Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3232392e302f32342d3234203d3e203237373630.roa
File:                     3230302e34362e3232392e302f32342d3234203d3e203237373630.roa (raw, json)
Hash identifier:          DuXu5u4/wKz4y30Pna4U4jqtgEkm5/sPnrdnLtmq5MU=
Subject key identifier:   6A:35:ED:61:60:49:F5:DA:8E:01:98:F0:35:3B:E8:AD:42:F6:EA:1C
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       4DC23DADE1989A61C63B86C21D86B34E4655757A
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3232392e302f32342d3234203d3e203237373630.roa
Signing time:             Fri 24 Oct 2025 14:35:19 +0000
ROA not before:           Fri 24 Oct 2025 14:30:19 +0000
ROA not after:            Fri 23 Oct 2026 14:35:19 +0000
asID:                     27760
IP address blocks:        200.46.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c2:3d:ad:e1:98:9a:61:c6:3b:86:c2:1d:86:b3:4e:46:55:75:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:19 2025 GMT
            Not After : Oct 23 14:35:19 2026 GMT
        Subject: CN=6A35ED616049F5DA8E0198F0353BE8AD42F6EA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:64:fa:1e:0f:ff:14:af:22:c1:0b:e6:2a:
                    1c:d5:21:9f:79:37:e2:b9:4f:1b:12:04:37:f0:36:
                    34:d7:a6:95:fe:ea:cd:27:56:16:c8:a6:9d:ed:89:
                    da:47:d3:e2:3e:c0:c0:9e:25:71:2b:8f:49:7f:d0:
                    9d:ef:a2:ef:08:41:09:09:a2:92:cb:b8:71:1e:6b:
                    b3:63:36:d7:ab:84:34:1b:13:87:56:20:43:97:23:
                    19:47:a0:1f:f7:2d:db:2c:79:b0:6b:40:97:66:c1:
                    96:53:b3:25:4e:7c:a5:64:66:5c:a3:b3:f2:a2:19:
                    27:f2:12:2a:da:c2:bd:e0:27:52:68:1b:f6:85:b4:
                    40:5d:5f:46:c8:2b:55:b5:3f:61:24:02:b9:07:e8:
                    4c:f1:12:73:c4:4a:a3:52:97:c7:96:14:53:11:06:
                    d5:ae:e7:bc:8d:f0:76:70:6d:7c:8b:f1:24:ff:cf:
                    ea:a0:a2:13:b4:c0:da:f3:cd:a5:65:44:89:a7:4a:
                    b6:a7:6d:7f:38:28:99:5c:76:f9:3d:28:58:b2:84:
                    4c:f2:b9:64:4f:bc:25:20:5c:99:af:06:00:f2:73:
                    cb:f8:21:73:17:48:d5:40:50:90:9a:ab:93:68:57:
                    1e:13:c7:6a:15:6c:14:75:5e:02:f6:b2:3e:a1:fc:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:ED:61:60:49:F5:DA:8E:01:98:F0:35:3B:E8:AD:42:F6:EA:1C
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3232392e302f32342d3234203d3e203237373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:f2:9f:e2:00:55:31:a2:88:f6:4c:00:30:ba:94:79:05:
         e6:f6:d6:56:69:bb:3f:b5:03:1a:e5:06:a3:d5:05:15:7a:ba:
         9e:21:1f:49:e9:a2:8f:30:c0:33:26:fd:f7:cc:7d:a5:25:f7:
         c6:4d:84:c4:e0:ec:0c:7c:33:8e:9c:8b:d4:2c:a3:9a:73:e7:
         92:bf:a8:83:17:1c:99:6a:e3:c8:9c:be:74:18:9a:3b:4f:da:
         ca:31:ff:6f:9e:ec:8f:6f:33:6f:77:7a:21:e1:5c:89:02:8f:
         39:4d:b1:27:da:ec:7c:a5:e0:3d:ce:a0:86:9a:0e:64:bc:ce:
         3c:77:07:e9:32:20:a1:d0:a8:58:00:42:1b:6a:4a:eb:0c:12:
         74:b7:25:d8:99:7f:83:cc:1f:2b:12:0b:90:0c:1a:5f:f0:b8:
         09:9b:b4:96:43:40:c4:5a:1f:24:d7:5b:f9:39:c4:b5:c6:0e:
         0c:dd:3f:ed:47:08:47:e3:97:bf:14:03:e1:ab:32:3d:6a:ca:
         88:e8:14:dc:7d:fb:8d:f7:64:b4:4a:8d:0d:e4:5d:3a:05:65:
         73:b5:9f:eb:f4:eb:01:04:d3:68:58:b7:d8:2f:c5:19:6a:6c:
         26:e6:d9:ce:ab:e4:66:ef:05:b0:b1:19:8c:8f:a8:de:d2:c7:
         43:8a:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:29 2025 by rpki-client