Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e35322e302f32322d3234203d3e203134373039.roa
File:                     3138312e3139372e35322e302f32322d3234203d3e203134373039.roa (raw, json)
Hash identifier:          IRWor6xKdLDfZz7hKF5qTwuaGsaomd2/PtJjId6RM9Y=
Subject key identifier:   5F:71:C7:3E:26:A5:13:0C:31:73:70:36:74:56:A4:8C:3B:BE:A1:74
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       5133E9445ADC64AE8966118168C0B1D5C6A98C19
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e35322e302f32322d3234203d3e203134373039.roa
Signing time:             Fri 24 Oct 2025 14:35:18 +0000
ROA not before:           Fri 24 Oct 2025 14:30:18 +0000
ROA not after:            Fri 23 Oct 2026 14:35:18 +0000
asID:                     14709
IP address blocks:        181.197.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:33:e9:44:5a:dc:64:ae:89:66:11:81:68:c0:b1:d5:c6:a9:8c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:18 2025 GMT
            Not After : Oct 23 14:35:18 2026 GMT
        Subject: CN=5F71C73E26A5130C317370367456A48C3BBEA174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:1a:e8:f0:51:d2:58:60:e6:f5:6d:13:ff:
                    d1:38:8e:91:6f:99:4f:bd:e4:4f:51:3a:9d:70:0b:
                    bc:2f:38:f0:dd:68:4a:6c:70:9a:53:ac:ed:0b:d7:
                    89:f8:c7:c4:5b:2e:43:bf:04:9a:fa:d3:f0:ea:79:
                    27:b1:65:13:ce:5d:c9:58:40:1b:f3:1a:17:c4:a9:
                    dd:e3:78:ff:18:f1:69:7d:9f:97:5c:f4:36:5b:aa:
                    97:92:95:12:72:1e:8f:de:ae:d9:04:c2:44:3c:1d:
                    db:7d:e3:9c:9d:eb:e9:a3:79:6b:c3:92:ce:26:67:
                    5e:46:5e:d9:8d:9d:08:da:03:60:53:e3:cd:9c:bb:
                    a9:33:80:73:e0:bb:20:35:fa:d6:5c:b4:94:57:a4:
                    93:87:a0:a2:4c:4e:b6:21:d7:78:2a:1f:67:b6:bd:
                    f0:88:68:14:bd:ee:0d:91:87:a4:0c:35:9a:47:97:
                    dd:4b:7f:0b:b2:3c:a8:dc:88:2e:66:22:3f:93:c2:
                    62:c2:62:0c:7a:63:09:76:9e:09:f0:69:d1:94:c7:
                    b4:e4:91:28:73:de:13:b7:13:39:bc:8d:d0:18:cf:
                    dc:59:f5:a5:37:f3:3c:c8:79:44:ec:ff:6e:3d:c5:
                    90:ca:65:a3:98:76:5c:5e:29:ac:35:4d:2b:3e:df:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:71:C7:3E:26:A5:13:0C:31:73:70:36:74:56:A4:8C:3B:BE:A1:74
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e35322e302f32322d3234203d3e203134373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.197.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:9d:52:0b:b6:9e:5c:4b:27:0b:29:da:b3:18:74:25:33:
         34:cd:86:86:5e:3d:e6:25:d5:35:63:f2:17:40:d4:ca:c1:72:
         ec:83:3b:b3:14:23:77:16:4a:16:3b:1b:9d:83:07:6a:bf:5c:
         b3:12:90:d3:59:5a:23:6b:67:c6:d1:ca:3d:f4:1c:f1:7d:0b:
         cf:bb:cc:9f:7a:ec:41:66:08:49:be:24:6f:5c:6e:a0:15:1e:
         c1:f1:54:6f:eb:f8:fe:4a:20:56:8d:71:37:ff:00:ea:d6:c8:
         37:c9:83:b5:d8:6e:18:d0:27:bf:82:bb:5b:fe:db:2f:68:6f:
         da:d0:a7:91:2e:82:ce:eb:86:7d:b3:47:f0:56:20:db:ea:42:
         94:62:ed:c8:d6:57:80:9b:d1:46:33:d5:7b:10:39:ce:35:fa:
         fe:9e:ce:68:ff:07:15:7b:5e:e8:71:2d:70:09:80:6c:52:ae:
         96:1f:98:ac:7f:3c:f8:6f:4c:a3:fe:d0:3e:75:99:7c:67:9c:
         f6:17:7a:da:57:d8:d8:e1:2e:59:fb:b8:26:be:f3:53:50:fe:
         9a:f3:d9:ed:48:10:aa:94:a6:7c:26:e8:f0:7e:19:a5:d8:24:
         2d:3a:9a:36:89:c1:68:bb:85:d3:af:35:35:b9:82:b7:09:cf:
         46:19:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:30 2025 by rpki-client