Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234322e302f32342d3234203d3e203237383032.roa
File:                     3230302e34362e3234322e302f32342d3234203d3e203237383032.roa (raw, json)
Hash identifier:          Z+kMOFvrPx9CLdJe0ACguKXEx2TLyjh1s6af5LkbDBA=
Subject key identifier:   74:B1:F6:D8:69:AE:7C:37:8A:03:17:26:85:1C:A2:23:E5:C8:06:F9
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       1C1199D093F0CA4D6EC196B91695F81E2C2EC990
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234322e302f32342d3234203d3e203237383032.roa
Signing time:             Fri 25 Sep 2026 14:37:00 +0000
ROA not before:           Fri 25 Sep 2026 14:32:00 +0000
ROA not after:            Fri 24 Sep 2027 14:37:00 +0000
asID:                     27802
IP address blocks:        200.46.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:99:d0:93:f0:ca:4d:6e:c1:96:b9:16:95:f8:1e:2c:2e:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:32:00 2026 GMT
            Not After : Sep 24 14:37:00 2027 GMT
        Subject: CN=74B1F6D869AE7C378A031726851CA223E5C806F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:9c:8d:7d:cf:74:4b:b9:ef:a8:c1:aa:b1:
                    0a:9e:f0:ce:3a:a3:06:38:50:86:c2:d5:06:9b:c2:
                    0f:b9:85:18:62:36:50:64:41:90:5b:54:02:a2:0a:
                    ee:65:f0:e1:14:10:a1:78:8e:d1:71:72:ac:dd:c6:
                    0e:2e:d8:b1:88:20:34:47:58:15:e7:ae:92:20:7e:
                    0b:c0:76:91:82:bd:c9:5d:e0:e6:1b:69:71:99:e6:
                    18:98:8e:92:36:b3:7b:78:06:1e:7c:5b:c9:e8:8f:
                    da:ab:c4:7c:42:01:c4:16:45:16:b1:2c:09:59:b9:
                    76:11:bd:f1:1d:01:a0:c8:49:84:24:6d:85:b8:88:
                    47:47:f9:69:fb:c7:26:a6:60:dc:00:a1:e3:22:a2:
                    30:ed:75:0b:0b:18:e1:91:48:a6:e1:0f:00:87:6e:
                    34:8f:64:71:d9:e7:b2:af:92:c9:2d:f8:75:29:55:
                    6a:17:66:ce:df:42:17:fe:47:a2:1d:79:c3:6e:cb:
                    41:e6:95:6f:92:6f:c0:74:a4:e0:d7:c8:4e:b1:38:
                    47:a2:b7:c3:1b:5f:ce:f8:7b:9a:95:24:7f:af:1b:
                    1a:24:64:ab:bf:48:66:45:6d:a5:c3:24:ec:64:80:
                    25:7a:20:da:7e:5a:d6:06:7f:84:60:6e:ba:0f:79:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B1:F6:D8:69:AE:7C:37:8A:03:17:26:85:1C:A2:23:E5:C8:06:F9
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234322e302f32342d3234203d3e203237383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:17:3f:98:f7:65:40:a3:bf:f9:76:01:2f:ad:f7:2f:95:40:
         a0:e7:0a:5d:73:85:60:e1:c8:d4:a4:67:ae:9d:f6:40:f5:37:
         0f:0a:60:42:46:7e:05:c8:52:f6:29:76:6e:3d:16:67:b3:67:
         e4:3b:01:c4:70:69:2a:52:61:f5:a3:cb:97:7f:f1:66:14:64:
         3c:1b:fb:6b:1a:c2:6b:ea:35:95:b2:75:3e:a9:0c:d7:3c:3f:
         18:f0:70:d4:6d:95:35:3b:6a:9e:cf:d6:c5:b1:2e:7e:a4:b3:
         66:5e:4d:c2:e3:c7:36:81:d2:7d:01:8d:06:42:3e:b3:d2:87:
         97:1c:25:4b:f6:5d:07:ac:c7:bb:7d:dd:47:e8:bb:98:50:44:
         f3:17:22:6e:27:43:06:4c:f9:e6:f7:77:1d:ff:b6:06:94:0c:
         63:ea:6e:56:f9:ae:32:de:35:71:f9:21:d2:c0:36:91:03:ae:
         34:4d:cf:87:ea:ac:9e:c4:75:79:53:c6:79:59:7a:42:52:13:
         40:f4:51:7f:ac:cf:68:13:ef:5f:2b:03:f6:ab:df:3e:fc:9b:
         3e:34:65:3f:89:9e:cc:1f:31:e7:3b:58:43:86:eb:e7:9f:bd:
         63:74:60:1a:d9:9a:ee:da:57:f5:d7:74:21:94:6f:c9:73:74:
         35:b5:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:43:44 2026 by rpki-client