Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234302e302f32342d3234203d3e203237363739.roa
File:                     3230302e34362e3234302e302f32342d3234203d3e203237363739.roa (raw, json)
Hash identifier:          94qlW7WWGzra7iD+S0HeAaupWLkSAoxWqXd23ETZCWw=
Subject key identifier:   23:92:F2:5C:CB:9C:83:CD:73:FB:66:BD:73:81:72:2B:7C:69:2E:BD
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       70AC1128DA1A134D60EA8688570FF179E4E2C5A1
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234302e302f32342d3234203d3e203237363739.roa
Signing time:             Fri 24 Oct 2025 14:35:12 +0000
ROA not before:           Fri 24 Oct 2025 14:30:12 +0000
ROA not after:            Fri 23 Oct 2026 14:35:12 +0000
asID:                     27679
IP address blocks:        200.46.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ac:11:28:da:1a:13:4d:60:ea:86:88:57:0f:f1:79:e4:e2:c5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:12 2025 GMT
            Not After : Oct 23 14:35:12 2026 GMT
        Subject: CN=2392F25CCB9C83CD73FB66BD7381722B7C692EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2d:ea:3c:c3:9c:ea:d1:0d:d4:a0:40:9f:e7:
                    85:4b:c1:68:16:bc:b7:c1:aa:1c:d7:cb:92:63:5e:
                    63:73:78:c6:fa:23:34:f0:6e:71:10:b5:92:48:12:
                    12:ac:17:82:82:93:4b:57:b1:b2:51:b1:21:74:fb:
                    bf:ef:7f:dd:6d:5d:cf:ae:92:04:74:19:e5:bb:46:
                    b7:2d:07:9e:50:bb:4e:2d:31:2d:02:6f:f8:c4:8d:
                    40:5f:e7:7b:f4:a7:c0:de:bb:85:3e:8a:04:0b:1e:
                    1d:7a:1d:93:e8:d2:a7:f2:92:0a:07:94:d9:cb:66:
                    7d:bc:3d:76:d8:b1:97:0f:90:86:a1:8d:98:c3:0b:
                    2b:d0:ea:27:24:0a:1f:2f:c5:b4:46:d1:b8:60:98:
                    fe:2c:81:da:b3:9b:d7:ec:ad:8d:3e:29:79:36:79:
                    de:f8:b4:86:db:35:02:73:7f:52:ac:d7:c4:21:69:
                    8b:90:56:d4:68:8a:ad:53:d1:ef:10:1c:34:f0:59:
                    cc:b7:b9:46:fc:3d:5c:27:2c:b8:bd:05:4d:06:9d:
                    c9:ee:67:f3:40:b3:68:ca:cc:98:22:12:7d:9c:78:
                    b4:94:e9:71:6e:b9:b0:26:84:fe:b2:76:ad:65:3c:
                    18:55:df:02:15:0b:fd:5f:48:67:e9:4c:d3:b4:19:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:92:F2:5C:CB:9C:83:CD:73:FB:66:BD:73:81:72:2B:7C:69:2E:BD
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234302e302f32342d3234203d3e203237363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:35:ce:a3:a6:11:1c:4d:28:4b:66:17:44:2e:33:2c:f2:f9:
         60:f0:30:d4:1e:22:61:82:72:2f:17:f4:16:5d:97:ae:24:94:
         55:42:9f:32:5b:b4:7e:ca:d3:59:12:5d:2b:4e:d2:55:98:f7:
         f4:76:b1:0d:60:7d:56:55:6a:07:af:96:bc:60:d6:ef:2f:18:
         24:10:84:02:5b:38:8e:37:18:8f:14:08:04:66:28:58:58:62:
         de:e0:3e:74:46:78:63:81:2b:99:fc:35:5b:a2:b8:47:23:87:
         5d:83:1e:57:cc:18:ce:3d:5f:05:01:11:ee:da:61:f9:c8:19:
         3c:59:3e:21:7b:ec:0c:18:4d:af:ea:15:3e:69:54:20:80:5e:
         41:cb:53:77:e4:4e:99:2a:6b:e5:3f:61:95:3f:23:89:e9:d6:
         bd:ce:20:ee:89:5f:38:a0:f0:07:27:e7:bf:e5:8e:86:55:c1:
         2f:d5:3d:b6:8f:80:ff:e2:ba:44:96:bd:5d:61:05:04:b4:03:
         48:d4:cf:80:28:52:77:c0:5a:5c:ed:05:52:68:a9:e4:b6:4e:
         a3:b5:ff:ae:5b:4d:a3:b0:df:83:d3:35:45:d7:ac:53:90:5e:
         21:5c:58:27:80:44:22:46:3a:64:15:79:af:23:f1:98:36:fb:
         36:0f:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:03:19 2025 by rpki-client