Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3130382e33322e302f31392d3234203d3e203138383039.roa
File:                     3230302e3130382e33322e302f31392d3234203d3e203138383039.roa (raw, json)
Hash identifier:          slZLl+dPXu9Zj6rhycg6UpCpZhVyJ0+cfyGnDbsCqFk=
Subject key identifier:   8B:36:03:63:62:60:52:D8:71:BF:07:3C:49:CD:B3:96:29:DC:08:F0
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       0DAE8BEDD1B7BB4F90B520CB3BAC8D412CB4023D
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3130382e33322e302f31392d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:44 +0000
ROA not before:           Fri 25 Sep 2026 14:31:44 +0000
ROA not after:            Fri 24 Sep 2027 14:36:44 +0000
asID:                     18809
IP address blocks:        200.108.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ae:8b:ed:d1:b7:bb:4f:90:b5:20:cb:3b:ac:8d:41:2c:b4:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:44 2026 GMT
            Not After : Sep 24 14:36:44 2027 GMT
        Subject: CN=8B360363626052D871BF073C49CDB39629DC08F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:d0:15:09:19:38:2a:03:3a:fb:10:02:9b:
                    04:ef:2c:fa:3e:11:9d:45:25:ed:1b:b7:ea:27:7d:
                    c3:1d:cc:51:28:10:de:07:6e:2c:55:f3:1e:8d:c9:
                    a4:13:7b:28:47:13:87:6d:11:28:07:3c:a6:2a:38:
                    e6:09:58:85:a2:93:35:5a:c7:ea:3f:31:62:ce:a2:
                    13:16:20:24:69:2b:8b:6b:2d:80:01:ec:97:d9:f7:
                    13:36:d6:fd:50:8c:2c:70:01:2a:a8:0e:6f:d1:b7:
                    6a:4f:e4:2e:6b:a7:ea:f1:7a:5d:ee:74:73:81:b8:
                    a7:0b:66:1b:58:4b:35:44:1b:64:17:1a:ff:17:9a:
                    32:7d:a5:fe:01:6e:e2:7b:e7:16:84:c8:98:ef:c2:
                    09:ba:59:99:77:20:75:d3:04:11:02:0b:78:19:2d:
                    c2:ef:a4:ef:12:82:ff:f7:97:b7:38:04:9c:da:c7:
                    a3:af:ea:4a:54:ba:08:b2:a0:c2:0c:18:88:78:e1:
                    cf:9b:80:76:16:62:53:ac:8f:de:17:bf:9b:f4:27:
                    24:5c:31:1d:e4:11:58:a3:ef:3a:bb:e5:7a:8c:98:
                    18:41:a9:21:99:a9:a3:a2:ef:51:d3:15:94:af:42:
                    c9:32:5c:ef:0d:f3:e6:13:4c:50:ca:d5:20:dc:24:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:36:03:63:62:60:52:D8:71:BF:07:3C:49:CD:B3:96:29:DC:08:F0
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3130382e33322e302f31392d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:94:fb:1d:f1:eb:7c:d4:e7:89:a0:7c:3e:bf:0d:e0:6b:7c:
         37:73:3f:f9:bc:8d:b8:81:c4:b1:22:2f:8b:53:2e:50:da:74:
         10:29:87:25:11:9d:9d:30:02:0a:5e:cf:57:80:d7:63:6e:bf:
         c1:5d:ff:41:6e:0b:eb:cf:96:a5:3e:5e:1d:9f:fa:01:fa:5f:
         9b:9f:4b:55:b1:0d:03:e8:c1:e9:2b:26:df:5e:66:1d:64:b5:
         31:20:22:4d:87:17:82:fd:a4:d1:47:d7:d6:d6:de:62:4a:c4:
         3d:75:fe:dd:3c:75:46:65:18:36:83:a7:bd:81:33:45:a7:b5:
         14:a1:d7:ff:ec:ae:7d:2f:fa:9c:17:f3:75:71:c5:97:95:36:
         52:3b:14:bb:35:54:e8:2e:85:31:7f:9e:3f:8c:7a:32:b9:88:
         cd:22:d8:2a:93:44:44:b7:45:4f:e5:a9:bc:7c:55:81:95:d1:
         22:53:c1:b6:17:14:81:fd:57:b7:da:fe:d3:d1:80:f8:80:c3:
         05:dd:ea:d5:26:4f:8a:e3:62:aa:70:da:d8:01:9b:30:3c:8b:
         28:63:03:83:7b:d1:9f:05:56:1c:57:83:b4:9f:a5:e6:b1:b5:
         56:26:a2:6d:42:e2:01:45:05:d1:3f:3e:ce:cc:75:32:36:3a:
         b6:47:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:44:14 2026 by rpki-client