Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3135382e302f32342d3234203d3e203232323237.roa
File:                     3230302e34362e3135382e302f32342d3234203d3e203232323237.roa (raw, json)
Hash identifier:          jlrrjz1pOk1CeMardBZNomtWU/ew6s8VIloElMPHGB8=
Subject key identifier:   80:9C:0E:CB:41:D3:E5:4D:B4:87:7B:F3:95:B3:1B:54:77:86:AF:0C
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       4FC72D4324759D5B2F594533BAAA4B927202DFC0
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3135382e302f32342d3234203d3e203232323237.roa
Signing time:             Fri 25 Sep 2026 14:36:47 +0000
ROA not before:           Fri 25 Sep 2026 14:31:47 +0000
ROA not after:            Fri 24 Sep 2027 14:36:47 +0000
asID:                     22227
IP address blocks:        200.46.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 04:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c7:2d:43:24:75:9d:5b:2f:59:45:33:ba:aa:4b:92:72:02:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:47 2026 GMT
            Not After : Sep 24 14:36:47 2027 GMT
        Subject: CN=809C0ECB41D3E54DB4877BF395B31B547786AF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f7:0a:6d:a5:be:ca:ec:52:1b:4d:98:f8:51:
                    54:1a:5f:8c:e1:cb:cb:a6:50:da:cf:88:20:ef:f7:
                    cf:1c:b7:7f:31:53:13:c4:1c:8a:f7:85:c6:51:0c:
                    50:05:d4:0a:a4:3c:9b:40:a7:0d:aa:00:71:fc:4f:
                    a7:89:7d:85:55:03:3a:a5:16:20:d6:01:2d:8a:22:
                    25:76:37:aa:0b:1e:fd:a1:0d:0f:28:53:e2:cc:5b:
                    e7:a7:c8:f6:ca:af:54:71:8c:d7:40:15:7d:c1:0e:
                    3d:d0:f8:1b:21:71:cc:90:ef:43:95:6a:c1:db:1a:
                    0e:6c:6a:ae:27:db:30:a4:ea:e4:45:2c:4d:9b:d7:
                    96:b3:11:02:a3:65:09:72:95:f7:cb:2b:a8:c8:0e:
                    23:16:ac:58:e7:b6:4e:d2:9e:73:99:6e:0f:40:83:
                    79:c8:f0:8a:43:90:43:d4:d4:3b:f6:8d:50:20:9e:
                    5b:09:c6:c8:7e:fe:44:1f:89:82:66:56:7a:60:d6:
                    61:55:2a:23:0d:52:f3:70:c3:08:71:d5:ef:e9:3e:
                    93:c4:73:8c:ee:57:ed:77:40:eb:08:9e:d1:f7:30:
                    27:00:6e:bd:72:e4:05:23:26:ad:c6:20:69:dc:bb:
                    e3:a5:f2:3d:12:5d:18:ec:5e:6e:be:74:50:63:29:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9C:0E:CB:41:D3:E5:4D:B4:87:7B:F3:95:B3:1B:54:77:86:AF:0C
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3135382e302f32342d3234203d3e203232323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:66:13:b4:d6:eb:63:d4:89:9c:37:f0:0f:32:d8:4d:f6:06:
         01:82:85:88:36:e9:e1:cb:3f:e1:34:e8:7b:ad:33:0d:41:d2:
         7d:2f:26:c1:c7:72:6f:ce:db:70:ed:fc:ec:ae:07:4b:97:d7:
         77:45:a2:2b:b4:a1:e9:09:00:bf:3a:c1:d2:fc:a3:d6:cc:54:
         dc:f9:57:6d:ba:ed:f8:67:cc:87:2e:95:ac:db:32:ad:3c:f6:
         a3:5a:4e:32:e4:0c:d3:e4:8e:63:f9:63:5c:fe:9c:6b:53:01:
         bf:c8:bf:f7:1b:ab:6c:1c:87:b8:4b:63:11:cf:01:2c:ba:ce:
         8b:03:88:65:e8:3b:ba:5e:c1:fa:17:b6:77:0c:ba:48:80:4a:
         14:90:a6:7d:d7:37:56:9b:4a:71:37:c8:c9:a4:70:1c:cb:b7:
         80:6a:cc:b7:18:6d:1b:0d:a0:75:3b:e8:d2:a9:9a:ec:a4:07:
         86:b4:3d:27:d0:fc:3d:79:5c:9f:a6:f9:50:6b:d4:19:c4:c5:
         2b:fa:0f:7e:3e:c1:ce:42:c7:8e:98:ce:a5:d5:91:0a:b2:e0:
         fc:5d:35:ca:22:84:ce:f4:69:27:c3:6b:ae:77:9e:c7:9e:a2:
         e1:a5:77:3e:ce:45:de:84:99:39:b3:f0:b4:56:76:cd:89:7d:
         55:54:ff:73
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUT8ctQyR1nVsvWUUzuqpLknIC38AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNDdaFw0yNzA5MjQxNDM2NDdaMDMxMTAvBgNV
BAMTKDgwOUMwRUNCNDFEM0U1NERCNDg3N0JGMzk1QjMxQjU0Nzc4NkFGMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9wptpb7K7FIbTZj4UVQaX4zh
y8umUNrPiCDv988ct38xUxPEHIr3hcZRDFAF1AqkPJtApw2qAHH8T6eJfYVVAzql
FiDWAS2KIiV2N6oLHv2hDQ8oU+LMW+enyPbKr1RxjNdAFX3BDj3Q+BshccyQ70OV
asHbGg5saq4n2zCk6uRFLE2b15azEQKjZQlylffLK6jIDiMWrFjntk7SnnOZbg9A
g3nI8IpDkEPU1Dv2jVAgnlsJxsh+/kQfiYJmVnpg1mFVKiMNUvNwwwhx1e/pPpPE
c4zuV+13QOsIntH3MCcAbr1y5AUjJq3GIGncu+Ol8j0SXRjsXm6+dFBjKWRpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgJwOy0HT5U20h3vzlbMbVHeGrwwwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMDJlMzQzNjJlMzEzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMyMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgunjAN
BgkqhkiG9w0BAQsFAAOCAQEAEWYTtNbrY9SJnDfwDzLYTfYGAYKFiDbp4cs/4TTo
e60zDUHSfS8mwcdyb87bcO387K4HS5fXd0WiK7Sh6QkAvzrB0vyj1sxU3PlXbbrt
+GfMhy6VrNsyrTz2o1pOMuQM0+SOY/ljXP6ca1MBv8i/9xurbByHuEtjEc8BLLrO
iwOIZeg7ul7B+he2dwy6SIBKFJCmfdc3VptKcTfIyaRwHMu3gGrMtxhtGw2gdTvo
0qma7KQHhrQ9J9D8PXlcn6b5UGvUGcTFK/oPfj7BzkLHjpjOpdWRCrLg/F01yiKE
zvRpJ8Nrrneex56i4aV3Ps5F3oSZObPwtFZ2zYl9VVT/cw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 12:55:10 2026 by rpki-client