Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e38312e302f32342d3234203d3e203238303631.roa
File:                     3230302e34362e38312e302f32342d3234203d3e203238303631.roa (raw, json)
Hash identifier:          kEfPmGaSp7Ct6eeTEoXwz1EPLLzYAnX3PiJkQwB1Mtk=
Subject key identifier:   E2:52:2B:93:37:0C:EF:DF:04:F2:AB:99:00:2D:1C:EE:C5:0C:52:19
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       7300A05D118BBC369513685EB2CF72794462D1B0
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e38312e302f32342d3234203d3e203238303631.roa
Signing time:             Fri 25 Sep 2026 14:36:54 +0000
ROA not before:           Fri 25 Sep 2026 14:31:54 +0000
ROA not after:            Fri 24 Sep 2027 14:36:54 +0000
asID:                     28061
IP address blocks:        200.46.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 05:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:00:a0:5d:11:8b:bc:36:95:13:68:5e:b2:cf:72:79:44:62:d1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:54 2026 GMT
            Not After : Sep 24 14:36:54 2027 GMT
        Subject: CN=E2522B93370CEFDF04F2AB99002D1CEEC50C5219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:09:92:e9:60:9f:3f:95:df:c1:df:62:eb:
                    8d:d3:0f:60:05:2a:35:e0:9b:f5:8a:98:68:62:b1:
                    9f:16:02:b1:3d:eb:37:18:c0:23:b0:04:36:2e:ea:
                    51:86:01:92:e5:ae:b5:cc:84:03:d6:21:b9:37:08:
                    65:58:b6:e5:58:6a:ab:9c:ab:c4:55:6b:29:6f:aa:
                    4f:ee:f1:c7:ff:b0:d4:e9:06:0d:48:93:c9:70:c9:
                    f4:9e:ea:78:f5:82:18:2e:1a:8b:15:31:aa:9f:5a:
                    52:94:8d:3c:61:41:a8:19:01:47:40:bb:9f:27:4b:
                    ef:3c:b1:76:cf:29:9a:69:a4:cf:a6:8b:98:26:4e:
                    6b:42:bf:3d:09:76:97:79:1c:0e:dd:b6:74:d8:80:
                    ce:7b:20:59:e5:26:4b:f1:43:a5:34:2d:c7:fa:bd:
                    78:ae:69:13:1d:da:4c:ba:7f:f2:03:5b:70:c4:81:
                    22:73:8a:f2:f9:5a:5c:4f:a0:ef:76:a9:90:a5:6d:
                    81:4f:b6:3c:50:6b:81:3e:ed:80:f5:fc:cd:c8:69:
                    c6:b3:dd:68:dd:57:7e:0b:9f:e3:fd:a4:15:61:3e:
                    f7:e7:21:91:5b:f3:37:46:75:00:04:9c:20:99:a3:
                    43:b7:53:d5:b5:64:2d:bd:b4:bd:e4:cb:f0:bb:d6:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:52:2B:93:37:0C:EF:DF:04:F2:AB:99:00:2D:1C:EE:C5:0C:52:19
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e38312e302f32342d3234203d3e203238303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:14:43:4f:bf:25:98:cd:0f:8a:71:db:48:96:c1:eb:d0:2a:
         2f:14:a9:18:65:af:5f:b8:2f:24:b9:7b:f3:86:61:f1:f1:ef:
         2a:01:05:5a:0c:73:03:31:fa:19:2f:d8:44:e7:ec:36:14:3c:
         85:ce:9f:1c:95:1f:00:5b:43:ce:2f:ce:35:dc:e6:58:2d:7c:
         24:97:27:e0:a4:0a:45:5c:8c:c4:37:4a:bf:94:3d:ab:72:bc:
         35:18:e4:80:2e:14:e1:e3:9e:aa:1e:2f:1b:c9:81:97:7f:58:
         f2:0f:75:3e:fa:b0:a0:41:11:19:87:7c:34:c8:86:86:ce:d0:
         bf:f2:3b:48:d8:61:3f:2a:6e:41:48:48:97:a6:7e:05:c2:29:
         cc:68:39:b5:30:8b:03:53:37:eb:bd:aa:00:11:fb:89:d3:8f:
         62:a1:ca:d0:6a:d4:1f:15:72:f5:d2:11:1d:15:16:0c:11:10:
         8b:73:4c:80:3e:54:88:6e:22:11:40:34:22:d1:8a:9b:26:8a:
         c1:a8:ea:9a:7a:8d:3f:af:c2:5a:34:da:d3:2e:7f:0d:22:0a:
         e8:7e:75:e9:22:65:30:e3:20:60:5c:40:71:ce:96:9b:6d:9e:
         38:c8:19:4d:83:b3:17:cb:9c:86:8c:ee:c4:b5:bc:1b:e8:0f:
         77:40:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:22:05 2026 by rpki-client