Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203138383039.roa
File:                     3230302e34362e302e302f31362d3234203d3e203138383039.roa (raw, json)
Hash identifier:          aABjSjjv3h8G+r2moPN3apgKwg1dfjmbfLT/ClXz+hM=
Subject key identifier:   D7:E0:03:82:65:A6:36:46:38:69:60:23:11:D9:18:53:F4:34:5F:BA
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       29A8F3B270F6F850F2BEB5781775D02A52A0D4CF
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203138383039.roa
Signing time:             Fri 24 Oct 2025 14:35:13 +0000
ROA not before:           Fri 24 Oct 2025 14:30:13 +0000
ROA not after:            Fri 23 Oct 2026 14:35:13 +0000
asID:                     18809
IP address blocks:        200.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Nov 2025 18:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a8:f3:b2:70:f6:f8:50:f2:be:b5:78:17:75:d0:2a:52:a0:d4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:13 2025 GMT
            Not After : Oct 23 14:35:13 2026 GMT
        Subject: CN=D7E0038265A636463869602311D91853F4345FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:2e:16:32:3b:cf:f9:f0:99:c4:03:0f:34:
                    c1:58:76:5f:ec:55:d6:84:18:0f:e0:a6:61:3b:67:
                    7c:9c:8e:ab:bc:8f:80:80:26:13:07:2b:70:ae:19:
                    bc:2a:cb:27:47:49:3a:95:b6:08:fe:9e:39:f6:35:
                    fb:f7:79:31:83:c8:e2:5c:af:94:9a:5f:13:86:14:
                    0f:9a:bb:1c:a3:8c:24:d8:3f:be:d9:b0:90:d4:6f:
                    5b:4b:ff:a4:08:f0:c9:2e:b2:5e:2c:8a:f1:da:66:
                    cd:17:22:55:43:de:79:dc:78:a5:e7:cc:7c:11:40:
                    89:96:a4:3f:82:95:e5:13:b0:44:d2:10:ed:80:ec:
                    ff:5d:cd:29:a6:e8:de:6a:d2:15:f4:e5:ce:f7:f4:
                    fd:ca:dc:77:fe:e4:7e:3e:af:ce:c6:21:98:d3:96:
                    96:19:cd:65:80:ec:d7:14:a7:23:65:5c:2a:91:47:
                    d5:72:0a:ab:4a:39:5e:5d:52:1d:0e:cd:3b:d0:d6:
                    c2:35:48:59:62:7f:53:75:50:56:0b:1d:cb:c2:1e:
                    9a:bb:51:08:a5:e3:72:f0:7f:c3:61:8c:1d:26:7f:
                    64:66:ff:a5:42:84:40:6c:d9:d7:63:bb:b3:0f:f9:
                    1f:83:6a:99:6f:0d:6f:e3:6a:71:0d:31:26:d7:7b:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:03:82:65:A6:36:46:38:69:60:23:11:D9:18:53:F4:34:5F:BA
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:a2:b7:4b:69:6c:af:ec:8c:11:8e:73:db:14:ed:97:d0:
         cb:b5:bb:ad:b5:31:20:aa:6c:47:88:39:16:5b:d9:0d:ca:a6:
         ca:b1:54:56:f5:96:05:36:d0:f6:df:4a:12:10:81:70:80:e2:
         5a:cf:6e:d9:22:83:a4:e8:f1:64:4c:71:34:61:78:bb:97:74:
         4d:4e:67:04:68:53:6b:96:cc:e6:b3:aa:c4:0c:23:2b:d7:dc:
         0f:a1:fa:00:e9:eb:23:aa:04:78:36:23:ca:39:a8:ee:4c:0c:
         95:95:61:27:b7:ed:7b:d6:1d:dd:a7:19:3d:00:c6:90:17:5b:
         ca:4c:c2:96:02:f1:a5:10:a1:81:50:3f:99:b1:09:fb:2b:b2:
         d4:a4:24:63:88:ae:68:7d:64:58:3c:f2:5d:7b:bc:58:ec:51:
         9e:8d:fc:64:46:80:cc:2c:ec:b0:01:b3:3c:66:79:a4:fb:81:
         9e:94:03:79:1a:7d:05:35:de:32:0a:34:0a:76:48:ed:83:35:
         10:8d:d3:a6:02:de:6c:c1:62:85:50:21:a5:e3:3b:e6:68:8b:
         1d:e7:03:32:b3:2e:84:ff:c1:c0:b8:0b:5f:af:c1:c0:f6:37:
         6a:92:cd:78:ca:90:29:75:4b:2d:cb:a8:3c:ef:fe:47:2e:5b:
         5a:37:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:02:44 2025 by rpki-client