Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203138383039.roa
File:                     3230302e34362e302e302f31362d3234203d3e203138383039.roa (raw, json)
Hash identifier:          RmANECB/4kpAPTnvWmdMPt0i9eN56hAQqeU5btF3i6s=
Subject key identifier:   08:51:DB:11:65:72:1A:70:73:7E:90:13:02:C3:4F:0A:99:35:39:F2
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       381CAF6A18D92CA300C341911723BEF6DF8D76F6
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:48 +0000
ROA not before:           Fri 25 Sep 2026 14:31:48 +0000
ROA not after:            Fri 24 Sep 2027 14:36:48 +0000
asID:                     18809
IP address blocks:        200.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 05:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1c:af:6a:18:d9:2c:a3:00:c3:41:91:17:23:be:f6:df:8d:76:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:48 2026 GMT
            Not After : Sep 24 14:36:48 2027 GMT
        Subject: CN=0851DB1165721A70737E901302C34F0A993539F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:53:e7:04:65:fb:0e:7a:ea:2c:80:ca:5a:
                    b0:17:82:36:8b:c4:c1:c0:16:82:be:11:cd:d8:37:
                    90:7c:dc:5d:96:e0:c6:c2:59:7a:f1:cf:7c:49:ff:
                    92:4d:71:b8:bd:30:6f:a9:07:06:25:9d:37:8b:88:
                    21:4c:b1:3b:f7:f3:ca:76:ff:2c:74:0e:4f:25:0e:
                    49:03:ae:3d:58:d9:19:fd:09:18:7e:a7:4a:a6:4b:
                    af:3c:f6:4d:51:30:21:b4:ba:0e:c2:ac:8b:f7:2e:
                    1b:60:24:ea:de:49:61:6f:d3:a5:b9:8b:71:9d:bd:
                    8e:94:2f:d8:81:c6:68:d4:6f:9a:93:da:8b:64:c3:
                    b9:5c:b0:e0:c8:64:fa:38:cc:cd:3e:f5:ba:25:e4:
                    e7:99:17:68:a7:cc:29:77:51:2b:c2:e5:8f:b2:69:
                    75:78:91:71:49:17:85:98:b2:19:3b:3a:ac:06:de:
                    70:ae:58:50:e9:e9:b9:49:3d:86:e8:7a:2d:c3:b0:
                    c7:79:ff:07:5e:b8:46:04:20:b7:72:a6:4a:aa:50:
                    94:4e:b1:9c:a0:09:71:40:71:dd:1d:23:c1:06:69:
                    2a:e4:60:12:c4:04:19:2e:99:ac:96:86:c8:34:53:
                    94:c5:69:d5:af:1f:76:52:50:b3:75:11:ee:e5:c5:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:DB:11:65:72:1A:70:73:7E:90:13:02:C3:4F:0A:99:35:39:F2
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:1b:fb:0e:b4:c9:20:54:d4:6a:2b:fa:32:04:56:6e:ba:
         65:34:b3:8b:08:75:c3:f0:24:13:75:dd:01:70:89:06:62:3e:
         eb:92:2d:ff:03:64:7b:f3:7d:ba:b5:69:3f:fa:0e:c8:e3:29:
         de:36:6f:e5:ac:1b:20:6f:ef:9a:e9:c3:98:55:f4:80:67:00:
         4e:2a:23:96:28:a0:89:d8:a6:f5:e5:28:65:f3:ff:a6:ac:25:
         9d:41:d7:5d:61:6a:5e:71:08:f2:6e:da:24:5d:f0:9b:36:71:
         a8:83:bc:ca:4f:1d:f6:89:11:a1:bb:87:f5:bd:44:87:67:56:
         54:7b:78:f9:2e:0b:c0:6e:b1:c2:55:dc:21:b7:f1:ca:5f:07:
         5a:4c:bc:e7:63:64:5d:55:72:41:b2:3b:c1:2d:ec:53:ae:af:
         8f:3f:a8:ef:42:97:5b:a9:e0:71:7f:5d:3a:2f:92:03:5e:19:
         bb:b2:61:08:86:cc:49:d8:6d:de:31:01:63:70:86:fa:28:5f:
         77:3d:35:02:20:9b:d1:78:10:a8:7c:d8:f0:b7:ec:1b:68:f8:
         e2:df:42:c7:89:eb:8c:12:32:4c:5b:b7:f3:16:d9:57:6b:1d:
         45:0b:29:6e:7d:c9:e2:f9:68:cf:16:bb:6a:5c:43:94:14:21:
         fc:6f:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:34:16 2026 by rpki-client