Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3135382e302f32342d3234203d3e203232323237.roa
File:                     3230302e34362e3135382e302f32342d3234203d3e203232323237.roa (raw, json)
Hash identifier:          PSCKuIi/0OftzQR81q02Hk4puHCtYtef/6daOg/ZEz4=
Subject key identifier:   9E:E4:F0:D7:82:0B:84:D5:64:4C:EB:42:09:6C:34:DA:6C:5F:FB:56
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       49D4EFDF4A467422A1CF3A5083C3BCC42D8D73D7
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3135382e302f32342d3234203d3e203232323237.roa
Signing time:             Fri 24 Oct 2025 14:35:08 +0000
ROA not before:           Fri 24 Oct 2025 14:30:08 +0000
ROA not after:            Fri 23 Oct 2026 14:35:08 +0000
asID:                     22227
IP address blocks:        200.46.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d4:ef:df:4a:46:74:22:a1:cf:3a:50:83:c3:bc:c4:2d:8d:73:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:08 2025 GMT
            Not After : Oct 23 14:35:08 2026 GMT
        Subject: CN=9EE4F0D7820B84D5644CEB42096C34DA6C5FFB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:70:87:b0:75:f6:16:c7:cf:22:c0:5a:c4:
                    bf:0c:d4:64:e7:68:37:dd:62:6b:83:aa:4b:d3:dc:
                    cc:0a:30:61:52:a8:1e:bb:99:35:8c:d2:3b:75:b5:
                    7d:fb:8b:05:35:58:66:d0:45:07:c5:68:ee:33:f7:
                    b6:c2:e5:fd:f6:1b:d0:77:f9:61:68:76:87:3d:35:
                    7f:ef:2e:b8:91:25:5e:97:c1:74:92:ac:a2:7b:8e:
                    c6:db:49:7b:85:19:4e:9d:4e:fd:36:06:88:e4:02:
                    ba:af:d1:6a:71:06:66:c2:06:10:19:18:f2:4b:5e:
                    5d:e7:de:cb:fe:ba:51:f2:01:02:6a:19:e3:b1:a2:
                    fa:3a:fd:5d:46:f1:cc:87:bc:00:5b:31:0d:24:c9:
                    3b:55:8c:bf:0c:7f:7e:7f:80:ea:b2:72:8c:e0:13:
                    87:53:fb:35:c8:a0:11:02:95:b0:aa:2d:bb:7e:c7:
                    2c:9f:31:55:b7:29:d8:ef:45:b1:d7:22:73:03:c2:
                    4a:3b:4a:76:d0:80:95:60:b8:2a:c0:c4:07:2f:94:
                    31:97:f4:b4:34:2f:0b:3a:93:ee:22:9a:8d:23:0a:
                    10:35:29:81:f2:8b:4b:51:3c:ab:92:bd:66:3a:5f:
                    f1:87:09:5b:dc:6b:75:07:c9:c4:68:4e:5e:6b:a9:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E4:F0:D7:82:0B:84:D5:64:4C:EB:42:09:6C:34:DA:6C:5F:FB:56
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3135382e302f32342d3234203d3e203232323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:47:f4:51:a3:2d:10:00:e9:12:0a:3e:aa:9a:27:f1:56:
         fa:20:05:64:b4:a8:6b:a4:76:bc:4c:cd:a3:7a:90:70:2f:ce:
         6b:25:d3:9c:f3:65:88:02:0d:c8:f7:69:63:73:4a:e0:2a:ec:
         d2:63:07:ea:70:8e:37:bb:35:d9:cd:71:22:af:be:98:5e:7d:
         88:86:90:2c:58:3d:15:1b:f8:e1:99:a9:99:41:df:ca:b8:95:
         00:27:1c:db:c3:b7:ac:13:e8:6c:3a:be:df:4e:c6:1c:9f:e0:
         91:cf:10:9e:b1:77:14:44:f0:07:de:40:10:a9:c0:0b:3a:9f:
         92:42:e5:b4:e5:2f:62:10:b2:86:0e:d8:f8:fe:fb:9b:5f:2b:
         86:c2:b7:28:04:50:29:2c:52:42:fa:4f:80:e6:89:b7:0a:f8:
         7c:a8:94:62:43:d2:a4:2e:a3:e2:d7:77:e4:53:15:a6:e6:13:
         f0:66:59:0f:e1:32:56:57:84:da:cd:70:6d:18:46:54:89:01:
         03:dc:17:b5:8d:75:d0:fa:8b:fb:00:56:be:e3:90:67:25:b3:
         ee:c0:95:7c:28:8c:fb:e4:29:50:d2:d4:d1:16:53:f9:b0:98:
         ad:67:ae:f3:ba:47:7b:7f:66:44:fe:77:c3:ae:06:79:fe:c5:
         c1:6f:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:01:05 2025 by rpki-client