0f:de:c8:e0:a6:75:f2:2f:ce:62:24:
                    5d:d0:7d:03:a1:13:20:10:a4:f6:c5:87:aa:3a:db:
                    b0:ed:00:4c:49:78:ad:45:40:92:c4:e2:3f:04:c2:
                    14:ff:ea:fa:f8:c7:b4:fb:58:90:62:c1:fb:4a:7a:
                    82:44:f5:41:de:bf:21:1a:3e:e8:51:b6:c1:ad:fc:
                    0d:8b:e3:8c:09:10:d2:5a:a7:01:0b:3b:3c:ec:c8:
                    35:72:a3:b7:25:d3:31:44:e4:92:3e:2e:1e:b4:8f:
                    5a:a7:46:19:7d:5d:87:e7:8b:39:ae:9d:14:04:b0:
                    c7:b1:9f:be:7d:1a:39:22:69:71:ee:cb:b9:be:56:
                    13:1f:5a:b1:b1:ae:24:b9:0f:b0:36:b0:b3:08:c9:
                    0c:6f:af:1b:be:8c:f5:5b:73:d3:cd:7b:53:e8:be:
                    32:21:58:00:2d:18:6e:28:e9:26:0c:73:67:6e:b5:
                    f3:35:e2:e0:bf:14:58:a7:9c:65:2f:1f:27:17:e5:
                    b0:c3:11:68:d8:df:fd:0e:2c:d2:ef:3a:5a:3e:d3:
                    fa:7b:8c:e3:29:07:ce:bc:70:3e:16:c3:eb:11:97:
                    52:e4:fb:4e:30:da:bd:5b:ca:5b:fa:80:1d:d2:25:
                    63:c8:03:92:c9:52:10:7f:cf:eb:49:70:bf:b2:9f:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:2A:F2:BC:6B:51:F3:CE:35:05:87:9D:EE:7F:FE:C6:C4:6E:78
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38362e302f32332d3234203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:02:2e:76:5a:6c:f2:e1:ad:f4:38:d6:8f:90:d1:3e:b8:e9:
         16:dc:1b:9f:7b:a9:50:ef:a1:c2:a8:06:c0:a2:6c:8d:74:d0:
         39:54:23:ff:9c:f7:85:01:4d:f5:5a:72:c0:a7:ea:47:18:96:
         b5:e8:3f:a6:04:db:fc:7d:4f:09:78:78:5d:df:ca:e7:7e:4c:
         8e:af:a2:52:7e:11:e6:b8:5a:56:d1:43:bc:7f:16:9f:e5:75:
         11:c9:d0:98:3e:db:d2:67:6a:8a:29:9c:c9:ad:64:f5:60:18:
         ce:75:1b:26:96:f8:07:01:af:39:bb:51:dc:41:40:b6:cb:24:
         ae:a3:f4:1e:a0:51:94:dc:4e:b2:38:40:8b:9b:ee:3a:c4:b0:
         a8:a9:ef:3d:83:e2:01:58:98:a4:a2:98:df:8a:74:f6:b4:7f:
         2a:ab:47:4d:2b:4f:40:03:8f:cc:0d:05:11:d9:7f:c8:2a:11:
         58:ea:11:3b:c5:6b:bd:51:cf:55:55:13:f4:55:62:dd:f5:b2:
         99:af:ec:c0:d0:f1:17:e8:8d:a1:da:2c:d4:43:1e:47:1c:16:
         0b:de:3a:f9:92:75:06:4e:1c:be:c3:10:3c:ac:81:1f:73:27:
         19:ab:c5:34:cd:e6:6f:3a:46:63:0b:18:c7:4c:18:d0:87:6f:
         86:30:9c:0f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUfV78dP9ZQjsc1mV59i2jwnAvgDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNTA5MDcwMDM4MzVaFw0yNjA5MDYwMDQzMzVaMDMxMTAvBgNV
BAMTKEVCRkUyQUYyQkM2QjUxRjNDRTM1MDU4NzlERUU3RkZFQzZDNDZFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPE8P3sjgpnXyL85iJF3QfQOh
EyAQpPbFh6o627DtAExJeK1FQJLE4j8EwhT/6vr4x7T7WJBiwftKeoJE9UHevyEa
PuhRtsGt/A2L44wJENJapwELOzzsyDVyo7cl0zFE5JI+Lh60j1qnRhl9XYfnizmu
nRQEsMexn759GjkiaXHuy7m+VhMfWrGxriS5D7A2sLMIyQxvrxu+jPVbc9PNe1Po
vjIhWAAtGG4o6SYMc2dutfM14uC/FFinnGUvHycX5bDDEWjY3/0OLNLvOlo+0/p7
jOMpB868cD4Ww+sRl1Lk+04w2r1bylv6gB3SJWPIA5LJUhB/z+tJcL+yn+h/AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU6/4q8rxrUfPONQWHne5//sbEbngwHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDJlMzAyZTM4MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM4MzAzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByABWMA0GCSqG
SIb3DQEBCwUAA4IBAQAdAi52Wmzy4a30ONaPkNE+uOkW3Bufe6lQ76HCqAbAomyN
dNA5VCP/nPeFAU31WnLAp+pHGJa16D+mBNv8fU8JeHhd38rnfkyOr6JSfhHmuFpW
0UO8fxaf5XURydCYPtvSZ2qKKZzJrWT1YBjOdRsmlvgHAa85u1HcQUC2yySuo/Qe
oFGU3E6yOECLm+46xLCoqe89g+IBWJikopjfinT2tH8qq0dNK09AA4/MDQUR2X/I
KhFY6hE7xWu9Uc9VVRP0VWLd9bKZr+zA0PEX6I2h2izUQx5HHBYL3jr5knUGThy+
wxA8rIEfcycZq8U0zeZvOkZjCxjHTBjQh2+GMJwP
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:00:46 2025 by rpki-client