Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e312e302f32342d3234203d3e203134373039.roa
File:                     3230302e34362e312e302f32342d3234203d3e203134373039.roa (raw, json)
Hash identifier:          8e0DGvvR6Qqdq24z2K0fWxuGN0iXZstbT4gKm0B+NuM=
Subject key identifier:   A1:BC:91:1E:42:05:91:B8:77:7D:B6:36:92:86:6B:9E:9F:10:0E:E5
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       1CC4CD2777E88ABE46879DA356E3E80960B957AD
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e312e302f32342d3234203d3e203134373039.roa
Signing time:             Fri 25 Sep 2026 14:36:45 +0000
ROA not before:           Fri 25 Sep 2026 14:31:45 +0000
ROA not after:            Fri 24 Sep 2027 14:36:45 +0000
asID:                     14709
IP address blocks:        200.46.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 07:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c4:cd:27:77:e8:8a:be:46:87:9d:a3:56:e3:e8:09:60:b9:57:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:45 2026 GMT
            Not After : Sep 24 14:36:45 2027 GMT
        Subject: CN=A1BC911E420591B8777DB63692866B9E9F100EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:86:72:df:58:d2:80:fe:86:c8:2a:52:e6:
                    cd:bf:c4:d2:1b:04:6d:1e:ba:03:9b:c1:31:b4:47:
                    04:35:bd:0c:8e:fe:ee:2d:02:6d:e7:53:58:75:ee:
                    ac:f6:17:84:e6:28:c3:06:a6:fc:4b:4e:6d:05:56:
                    f6:67:06:a4:e9:93:88:c6:75:2a:ec:2a:6d:f9:cb:
                    bc:89:60:41:9d:63:0a:91:3a:09:eb:e9:a5:aa:b2:
                    5b:97:b9:e7:d2:12:dc:c4:1e:84:18:a1:72:d1:f3:
                    8c:d6:52:79:2b:22:21:70:00:02:10:65:4e:86:7e:
                    24:7f:e8:9a:20:2f:85:bb:bf:39:6e:5c:28:33:12:
                    3a:1b:d4:3e:e1:f9:5a:9d:cf:10:04:65:af:a6:64:
                    64:a1:59:3b:8e:6d:10:de:3f:69:20:9e:b6:69:06:
                    b4:c0:e0:4c:bf:36:55:81:74:1e:21:9e:a0:8f:9f:
                    96:09:7a:57:4f:4b:a4:ff:00:bc:f7:ad:5a:5e:f8:
                    91:20:89:b5:10:f7:27:bb:a1:3c:76:91:4c:e7:79:
                    c7:d6:c5:f7:e0:35:6b:0a:4f:d4:5d:3e:d5:43:46:
                    b3:9a:2d:ce:61:e5:05:59:52:ef:3a:7b:99:17:b1:
                    c7:d9:95:a6:5d:93:b6:dc:bb:b4:76:f6:ed:40:90:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:91:1E:42:05:91:B8:77:7D:B6:36:92:86:6B:9E:9F:10:0E:E5
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e312e302f32342d3234203d3e203134373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:05:de:0c:d4:45:5c:e7:31:f7:cf:d0:24:6a:0f:d4:6f:
         aa:35:38:00:82:91:47:8a:37:65:7a:95:62:95:92:41:5c:4f:
         29:be:69:ca:e8:db:a5:1c:c2:e3:c1:ef:fe:21:a8:5c:dd:5e:
         2e:68:f6:31:75:3e:08:c4:ab:7a:cc:32:16:c1:77:6e:58:1a:
         45:21:a5:82:5c:c9:8d:78:67:35:52:30:9a:99:80:26:10:d4:
         76:15:d3:72:58:56:25:fd:46:0a:98:52:2f:55:fb:e8:34:b5:
         33:ec:c4:5a:4f:87:3d:b7:e6:88:6f:57:13:20:e2:06:b7:d5:
         f1:53:d4:f5:2a:42:f9:f5:10:97:5d:19:f5:fa:69:41:cd:5f:
         40:3b:49:a4:45:ff:a1:39:41:1b:6b:0b:6f:bd:9f:28:f7:36:
         e6:fb:f0:1d:c3:bf:d1:58:95:4a:38:e1:f8:4e:c4:c8:c4:3c:
         7d:53:51:7c:d1:5d:44:19:15:ac:02:db:f6:c7:39:c8:9d:59:
         a3:e7:9a:05:ef:8c:d9:26:bc:3e:c2:15:03:3f:7c:52:2b:ca:
         7a:01:a3:fe:4a:b2:65:be:fe:83:55:a5:c5:b3:c2:45:7b:84:
         8d:ec:6d:5a:ee:f3:8b:fc:53:7e:b6:27:3e:40:b4:b0:2c:1f:
         d8:e0:55:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:08:14 2026 by rpki-client