Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3230312e302f32342d3234203d3e203238303632.roa
File:                     3230302e34362e3230312e302f32342d3234203d3e203238303632.roa (raw, json)
Hash identifier:          frERUBOM9JWhKRJVB9xmlVUIgqySrQT42EP0v52Y4Ag=
Subject key identifier:   F8:F0:B5:33:59:D1:6F:A4:1A:87:05:7F:BC:BB:04:91:83:13:36:48
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       7B4329BD52A0DB0D078574ABCAB84F1DC4F9A55E
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3230312e302f32342d3234203d3e203238303632.roa
Signing time:             Fri 25 Sep 2026 14:36:46 +0000
ROA not before:           Fri 25 Sep 2026 14:31:46 +0000
ROA not after:            Fri 24 Sep 2027 14:36:46 +0000
asID:                     28062
IP address blocks:        200.46.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 16:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:43:29:bd:52:a0:db:0d:07:85:74:ab:ca:b8:4f:1d:c4:f9:a5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:46 2026 GMT
            Not After : Sep 24 14:36:46 2027 GMT
        Subject: CN=F8F0B53359D16FA41A87057FBCBB049183133648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:a5:1b:1e:66:70:3a:06:0d:63:97:34:b9:
                    f0:45:f4:83:75:e2:78:c7:67:0a:1c:82:c3:05:2a:
                    96:4d:4c:da:37:db:9a:16:c9:e6:25:e0:d6:56:72:
                    6a:22:ef:02:6c:1d:33:7d:a5:ea:26:6d:fd:aa:4b:
                    5c:2e:b6:67:ea:42:d9:9a:44:26:0f:b4:9a:8d:c6:
                    19:bb:2f:90:2d:e1:68:65:7a:d8:7b:8e:41:67:41:
                    8a:b3:84:24:0f:2f:99:fd:6d:ce:42:1e:8c:31:db:
                    86:7e:54:af:07:7b:66:95:af:38:a9:ef:c4:75:62:
                    f3:35:73:ca:7c:2a:2e:b7:75:b3:a3:ca:c0:5b:38:
                    3c:af:a6:e5:a6:6b:02:51:04:66:e5:0f:40:29:95:
                    0c:15:0a:2e:ee:0c:0f:72:a6:8c:a5:2c:cd:30:ca:
                    80:40:37:7d:16:54:be:ba:e7:36:95:2a:ea:03:b2:
                    6f:b1:45:36:f8:35:dd:c6:36:28:aa:7f:3f:db:17:
                    95:fb:96:f3:26:19:08:1f:9f:fc:d1:7d:43:c6:80:
                    e1:5e:d7:6a:91:df:f1:ba:d7:cf:84:1f:8d:e8:94:
                    71:eb:b9:da:f4:0f:cb:a1:8d:ad:83:02:32:e7:b0:
                    b3:d0:08:7d:5d:58:bd:27:c0:59:58:43:01:0c:db:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:B5:33:59:D1:6F:A4:1A:87:05:7F:BC:BB:04:91:83:13:36:48
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3230312e302f32342d3234203d3e203238303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:bd:71:fd:6b:45:91:dc:d4:0b:06:e7:f0:42:a1:d4:a8:3e:
         af:87:f7:df:d3:42:da:38:ee:54:2d:29:2a:c5:5d:43:ea:5a:
         37:a0:f9:5f:79:cd:8a:fd:cb:8f:b6:9f:58:26:1e:8f:55:51:
         fc:d6:15:25:ff:b7:b7:96:10:14:1c:de:73:67:72:55:00:f0:
         4f:30:d0:f0:1f:54:9c:8e:b6:da:97:20:7d:72:54:0d:99:a7:
         95:f8:09:15:d5:5b:c5:e3:13:f5:7b:69:65:0b:83:1d:db:71:
         34:39:dd:89:ed:33:bb:86:49:d5:f9:a3:cc:16:3b:a2:dd:42:
         46:88:ed:cb:42:ba:c9:99:65:cd:74:9b:4a:59:de:a7:88:31:
         7e:85:97:77:be:cd:4a:0b:35:c4:3d:df:c8:8d:7e:99:9a:96:
         7a:71:05:a5:98:9f:12:fa:01:d6:b3:ea:10:ae:9b:c6:a4:a3:
         87:34:e1:bc:73:bd:53:ef:85:5e:4b:1a:f1:18:5c:1f:54:29:
         6a:d3:c2:cb:c6:49:d9:69:8d:ab:ed:d7:ae:cc:a3:d3:0f:b7:
         98:38:e0:79:fd:a5:76:71:08:82:54:bc:b3:99:78:ca:7b:3d:
         6d:a8:fe:ea:fc:97:4a:cb:e4:ab:d1:c9:74:03:8b:fa:07:70:
         d4:d7:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:31:12 2026 by rpki-client