Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3130382e34342e302f32332d3234203d3e203130343736.roa
File:                     3230302e3130382e34342e302f32332d3234203d3e203130343736.roa (raw, json)
Hash identifier:          4IReIwAY5tw4UVQSC5OTdLlvaA6pcRnNzRwM6qc9sWY=
Subject key identifier:   71:43:8F:91:AD:63:6A:84:6A:E2:DF:A8:8F:C7:9B:5E:38:E4:E6:57
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       696B9FEE19620F7BE1AF4D517E94990DC463E2C4
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3130382e34342e302f32332d3234203d3e203130343736.roa
Signing time:             Fri 24 Oct 2025 14:35:03 +0000
ROA not before:           Fri 24 Oct 2025 14:30:03 +0000
ROA not after:            Fri 23 Oct 2026 14:35:03 +0000
asID:                     10476
IP address blocks:        200.108.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6b:9f:ee:19:62:0f:7b:e1:af:4d:51:7e:94:99:0d:c4:63:e2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:03 2025 GMT
            Not After : Oct 23 14:35:03 2026 GMT
        Subject: CN=71438F91AD636A846AE2DFA88FC79B5E38E4E657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:7c:f6:ff:a6:ab:93:13:85:bd:dd:61:f0:
                    f3:61:86:b0:ba:e4:f5:0c:8a:e3:a3:42:03:43:0f:
                    26:4e:88:79:fc:dc:04:c0:bb:64:07:84:b6:33:53:
                    80:6c:ed:f5:1a:c0:86:78:3e:fb:74:74:27:c1:71:
                    7a:93:76:2a:84:58:89:1b:6e:48:a0:6c:a5:13:db:
                    44:14:8a:4d:d9:63:94:5b:03:1d:35:3a:f3:dc:b9:
                    4f:a6:f4:7e:d3:26:35:65:de:86:05:0d:ae:cf:b1:
                    f3:31:85:51:fa:fa:27:85:0f:17:bf:52:ee:1d:18:
                    8b:23:2a:be:06:60:a5:9c:03:9c:9c:66:5c:98:a4:
                    6b:2b:f6:ff:ea:d3:3d:dd:a6:81:22:ed:25:52:c2:
                    d3:95:18:ae:e1:1f:1a:ef:4b:c9:d4:3a:c3:02:01:
                    38:5a:c5:5d:10:44:3c:66:c2:ec:2d:ef:88:9a:31:
                    3b:f4:70:2d:13:4b:1f:84:f4:fd:02:de:40:4b:1d:
                    c9:85:67:e4:9b:64:58:16:1b:12:20:22:d5:ec:59:
                    1d:4c:41:c2:b3:8d:60:c5:3b:b9:45:31:a2:b7:b2:
                    4c:6d:ee:40:0c:de:31:d6:05:bb:d9:68:26:79:22:
                    3f:22:ff:62:4e:ef:0d:aa:05:b6:a8:09:e0:0e:3d:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:43:8F:91:AD:63:6A:84:6A:E2:DF:A8:8F:C7:9B:5E:38:E4:E6:57
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3130382e34342e302f32332d3234203d3e203130343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:11:e6:74:96:91:83:a3:07:bd:bc:89:e2:1a:93:2e:73:60:
         4a:02:ba:ce:6c:54:1b:a1:2f:4f:ae:29:19:fd:16:57:9a:ff:
         61:11:45:7b:82:a2:8d:6a:ce:7c:ff:4e:4e:43:8d:91:7e:70:
         97:3e:31:9e:38:81:b0:53:44:18:67:88:b5:b4:c9:c3:2e:65:
         d4:b3:70:16:0f:06:f5:82:04:88:cb:70:bf:82:28:4d:0d:be:
         98:10:0b:59:e7:51:c7:4f:f0:a4:b3:4a:72:f1:cd:fe:c4:bf:
         73:15:55:b6:83:38:96:b1:a8:aa:47:3f:2d:14:e3:80:b9:0a:
         19:b8:77:aa:56:3c:78:e0:77:c0:d2:76:89:ad:0e:da:05:ee:
         35:d0:d0:17:24:97:f0:fa:e3:b4:7b:72:34:48:3d:ae:bb:4d:
         4b:22:7c:9b:31:fd:89:a9:ca:70:d9:13:ac:f3:64:f6:94:bd:
         82:ae:e4:ac:dd:9d:52:de:91:aa:0b:7c:e3:e3:94:79:1a:41:
         e8:86:7e:f9:12:8b:e0:06:3d:42:0e:ce:c6:30:ad:fa:42:a9:
         65:0d:bb:1c:4d:cd:41:5d:63:dd:ab:54:5f:82:c4:70:c6:85:
         0c:3d:d9:ed:f0:1b:72:e1:8e:3c:c9:fb:03:43:66:aa:72:c5:
         f4:1d:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:03:20 2025 by rpki-client