Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234362e302f32342d3234203d3e203237373838.roa
File:                     3230302e34362e3234362e302f32342d3234203d3e203237373838.roa (raw, json)
Hash identifier:          6q8t5Dc/q6B9K2dVVDRJDnUkW0S5HW13ziRy0CX0YJo=
Subject key identifier:   AE:EB:30:CC:03:03:E3:97:80:82:05:CF:CF:41:D1:A1:8A:8B:9F:9D
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       1AF31C1C6B582AB4CEDACBD492392D5017D31CB0
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234362e302f32342d3234203d3e203237373838.roa
Signing time:             Fri 25 Sep 2026 14:36:49 +0000
ROA not before:           Fri 25 Sep 2026 14:31:49 +0000
ROA not after:            Fri 24 Sep 2027 14:36:49 +0000
asID:                     27788
IP address blocks:        200.46.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f3:1c:1c:6b:58:2a:b4:ce:da:cb:d4:92:39:2d:50:17:d3:1c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:49 2026 GMT
            Not After : Sep 24 14:36:49 2027 GMT
        Subject: CN=AEEB30CC0303E397808205CFCF41D1A18A8B9F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:34:c0:04:c3:b8:84:5a:b7:9c:4d:db:d5:f0:
                    25:d1:4c:02:1b:8f:c9:63:ef:8f:8b:e8:50:ff:e8:
                    2f:e3:f7:a1:09:8d:55:f4:04:72:97:b3:e5:e0:4b:
                    2c:4f:7a:48:7e:2f:eb:f3:71:43:49:47:64:8a:26:
                    f9:28:15:77:b5:94:64:a0:1a:22:11:33:5e:1d:66:
                    79:6f:1d:db:44:a5:56:33:ac:fd:4d:ad:66:cc:7a:
                    57:0d:64:ca:53:54:99:24:97:ed:d5:77:c9:86:35:
                    93:dc:d9:04:20:a2:a3:8b:a5:b3:14:85:8f:61:3d:
                    73:f3:62:cc:ea:7e:96:8d:bd:f5:a6:fb:b0:3e:52:
                    62:43:e6:c5:5e:36:09:7c:3a:12:cd:c9:89:7d:79:
                    14:0d:b4:c3:ad:68:2e:5c:7a:e3:51:70:e5:dd:be:
                    41:16:59:1d:ee:53:96:01:56:7c:03:a5:ba:7a:e1:
                    64:9b:8a:44:27:03:eb:e0:d9:94:3b:c3:68:6f:2b:
                    fd:92:bb:04:e4:aa:f5:db:57:6c:fe:67:79:74:b7:
                    23:79:e1:e4:38:df:e1:30:c2:ae:91:fd:58:78:30:
                    33:27:34:84:60:76:80:a0:0b:4e:ee:62:e1:4a:0c:
                    c5:dc:41:45:d9:a6:39:9c:51:76:ec:c6:12:21:2e:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EB:30:CC:03:03:E3:97:80:82:05:CF:CF:41:D1:A1:8A:8B:9F:9D
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3234362e302f32342d3234203d3e203237373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:92:96:08:61:4d:58:10:bb:8d:c0:37:c5:6f:a9:30:82:
         a6:5c:8a:f9:3d:5f:b4:10:b3:c5:5f:fb:ac:52:54:46:06:32:
         1d:aa:49:bd:42:af:a1:1f:c7:b0:17:a5:75:d9:b6:8b:a3:ca:
         e9:5b:54:82:ff:24:fa:af:de:f7:c4:a3:b7:09:c6:3b:8a:2c:
         a8:08:ef:12:84:66:b7:0f:e0:c5:de:80:b8:10:ff:c5:3c:4c:
         17:38:08:f6:87:42:61:54:2e:aa:c1:73:ed:7f:a6:bd:6f:ff:
         00:98:36:f4:3e:51:b3:5d:cf:76:77:2c:5b:0e:af:f0:88:3a:
         7b:e5:91:9f:91:b7:dd:15:e9:98:ba:67:be:37:d9:57:7e:89:
         f5:70:84:e6:54:b2:ff:a0:1e:3f:c4:8b:b4:0f:7c:56:8f:f5:
         93:c8:60:36:23:7a:5e:84:a5:71:e8:da:86:74:59:96:f6:dd:
         81:61:ae:c6:d2:32:40:af:c6:55:10:9b:7c:d5:59:e4:8e:1e:
         66:f6:72:d6:30:da:e4:29:5b:a9:92:05:a8:04:60:a4:74:2a:
         4b:5a:c9:4a:e1:d1:ca:36:86:69:9f:a4:db:49:c9:f8:fd:0a:
         ca:36:9f:e0:91:cf:85:2c:ac:22:dd:47:c8:54:6d:2c:87:1b:
         f2:a6:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:38:55 2026 by rpki-client