Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3133312e302f32342d3234203d3e203237373439.roa
File:                     3230302e34362e3133312e302f32342d3234203d3e203237373439.roa (raw, json)
Hash identifier:          eNNAlBGkFhoHCPVal4uVFap6avG1Lzl+5jLoZtu9sNM=
Subject key identifier:   72:81:EC:E2:0B:52:67:53:BC:8E:6E:C8:42:F4:D3:87:50:F2:33:C1
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       35EFA8E9DE531A66A7A5B3925BEF2E58C1B55BD9
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3133312e302f32342d3234203d3e203237373439.roa
Signing time:             Fri 24 Oct 2025 14:35:10 +0000
ROA not before:           Fri 24 Oct 2025 14:30:10 +0000
ROA not after:            Fri 23 Oct 2026 14:35:10 +0000
asID:                     27749
IP address blocks:        200.46.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:a8:e9:de:53:1a:66:a7:a5:b3:92:5b:ef:2e:58:c1:b5:5b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:10 2025 GMT
            Not After : Oct 23 14:35:10 2026 GMT
        Subject: CN=7281ECE20B526753BC8E6EC842F4D38750F233C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:b1:72:99:18:03:5a:18:cf:91:42:38:cd:
                    15:27:da:9c:ee:0b:3c:bb:b5:55:d8:f8:80:20:95:
                    5d:3d:8d:42:84:3d:73:19:6b:c7:cf:0a:09:75:3a:
                    e4:ed:fd:41:cb:7b:66:bb:75:6b:7c:e6:01:8d:3d:
                    49:bf:01:4f:3e:39:86:17:43:38:b1:dd:ff:08:6f:
                    dd:87:21:b4:32:34:6c:2b:aa:ce:57:24:11:a5:b4:
                    b6:3b:50:6e:ce:db:51:a4:eb:d2:00:39:5b:aa:1f:
                    16:53:f7:0b:44:d0:cc:0d:59:82:9f:ea:c5:50:97:
                    34:50:df:4c:bf:69:84:f0:ea:09:29:9f:2d:7d:4a:
                    90:df:90:6b:02:b3:f7:20:33:4f:ea:4c:e8:e4:39:
                    3c:5a:1f:64:0f:b1:10:57:79:a5:09:3f:36:5f:b5:
                    96:0e:87:85:5b:49:40:c9:f7:6e:76:17:25:83:5b:
                    f1:4f:95:4a:b1:e9:49:75:f1:51:05:fc:14:d1:d2:
                    39:21:7d:d6:15:e7:2b:9f:13:37:1d:2f:d8:26:05:
                    34:3d:80:a3:dd:aa:2b:80:2f:6c:f3:04:53:a1:aa:
                    69:be:3d:12:8f:ac:3d:20:34:b3:af:0d:65:a2:61:
                    72:0f:0f:f1:6d:c6:5c:b1:35:fd:1b:a9:4c:d5:19:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:81:EC:E2:0B:52:67:53:BC:8E:6E:C8:42:F4:D3:87:50:F2:33:C1
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3133312e302f32342d3234203d3e203237373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:78:01:db:1e:09:a3:44:0f:d7:ee:ec:37:7e:b5:92:72:f2:
         4e:31:2b:e5:63:68:78:0b:93:90:80:7c:3d:a8:5b:66:fe:3e:
         72:8e:52:2f:44:c0:cf:8c:4e:62:72:d2:25:d6:50:ba:dc:1b:
         43:07:e4:eb:7f:df:63:a5:66:bc:d1:b8:b8:9e:cd:52:e5:67:
         4e:c8:2a:97:4a:2b:0c:2f:fe:94:92:f3:33:04:db:4d:70:05:
         f4:d9:86:cb:fe:de:7f:55:e7:82:fd:2d:7e:12:ec:2c:28:ec:
         19:28:18:05:7f:a2:a1:b3:87:cf:d5:22:71:f0:f9:71:a1:77:
         6a:37:ad:4c:08:de:8c:d5:91:a6:96:bb:16:9a:99:02:7e:3a:
         f7:71:12:55:c1:94:6b:58:77:47:03:06:d7:f9:46:d0:ec:bb:
         c4:57:4a:71:43:3d:d7:ca:97:f6:b8:20:db:2a:da:ea:67:6f:
         3d:98:ed:1a:dc:d0:47:08:1d:d6:83:f9:36:d3:ec:f2:64:e4:
         f6:1e:49:23:03:eb:a1:92:34:49:a2:eb:a3:f0:ed:8c:08:b8:
         9b:99:f0:a1:97:cf:a7:a0:65:e6:ed:c4:58:f7:be:4f:e5:b0:
         9a:38:53:25:50:9d:5b:b8:a8:6b:91:1d:71:dc:7e:47:02:f2:
         2c:de:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:39 2025 by rpki-client