Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa
File:                     3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa (raw, json)
Hash identifier:          noC75e3blOQUH1F5J4NXwSdcSFvp+Pb4jXZisQdPep4=
Subject key identifier:   D9:86:FA:21:30:58:B2:D0:F3:F3:89:8A:8D:1C:61:E5:22:BD:05:82
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       5E025BB2E9D28BF67DD4BF880EBDC4FD4270F8C1
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa
Signing time:             Fri 24 Oct 2025 14:35:22 +0000
ROA not before:           Fri 24 Oct 2025 14:30:22 +0000
ROA not after:            Fri 23 Oct 2026 14:35:22 +0000
asID:                     21599
IP address blocks:        200.115.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:02:5b:b2:e9:d2:8b:f6:7d:d4:bf:88:0e:bd:c4:fd:42:70:f8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:22 2025 GMT
            Not After : Oct 23 14:35:22 2026 GMT
        Subject: CN=D986FA213058B2D0F3F3898A8D1C61E522BD0582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:84:b2:68:9e:40:44:b5:0b:d8:b2:e8:37:
                    09:7f:b0:99:43:a4:8c:6c:bc:f0:a5:fd:66:47:60:
                    bb:f5:e0:b6:4d:88:a6:5e:86:55:3c:b6:d6:18:8c:
                    5b:89:ac:90:65:2f:61:64:81:0b:00:71:87:e8:69:
                    6c:c9:25:98:c9:52:4a:16:cc:38:51:e7:b3:6c:92:
                    36:2f:44:db:da:55:da:cf:f2:31:9e:d4:ff:d4:18:
                    53:bd:4a:05:fb:bf:33:8a:6d:6b:1f:26:95:2e:6f:
                    40:1a:85:a6:7c:af:9b:db:ae:94:de:43:da:03:3c:
                    30:1d:74:55:cf:cf:31:4b:c6:86:50:82:1b:63:04:
                    c1:20:37:b7:65:1c:85:d1:e3:27:82:c8:e0:16:8e:
                    3e:83:a7:b4:66:77:e8:9e:fa:2c:28:70:94:12:f0:
                    21:f5:c8:f0:c2:ce:2f:a3:4b:ae:80:3a:76:86:18:
                    1f:a0:8b:20:5c:c1:77:ae:16:1c:75:01:ae:4a:dc:
                    88:f0:45:4a:4e:41:c9:33:bc:44:9d:12:b9:de:fd:
                    16:c7:51:e6:dc:d1:ed:f2:d5:52:86:81:1f:0e:81:
                    9a:79:9d:3a:72:eb:b5:90:4b:55:ae:d0:a4:21:14:
                    a7:5a:4c:6c:58:1d:66:90:33:df:95:58:d2:03:b4:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:86:FA:21:30:58:B2:D0:F3:F3:89:8A:8D:1C:61:E5:22:BD:05:82
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:d6:ed:e6:c9:29:6d:f6:ce:47:fc:f2:6b:7d:f0:cb:c1:ab:
         a7:a0:cd:da:71:2a:a5:30:f6:f3:d4:33:6f:87:15:2e:11:32:
         58:38:15:b2:d0:e9:e6:5b:8b:61:13:4b:da:c7:f0:6f:82:aa:
         cd:22:77:9a:15:3b:1a:b2:10:45:d0:3a:18:c5:dd:0c:5f:b7:
         19:38:80:5b:47:dd:2c:d9:f5:63:b3:d1:d5:d5:19:58:a2:6b:
         e3:f7:db:9a:ab:bb:d0:3d:d1:dd:b8:ad:91:10:8e:3e:8d:46:
         97:77:61:f9:df:36:6d:8b:90:ed:f8:31:e0:99:82:0b:91:f8:
         30:d3:84:f2:8d:16:7d:f2:e7:c5:f1:98:c9:a8:62:ac:a5:34:
         8d:57:9f:56:44:05:b1:18:16:01:48:6b:22:98:f7:e9:49:63:
         d5:f9:01:b1:c5:b5:45:d3:6b:60:1e:35:f4:d9:0b:52:71:af:
         d5:1a:ba:38:d9:2e:16:62:23:2e:37:67:39:70:90:09:60:88:
         20:52:1c:ed:74:b4:8f:82:bb:50:55:12:46:68:38:cf:f4:e7:
         6d:37:31:5e:89:61:8f:99:ac:64:3a:41:05:f5:93:08:d1:49:
         e3:16:1e:38:75:95:06:bf:ff:74:71:c0:16:1a:45:39:9f:1e:
         df:5b:54:43
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXgJbsunSi/Z91L+IDr3E/UJw+MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMjJaFw0yNjEwMjMxNDM1MjJaMDMxMTAvBgNV
BAMTKEQ5ODZGQTIxMzA1OEIyRDBGM0YzODk4QThEMUM2MUU1MjJCRDA1ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8YSyaJ5ARLUL2LLoNwl/sJlD
pIxsvPCl/WZHYLv14LZNiKZehlU8ttYYjFuJrJBlL2FkgQsAcYfoaWzJJZjJUkoW
zDhR57NskjYvRNvaVdrP8jGe1P/UGFO9SgX7vzOKbWsfJpUub0AahaZ8r5vbrpTe
Q9oDPDAddFXPzzFLxoZQghtjBMEgN7dlHIXR4yeCyOAWjj6Dp7Rmd+ie+iwocJQS
8CH1yPDCzi+jS66AOnaGGB+giyBcwXeuFhx1Aa5K3IjwRUpOQckzvESdErne/RbH
Uebc0e3y1VKGgR8OgZp5nTpy67WQS1Wu0KQhFKdaTGxYHWaQM9+VWNIDtBwTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2Yb6ITBYstDz84mKjRxh5SK9BYIwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMDJlMzEzMTM1MmUzMTMyMzgy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjMxMzUzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyHOA
MA0GCSqGSIb3DQEBCwUAA4IBAQBd1u3mySlt9s5H/PJrffDLwaunoM3acSqlMPbz
1DNvhxUuETJYOBWy0OnmW4thE0vax/BvgqrNIneaFTsashBF0DoYxd0MX7cZOIBb
R90s2fVjs9HV1RlYomvj99uaq7vQPdHduK2REI4+jUaXd2H53zZti5Dt+DHgmYIL
kfgw04TyjRZ98ufF8ZjJqGKspTSNV59WRAWxGBYBSGsimPfpSWPV+QGxxbVF02tg
HjX02QtSca/VGro42S4WYiMuN2c5cJAJYIggUhztdLSPgrtQVRJGaDjP9OdtNzFe
iWGPmaxkOkEF9ZMI0UnjFh44dZUGv/90ccAWGkU5nx7fW1RD
-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:29 2025 by rpki-client