Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BCA5D881111DF3B73558AAD90CDB746BF3584FFF754F046831B91A808028AE5/0/3230312e3135382e33322e302f32312d3234203d3e203238353234.roa
File:                     3230312e3135382e33322e302f32312d3234203d3e203238353234.roa (raw, json)
Hash identifier:          yLL1K/vGP4kqeZxFqqRacOL8nI7abVeo/pCj9EM+3f4=
Subject key identifier:   DF:C2:A7:4D:FB:67:BF:C3:21:19:AB:05:61:EF:D9:9E:9E:02:2B:21
Certificate issuer:       /CN=C56D01EB150A9056A6D40A3082F181341A1143F8
Certificate serial:       39416FAB0431DD35C4CD1B2D715A0103FDE50C9D
Authority key identifier: C5:6D:01:EB:15:0A:90:56:A6:D4:0A:30:82:F1:81:34:1A:11:43:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C56D01EB150A9056A6D40A3082F181341A1143F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BCA5D881111DF3B73558AAD90CDB746BF3584FFF754F046831B91A808028AE5/0/3230312e3135382e33322e302f32312d3234203d3e203238353234.roa
Signing time:             Fri 10 Oct 2025 15:45:00 +0000
ROA not before:           Fri 10 Oct 2025 15:40:00 +0000
ROA not after:            Fri 09 Oct 2026 15:45:00 +0000
asID:                     28524
IP address blocks:        201.158.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BCA5D881111DF3B73558AAD90CDB746BF3584FFF754F046831B91A808028AE5/0/C56D01EB150A9056A6D40A3082F181341A1143F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BCA5D881111DF3B73558AAD90CDB746BF3584FFF754F046831B91A808028AE5/0/C56D01EB150A9056A6D40A3082F181341A1143F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C56D01EB150A9056A6D40A3082F181341A1143F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:41:6f:ab:04:31:dd:35:c4:cd:1b:2d:71:5a:01:03:fd:e5:0c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C56D01EB150A9056A6D40A3082F181341A1143F8
        Validity
            Not Before: Oct 10 15:40:00 2025 GMT
            Not After : Oct  9 15:45:00 2026 GMT
        Subject: CN=DFC2A74DFB67BFC32119AB0561EFD99E9E022B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:86:6b:9d:33:d1:76:15:02:f0:ee:5d:0b:
                    09:0e:00:fe:f1:04:e0:0a:00:b0:35:5f:f0:4a:6f:
                    8e:de:cb:f4:5c:85:0c:dc:44:ee:cb:fa:f4:e4:4f:
                    68:f9:b3:48:62:7a:c9:e1:bd:ef:62:31:84:6b:04:
                    ac:04:d1:e4:4a:f0:26:6c:6e:50:13:72:1a:6e:6e:
                    3a:f0:5a:ed:a0:b3:fd:99:f0:d6:6d:f2:e2:b2:cb:
                    f1:79:9f:95:65:f7:96:15:cc:4b:db:3b:29:ac:d9:
                    58:50:5f:ce:6b:00:05:9e:7c:2b:e7:58:9e:7c:82:
                    84:44:d6:55:89:5e:57:f4:54:48:cb:9f:89:49:9f:
                    5f:8d:3f:53:66:dc:86:62:b1:12:6f:ca:f8:0a:19:
                    fa:a7:13:5d:cd:52:f8:c6:a0:af:e9:46:28:c2:06:
                    54:46:83:11:5f:78:b0:1a:af:a2:4d:92:4d:d9:ea:
                    88:64:b7:ce:09:f2:1d:3f:d5:6e:27:01:13:54:30:
                    55:f3:e4:b3:27:64:e5:43:37:49:8e:6e:ea:9e:31:
                    b0:1f:3d:36:fe:84:1f:c8:55:a0:e1:4c:0d:e4:21:
                    3b:c0:e8:23:77:32:97:02:a1:2e:4a:8e:ee:64:4a:
                    56:62:62:37:b4:e7:c5:c5:b8:55:a8:38:eb:0d:6e:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:A7:4D:FB:67:BF:C3:21:19:AB:05:61:EF:D9:9E:9E:02:2B:21
            X509v3 Authority Key Identifier:
                keyid:C5:6D:01:EB:15:0A:90:56:A6:D4:0A:30:82:F1:81:34:1A:11:43:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BCA5D881111DF3B73558AAD90CDB746BF3584FFF754F046831B91A808028AE5/0/C56D01EB150A9056A6D40A3082F181341A1143F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C56D01EB150A9056A6D40A3082F181341A1143F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BCA5D881111DF3B73558AAD90CDB746BF3584FFF754F046831B91A808028AE5/0/3230312e3135382e33322e302f32312d3234203d3e203238353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:14:00:f3:36:04:df:ca:71:01:08:fc:84:1f:e1:10:30:1d:
         d0:d6:6c:ee:34:a6:0d:28:f8:1f:c3:95:68:f0:63:fe:0e:49:
         a4:e7:8c:d8:2c:12:34:b9:11:66:38:d2:d3:32:69:19:fb:43:
         76:c0:92:89:d6:6d:56:2f:1b:92:30:e2:b8:b9:79:ea:12:3b:
         9e:db:33:28:c5:8f:73:ec:82:b8:2b:25:b5:09:c2:a6:3d:42:
         e7:57:23:a8:2c:37:7e:51:f8:21:4c:fa:7c:12:6b:22:50:b0:
         5b:b4:2e:4d:e2:a6:5f:21:ad:16:2d:dc:2d:5c:c2:6c:88:60:
         37:98:67:5c:88:8c:3e:95:46:de:c5:11:63:d1:80:e6:ae:b1:
         f6:08:31:95:6e:1b:00:71:79:fa:73:94:b4:98:bd:a6:1c:d5:
         be:08:0a:4c:77:34:8a:68:9d:94:8a:d6:91:f7:8f:75:68:ea:
         7e:7d:ee:8a:1c:36:33:64:bf:95:dc:13:fd:9c:f5:88:8d:27:
         7c:82:f3:fe:58:65:a9:4c:83:82:a0:77:27:c5:08:03:13:25:
         f8:6f:f6:72:4f:9e:2a:e0:f1:87:8d:2a:1a:c7:82:f9:71:5a:
         a9:44:c7:8a:49:e6:c4:f9:60:38:66:5f:0d:42:04:48:c6:ce:
         a7:25:b8:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOUFvqwQx3TXEzRstcVoBA/3lDJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU2RDAxRUIxNTBBOTA1NkE2RDQwQTMwODJGMTgxMzQx
QTExNDNGODAeFw0yNTEwMTAxNTQwMDBaFw0yNjEwMDkxNTQ1MDBaMDMxMTAvBgNV
BAMTKERGQzJBNzRERkI2N0JGQzMyMTE5QUIwNTYxRUZEOTlFOUUwMjJCMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxoZrnTPRdhUC8O5dCwkOAP7x
BOAKALA1X/BKb47ey/RchQzcRO7L+vTkT2j5s0hiesnhve9iMYRrBKwE0eRK8CZs
blATchpubjrwWu2gs/2Z8NZt8uKyy/F5n5Vl95YVzEvbOyms2VhQX85rAAWefCvn
WJ58goRE1lWJXlf0VEjLn4lJn1+NP1Nm3IZisRJvyvgKGfqnE13NUvjGoK/pRijC
BlRGgxFfeLAar6JNkk3Z6ohkt84J8h0/1W4nARNUMFXz5LMnZOVDN0mObuqeMbAf
PTb+hB/IVaDhTA3kITvA6CN3MpcCoS5Kju5kSlZiYje058XFuFWoOOsNbgwTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU38KnTftnv8MhGasFYe/Znp4CKyEwHwYDVR0j
BBgwFoAUxW0B6xUKkFam1AowgvGBNBoRQ/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkNBNUQ4ODExMTFERjNCNzM1NThBQUQ5MENEQjc0NkJG
MzU4NEZGRjc1NEYwNDY4MzFCOTFBODA4MDI4QUU1LzAvQzU2RDAxRUIxNTBBOTA1
NkE2RDQwQTMwODJGMTgxMzQxQTExNDNGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTZEMDFFQjE1MEE5MDU2QTZE
NDBBMzA4MkYxODEzNDFBMTE0M0Y4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJDQTVEODgxMTExREYzQjczNTU4QUFEOTBDREI3NDZCRjM1ODRGRkY3
NTRGMDQ2ODMxQjkxQTgwODAyOEFFNS8wLzMyMzAzMTJlMzEzNTM4MmUzMzMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODM1MzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8meIDAN
BgkqhkiG9w0BAQsFAAOCAQEAYxQA8zYE38pxAQj8hB/hEDAd0NZs7jSmDSj4H8OV
aPBj/g5JpOeM2CwSNLkRZjjS0zJpGftDdsCSidZtVi8bkjDiuLl56hI7ntszKMWP
c+yCuCsltQnCpj1C51cjqCw3flH4IUz6fBJrIlCwW7QuTeKmXyGtFi3cLVzCbIhg
N5hnXIiMPpVG3sURY9GA5q6x9ggxlW4bAHF5+nOUtJi9phzVvggKTHc0imidlIrW
kfePdWjqfn3uihw2M2S/ldwT/Zz1iI0nfILz/lhlqUyDgqB3J8UIAxMl+G/2ck+e
KuDxh40qGseC+XFaqUTHiknmxPlgOGZfDUIESMbOpyW4Ag==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:14 2025 by rpki-client