Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e332e3230302e302f32312d3234203d3e203237373535.roa
File:                     3230302e332e3230302e302f32312d3234203d3e203237373535.roa (raw, json)
Hash identifier:          +PHK6ofO5yVFegYwRBPZfKm/OdE113Un8lanbOWWo1Y=
Subject key identifier:   A5:98:54:C5:74:8E:C2:BB:61:75:FC:C7:B2:98:D8:0A:CF:D8:8E:DD
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       43F861DBFA6BC9AB341AC414FE82D93B900AC049
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e332e3230302e302f32312d3234203d3e203237373535.roa
Signing time:             Fri 25 Sep 2026 14:36:48 +0000
ROA not before:           Fri 25 Sep 2026 14:31:48 +0000
ROA not after:            Fri 24 Sep 2027 14:36:48 +0000
asID:                     27755
IP address blocks:        200.3.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 02:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:61:db:fa:6b:c9:ab:34:1a:c4:14:fe:82:d9:3b:90:0a:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:48 2026 GMT
            Not After : Sep 24 14:36:48 2027 GMT
        Subject: CN=A59854C5748EC2BB6175FCC7B298D80ACFD88EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:01:57:04:d8:07:72:35:71:df:44:6c:8e:
                    0d:ff:be:af:25:74:e8:1e:a8:1a:1b:3e:51:38:32:
                    8f:45:3b:91:9f:bf:ad:bf:f6:13:a0:4e:a0:21:7b:
                    ed:65:d8:1a:9f:ab:62:98:a2:e0:dd:d7:22:02:34:
                    fa:1f:2b:91:0c:ab:ed:80:73:1e:6b:62:99:4f:53:
                    e3:97:4a:19:12:94:88:93:c8:fa:67:3f:80:d7:c6:
                    b5:c9:60:0f:82:4d:fd:48:4a:15:ba:a3:34:b5:f7:
                    65:f6:9e:76:4e:39:0e:3e:25:f0:4f:c1:f0:cd:88:
                    81:82:74:14:e6:b7:df:3e:7e:dd:7b:40:9d:6f:a0:
                    c5:ca:ec:43:12:27:28:4c:24:3e:b1:71:c4:76:00:
                    2e:19:3e:b6:7c:d0:12:ca:0c:f8:fd:1f:ff:2c:a3:
                    9d:cd:7f:d9:80:f5:05:28:60:41:d0:7b:2b:d5:c5:
                    f5:60:90:20:5c:30:7f:9d:96:3c:31:df:9c:ee:23:
                    4c:7d:be:62:c3:ba:3d:47:e6:31:74:dc:c2:4e:56:
                    65:bd:28:3c:6d:d6:0e:01:28:cb:5d:fc:05:e8:c5:
                    75:e8:6c:f9:22:d2:e4:2d:1e:69:50:19:a1:38:df:
                    61:7d:cd:73:74:56:7f:8b:21:26:50:e2:52:ce:c3:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:54:C5:74:8E:C2:BB:61:75:FC:C7:B2:98:D8:0A:CF:D8:8E:DD
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e332e3230302e302f32312d3234203d3e203237373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:8e:5a:43:61:e5:c4:17:53:e2:6e:09:b7:f7:82:6e:5f:
         55:0a:8b:ef:ef:41:b2:23:a3:68:e9:78:39:0a:92:d2:cf:12:
         22:4d:6c:38:b2:b8:c0:cb:dc:72:ce:94:d9:77:19:58:d8:33:
         8f:ee:66:f6:11:b5:d0:c1:35:58:ac:56:b2:d6:fb:0c:fa:ea:
         01:a5:cd:1d:68:8d:ea:bb:ac:18:17:da:de:92:c5:bc:06:0e:
         e0:35:88:3d:b4:3c:73:ed:8a:07:ac:99:c1:6a:58:61:b7:e3:
         f6:6a:26:c4:4b:69:32:c0:46:2e:7d:4d:6b:0e:af:1a:5b:78:
         78:d0:e3:9b:f7:b8:9e:fd:de:ce:ae:d4:4d:a9:4e:2a:f1:c5:
         32:4f:f9:70:16:4c:ad:1e:b9:ce:b7:62:29:4a:39:35:78:12:
         2b:8f:f0:2a:a9:cd:aa:f8:ae:1d:39:aa:f9:4b:48:c3:c1:e3:
         77:b5:8b:cd:16:bc:65:72:57:66:ac:13:af:83:2e:27:4b:17:
         c6:29:fc:3c:c2:fd:94:40:25:cd:9d:66:91:f6:14:e2:11:74:
         c4:a9:a2:10:c2:f4:87:2d:d8:01:4d:77:3c:c8:b1:27:ad:6a:
         a9:5e:49:a5:2a:24:f2:bb:d5:97:b2:3b:2e:bc:6f:03:18:b2:
         85:3a:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:25:35 2026 by rpki-client