Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
File:                     3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa (raw, json)
Hash identifier:          Jg2wd6yQDl8BHhjmD4ZSaszPFZ2YSalPpjjyHXKx2OE=
Subject key identifier:   D8:62:CC:5F:C1:68:2B:83:42:33:CD:FB:DA:D9:40:06:14:FC:58:E8
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       2A9BB822402E64161807341DB5414B13BA573953
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
Signing time:             Fri 25 Sep 2026 14:36:50 +0000
ROA not before:           Fri 25 Sep 2026 14:31:50 +0000
ROA not after:            Fri 24 Sep 2027 14:36:50 +0000
asID:                     14709
IP address blocks:        181.197.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9b:b8:22:40:2e:64:16:18:07:34:1d:b5:41:4b:13:ba:57:39:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:50 2026 GMT
            Not After : Sep 24 14:36:50 2027 GMT
        Subject: CN=D862CC5FC1682B834233CDFBDAD9400614FC58E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:a9:88:9e:e6:ad:91:fa:d0:67:65:10:c9:
                    2a:f0:22:41:da:79:66:b9:ba:20:57:d2:5e:f9:51:
                    63:c2:a8:71:cb:89:5a:26:e5:d9:ca:d2:52:87:c5:
                    3d:b4:54:01:2f:dc:59:6c:11:65:cb:6c:18:7a:bf:
                    60:63:4c:ae:df:37:ec:b6:4c:d8:75:71:8c:0f:f0:
                    e7:5a:50:80:4a:18:44:15:fa:49:78:d0:5f:93:11:
                    5d:31:c6:45:06:ef:47:81:64:6b:29:e2:0d:ba:b6:
                    19:f0:5e:f0:dd:7b:ce:04:ad:59:92:ac:e9:e4:69:
                    82:c6:bc:e7:4e:68:b7:6b:d8:e6:3c:5e:24:bf:30:
                    4c:d7:0a:2b:37:0c:84:c1:eb:b0:f2:48:48:bc:57:
                    a3:74:db:df:53:0d:cb:f6:14:94:d2:a6:69:14:aa:
                    db:ee:bd:79:0e:22:4e:fb:d2:5c:59:78:f1:3a:95:
                    94:f9:85:79:50:dd:29:2d:d6:7a:0a:0f:52:de:4c:
                    30:b1:52:22:72:40:af:09:a6:b5:b0:98:45:f6:db:
                    8a:85:7b:95:f3:74:8d:e1:74:af:27:c0:ae:85:2a:
                    1b:15:de:3f:20:36:0c:5b:e8:d1:92:45:b8:53:2f:
                    69:02:c3:6d:a2:fb:fb:7a:2d:7a:74:58:74:98:cc:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:62:CC:5F:C1:68:2B:83:42:33:CD:FB:DA:D9:40:06:14:FC:58:E8
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.197.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:78:70:72:c4:e2:ac:02:3c:75:d6:6c:0f:13:81:74:c6:
         c8:e4:90:b1:ce:72:bb:b6:d6:70:53:6c:90:9b:34:06:8d:5c:
         79:fa:e4:e8:d3:4d:aa:e9:4a:91:a6:d2:f2:77:c0:be:0c:2f:
         19:67:2b:7e:07:f4:a7:0e:35:99:80:e4:4b:d9:72:24:56:ba:
         90:d0:a8:02:a1:be:fa:00:69:29:10:69:61:06:1e:42:10:c6:
         9e:dd:73:fd:49:6a:10:73:ac:00:b6:9c:5a:4a:14:0d:4c:aa:
         c8:e7:09:5d:da:7f:c7:0a:18:08:e0:96:2c:f2:79:bb:17:36:
         8e:0c:61:37:c5:57:83:a5:6c:57:30:4e:97:5d:8d:24:e9:f3:
         d2:3d:6b:6f:7d:86:19:8f:48:fd:67:ce:7e:aa:f8:34:43:60:
         b0:39:95:5b:3b:d2:25:cb:e5:10:db:4d:0c:1e:5f:dd:5e:4e:
         1c:75:c6:b0:a1:57:d5:23:b2:95:94:0a:1b:55:24:3b:87:db:
         22:7d:48:65:4b:8c:93:98:2b:a0:30:b0:8b:75:3a:92:e9:9c:
         d7:3a:da:ad:c2:78:03:68:a7:10:63:c5:d7:d4:f4:d5:27:33:
         4f:58:87:0f:28:c3:ff:1a:6d:fa:f4:4c:59:6f:74:8a:d7:86:
         bb:57:f0:a3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKpu4IkAuZBYYBzQdtUFLE7pXOVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNTBaFw0yNzA5MjQxNDM2NTBaMDMxMTAvBgNV
BAMTKEQ4NjJDQzVGQzE2ODJCODM0MjMzQ0RGQkRBRDk0MDA2MTRGQzU4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVQqmInuatkfrQZ2UQySrwIkHa
eWa5uiBX0l75UWPCqHHLiVom5dnK0lKHxT20VAEv3FlsEWXLbBh6v2BjTK7fN+y2
TNh1cYwP8OdaUIBKGEQV+kl40F+TEV0xxkUG70eBZGsp4g26thnwXvDde84ErVmS
rOnkaYLGvOdOaLdr2OY8XiS/MEzXCis3DITB67DySEi8V6N0299TDcv2FJTSpmkU
qtvuvXkOIk770lxZePE6lZT5hXlQ3Skt1noKD1LeTDCxUiJyQK8JprWwmEX224qF
e5XzdI3hdK8nwK6FKhsV3j8gNgxb6NGSRbhTL2kCw22i+/t6LXp0WHSYzLkdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2GLMX8FoK4NCM8372tlABhT8WOgwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMxMzgzMTJlMzEzOTM3MmUzMTMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM0MzczMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtcV8
MA0GCSqGSIb3DQEBCwUAA4IBAQBqkXhwcsTirAI8ddZsDxOBdMbI5JCxznK7ttZw
U2yQmzQGjVx5+uTo002q6UqRptLyd8C+DC8ZZyt+B/SnDjWZgORL2XIkVrqQ0KgC
ob76AGkpEGlhBh5CEMae3XP9SWoQc6wAtpxaShQNTKrI5wld2n/HChgI4JYs8nm7
FzaODGE3xVeDpWxXME6XXY0k6fPSPWtvfYYZj0j9Z85+qvg0Q2CwOZVbO9Ily+UQ
200MHl/dXk4cdcawoVfVI7KVlAobVSQ7h9sifUhlS4yTmCugMLCLdTqS6ZzXOtqt
wngDaKcQY8XX1PTVJzNPWIcPKMP/Gm369ExZb3SK14a7V/Cj
-----END CERTIFICATE-----
Generated at Wed Oct 28 23:38:15 2026 by rpki-client