Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3134352e302f32342d3234203d3e203232303130.roa
File:                     3230302e34362e3134352e302f32342d3234203d3e203232303130.roa (raw, json)
Hash identifier:          EMZdQAjP1QLDYMEJc0/gwsQ+ZJzush40DvqU+bk+ZOE=
Subject key identifier:   D3:6E:E6:EA:3C:0F:7F:A5:21:D5:89:D7:71:E9:16:E4:17:CA:84:D1
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       0C0A1031DACCDFD1A9B5470667E9CA25501E0CDB
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3134352e302f32342d3234203d3e203232303130.roa
Signing time:             Fri 25 Sep 2026 14:36:47 +0000
ROA not before:           Fri 25 Sep 2026 14:31:47 +0000
ROA not after:            Fri 24 Sep 2027 14:36:47 +0000
asID:                     22010
IP address blocks:        200.46.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Nov 2026 04:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:10:31:da:cc:df:d1:a9:b5:47:06:67:e9:ca:25:50:1e:0c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:47 2026 GMT
            Not After : Sep 24 14:36:47 2027 GMT
        Subject: CN=D36EE6EA3C0F7FA521D589D771E916E417CA84D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:11:dc:ed:ce:53:4a:a3:49:e9:9a:92:e7:
                    33:54:ed:e0:b8:b3:3b:66:c8:a7:69:de:0b:65:c8:
                    4e:8e:8e:0c:fe:57:cd:39:fa:c7:ba:57:d0:e3:2a:
                    61:78:0f:a1:ae:bf:ee:1f:51:0d:af:8c:46:8a:71:
                    57:89:85:76:6e:fc:62:0e:dc:fd:37:c7:db:2c:88:
                    19:a1:dd:5e:a8:a4:a7:4e:0e:c3:a3:ba:40:1b:29:
                    ce:fc:3d:bf:f5:15:e8:a8:3c:b8:4d:a6:38:74:69:
                    15:4f:14:0c:1f:35:ec:2e:35:39:f2:93:2d:57:ab:
                    ba:0a:9b:ab:ee:77:d9:3d:d3:55:97:01:82:d5:da:
                    45:96:a2:29:5d:04:4a:06:fe:67:6a:21:67:7a:25:
                    be:41:3d:ab:5c:e5:69:3c:62:59:ff:45:5c:d0:c9:
                    74:0c:0d:51:76:da:d3:3c:f8:a8:a1:80:10:7e:7e:
                    3c:1e:a1:d4:76:f3:1c:03:54:f5:c9:d9:15:49:8d:
                    33:03:67:18:b5:8a:35:de:52:3b:7e:5e:8c:4f:37:
                    cf:ed:d7:bc:f2:13:ed:f9:55:90:aa:43:96:a2:f7:
                    89:52:b2:bc:6e:e5:37:fe:0f:e9:4e:c7:60:19:a6:
                    57:88:ab:c6:35:79:49:d1:20:dc:bc:0b:8a:47:8b:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:E6:EA:3C:0F:7F:A5:21:D5:89:D7:71:E9:16:E4:17:CA:84:D1
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3134352e302f32342d3234203d3e203232303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:19:7b:62:66:c8:66:1c:4c:7a:f2:f2:e1:d7:f9:ed:20:
         d2:52:0e:7d:84:e0:15:5b:bb:fb:13:d5:d3:ab:dc:f4:b7:8a:
         38:22:f7:06:f9:11:43:83:4e:ee:b0:d3:dc:9f:14:14:50:6e:
         a3:ef:2a:2b:ae:60:68:19:85:22:4e:e3:a5:e9:27:5b:1f:5e:
         a1:0d:e9:7e:ae:31:d5:57:26:0a:20:8e:81:55:2f:20:dc:0c:
         7e:e6:67:8a:d4:be:f0:3f:54:8c:1d:59:57:d6:7d:ca:48:e4:
         f3:16:8f:e2:11:48:0e:e6:98:89:fa:73:52:60:fb:e2:5d:6c:
         87:cc:37:7d:1b:ee:98:e6:a8:0f:77:f9:47:c5:dd:24:75:c9:
         46:f8:13:16:c9:53:e1:d2:f6:d0:60:e1:42:4f:7f:ae:23:e6:
         10:a9:2c:53:d0:7c:11:0e:85:e6:f0:20:22:75:23:2d:9a:6e:
         82:b2:e6:ee:4b:0d:64:c1:cf:eb:24:79:00:64:46:a3:2c:db:
         2e:01:ce:b9:1c:fe:46:84:4b:00:82:b4:62:40:0e:2c:bf:05:
         79:8d:b0:c1:72:c4:3d:1b:28:7f:5f:43:42:5a:d0:07:4a:b8:
         bd:82:27:6f:b4:cf:2f:e6:e6:7c:f4:d4:55:f6:7f:77:2c:f6:
         3e:53:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:16:55 2026 by rpki-client