Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203231353939.roa
File:                     3230302e34362e302e302f31362d3234203d3e203231353939.roa (raw, json)
Hash identifier:          CLiqSqxwRirVGY1QymwhK+3cS8Fd0SJltDpuYhCkCIc=
Subject key identifier:   EA:DD:3C:FE:15:68:CF:1F:57:29:39:FE:C6:DB:9D:B2:81:B4:03:CF
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       506D4B80362A158D47D7C7084AF8F134BA8BE924
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203231353939.roa
Signing time:             Fri 24 Oct 2025 14:35:18 +0000
ROA not before:           Fri 24 Oct 2025 14:30:18 +0000
ROA not after:            Fri 23 Oct 2026 14:35:18 +0000
asID:                     21599
IP address blocks:        200.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6d:4b:80:36:2a:15:8d:47:d7:c7:08:4a:f8:f1:34:ba:8b:e9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:18 2025 GMT
            Not After : Oct 23 14:35:18 2026 GMT
        Subject: CN=EADD3CFE1568CF1F572939FEC6DB9DB281B403CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:df:a1:33:40:2d:67:e0:1c:1a:d1:13:f7:
                    27:b5:65:2a:55:44:1f:ff:07:4c:75:7c:0e:17:3e:
                    60:53:3b:78:3d:a2:17:66:9e:17:d3:19:f3:63:d3:
                    5f:e4:4b:de:3f:ce:7c:43:ac:10:37:84:22:c7:8d:
                    30:2a:9a:30:0c:2c:fb:54:b0:ef:d7:dd:f0:e9:76:
                    d9:79:59:a5:37:df:50:e4:60:b0:38:17:c4:7c:b1:
                    ec:6e:e0:26:48:19:c7:5f:98:9e:e2:bc:db:90:74:
                    0c:98:85:d9:da:4c:22:9b:bc:08:7a:aa:8f:7b:46:
                    09:d7:30:63:6e:ff:6a:cb:69:ba:53:0d:08:da:43:
                    f3:68:1e:9f:da:03:5e:53:d1:e0:c3:5c:8a:78:d3:
                    01:6c:16:ce:8e:df:f1:b7:79:cd:12:4f:a6:bb:e3:
                    f8:c8:15:3f:e8:c1:3d:93:ff:a0:30:c3:da:53:bb:
                    3d:bc:66:13:00:08:64:1b:76:05:63:bf:40:63:ab:
                    66:2b:4c:72:24:a8:f6:ca:88:43:3f:af:c2:35:c8:
                    25:10:83:1b:ad:99:0c:b0:1c:65:95:2e:d9:8a:5d:
                    11:9a:1c:c6:eb:1f:20:8a:e6:f0:18:0e:00:26:ba:
                    d1:02:95:af:04:a8:fa:eb:d3:66:4b:07:c8:76:57:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:3C:FE:15:68:CF:1F:57:29:39:FE:C6:DB:9D:B2:81:B4:03:CF
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e302e302f31362d3234203d3e203231353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:70:ff:31:db:eb:5f:9f:51:00:55:98:c0:12:47:56:75:6d:
         fb:f8:e9:a0:ca:f1:36:cd:a4:91:21:f6:0a:fd:60:e1:6a:31:
         df:01:36:24:50:b4:e5:c8:1b:83:f9:ce:a8:f5:c6:c4:bb:f9:
         9b:99:8b:45:7c:9f:f4:8d:01:4a:eb:96:63:7a:3b:2d:62:87:
         ee:4c:36:d6:c6:bd:6e:9c:66:bd:90:df:8d:c4:9a:4c:10:76:
         b0:d0:0e:67:e7:5e:ec:31:a6:4b:79:ab:f1:2e:99:5b:03:7b:
         6a:bb:b0:21:4d:11:fb:d1:7e:d7:17:10:ff:ad:a6:ee:52:70:
         34:17:9f:40:72:6b:27:a3:a5:7c:88:7a:d3:28:5d:28:73:ce:
         68:ea:e2:30:b4:5b:b6:78:b9:6b:4b:ef:0f:55:3a:61:52:9d:
         76:37:6c:f3:91:3c:f8:05:3a:48:50:6a:d8:85:f3:49:2c:d7:
         b9:90:a4:a6:0d:2d:91:58:cf:2e:73:26:22:eb:13:44:d3:ba:
         59:6a:8b:83:28:cc:0b:fc:8c:f2:0a:73:ac:3b:63:15:ef:b6:
         5a:76:12:18:1c:9d:f0:c3:c8:98:61:a2:b2:fa:7f:3b:d3:54:
         9e:15:56:ac:32:d8:09:ff:b7:f7:e7:6f:54:ff:35:c3:9d:90:
         63:d2:bf:36
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUUG1LgDYqFY1H18cISvjxNLqL6SQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMThaFw0yNjEwMjMxNDM1MThaMDMxMTAvBgNV
BAMTKEVBREQzQ0ZFMTU2OENGMUY1NzI5MzlGRUM2REI5REIyODFCNDAzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGV9+hM0AtZ+AcGtET9ye1ZSpV
RB//B0x1fA4XPmBTO3g9ohdmnhfTGfNj01/kS94/znxDrBA3hCLHjTAqmjAMLPtU
sO/X3fDpdtl5WaU331DkYLA4F8R8sexu4CZIGcdfmJ7ivNuQdAyYhdnaTCKbvAh6
qo97RgnXMGNu/2rLabpTDQjaQ/NoHp/aA15T0eDDXIp40wFsFs6O3/G3ec0ST6a7
4/jIFT/owT2T/6Aww9pTuz28ZhMACGQbdgVjv0Bjq2YrTHIkqPbKiEM/r8I1yCUQ
gxutmQywHGWVLtmKXRGaHMbrHyCK5vAYDgAmutECla8EqPrr02ZLB8h2V7kBAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU6t08/hVozx9XKTn+xtudsoG0A88wHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMDJlMzQzNjJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMjMxMzUzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyC4wDQYJKoZI
hvcNAQELBQADggEBAEBw/zHb61+fUQBVmMASR1Z1bfv46aDK8TbNpJEh9gr9YOFq
Md8BNiRQtOXIG4P5zqj1xsS7+ZuZi0V8n/SNAUrrlmN6Oy1ih+5MNtbGvW6cZr2Q
343EmkwQdrDQDmfnXuwxpkt5q/EumVsDe2q7sCFNEfvRftcXEP+tpu5ScDQXn0By
ayejpXyIetMoXShzzmjq4jC0W7Z4uWtL7w9VOmFSnXY3bPORPPgFOkhQatiF80ks
17mQpKYNLZFYzy5zJiLrE0TTullqi4MozAv8jPIKc6w7YxXvtlp2EhgcnfDDyJhh
orL6fzvTVJ4VVqwy2An/t/fnb1T/NcOdkGPSvzY=
-----END CERTIFICATE-----
Generated at Thu Nov 6 16:58:06 2025 by rpki-client