Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e38312e302f32342d3234203d3e203238303631.roa
File:                     3230302e34362e38312e302f32342d3234203d3e203238303631.roa (raw, json)
Hash identifier:          h6L7md6kNswlWJSYBTAwDa5S3hIoJjnKI2+Yryyyxdc=
Subject key identifier:   19:AC:C8:5E:E2:4A:30:A3:BD:D0:AC:1E:50:CB:DB:14:BC:FC:8F:39
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       3579EAE09867B3C8E5A2DB941AD26FACE10B5079
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e38312e302f32342d3234203d3e203238303631.roa
Signing time:             Fri 24 Oct 2025 14:35:10 +0000
ROA not before:           Fri 24 Oct 2025 14:30:10 +0000
ROA not after:            Fri 23 Oct 2026 14:35:10 +0000
asID:                     28061
IP address blocks:        200.46.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:79:ea:e0:98:67:b3:c8:e5:a2:db:94:1a:d2:6f:ac:e1:0b:50:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:10 2025 GMT
            Not After : Oct 23 14:35:10 2026 GMT
        Subject: CN=19ACC85EE24A30A3BDD0AC1E50CBDB14BCFC8F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:e2:da:d7:38:fd:f6:d5:59:6c:6e:56:a2:
                    67:a7:ff:7b:bb:55:8b:e6:78:77:6d:ce:31:31:dc:
                    af:3e:77:dd:ea:98:b4:66:60:07:09:d7:cb:ed:08:
                    3f:39:87:19:84:9c:cd:c5:f8:03:05:9c:92:5a:e3:
                    de:86:2b:cf:a7:b3:58:73:52:9e:19:3a:3c:ca:fa:
                    14:53:48:b2:6d:52:f2:b6:6f:f8:c9:1f:fe:59:9a:
                    16:37:15:31:38:5f:f5:52:7a:6f:da:76:c9:41:e4:
                    33:ed:69:0a:3a:24:bb:5e:67:ed:d7:ad:db:4b:5a:
                    a3:78:00:3e:54:52:36:14:51:f9:cb:d5:5d:fa:7f:
                    76:a9:d8:38:60:a2:28:b4:c4:39:24:3e:69:9b:f5:
                    b3:ad:18:2f:4c:3b:db:72:31:a0:b8:07:0c:6b:1a:
                    f2:f4:5f:95:c8:f3:3d:ac:2e:d9:72:bc:37:b5:38:
                    2a:16:f6:c7:c4:ee:49:ea:1d:4f:0b:9f:93:c6:78:
                    79:c2:80:d9:0c:aa:df:b2:2d:e6:94:57:b4:7d:7d:
                    35:57:ff:b6:3a:0c:8f:7f:9d:75:5e:58:3c:cf:27:
                    b2:d8:ce:c7:dc:0d:3c:3c:f5:dc:07:f4:a0:3e:5a:
                    51:19:a2:fc:9a:a0:34:64:e8:0d:2b:5b:a2:ad:14:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AC:C8:5E:E2:4A:30:A3:BD:D0:AC:1E:50:CB:DB:14:BC:FC:8F:39
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e38312e302f32342d3234203d3e203238303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6f:75:45:ed:89:d6:4b:a2:9b:f8:69:2b:6c:0c:0d:6b:e7:
         63:5c:9c:61:df:ed:13:96:85:aa:13:1f:40:57:a5:c9:d0:96:
         d3:0d:1f:ae:49:76:d1:e9:c6:05:87:bf:be:1e:12:21:05:c4:
         8b:66:ba:49:7f:f5:7d:87:76:3e:53:d3:78:51:a3:25:67:2e:
         20:69:ac:97:fa:0f:2d:a8:15:79:54:cf:12:f9:51:13:14:8e:
         e4:61:72:c0:cd:ee:e9:b2:b1:74:80:e9:b5:7d:1d:d3:49:c0:
         df:f7:49:da:73:79:5b:2c:c1:47:2a:4b:9a:f3:ed:74:4d:6a:
         86:4a:20:c9:6e:94:ed:1d:75:c8:5c:1d:66:b8:f7:d6:d4:69:
         bd:ee:12:6c:65:85:f5:03:f0:40:47:f9:90:c5:ca:1a:96:ae:
         63:e2:35:02:ad:ef:89:ce:ea:ea:77:11:0e:65:5c:5d:99:f0:
         2b:61:26:1e:c7:27:fb:a5:7b:e9:fa:4e:27:13:66:b6:11:f4:
         b6:0f:ff:f4:54:5f:2d:99:6b:b4:48:96:01:47:10:b7:0a:1d:
         fe:5c:66:f2:9e:0b:c3:82:e4:bd:b9:ad:98:09:fa:52:65:1f:
         12:57:79:d8:85:c0:d4:40:4c:e5:d2:4d:68:b1:f2:76:92:65:
         ad:35:83:1a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNXnq4Jhns8jlotuUGtJvrOELUHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMTBaFw0yNjEwMjMxNDM1MTBaMDMxMTAvBgNV
BAMTKDE5QUNDODVFRTI0QTMwQTNCREQwQUMxRTUwQ0JEQjE0QkNGQzhGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDeLa1zj99tVZbG5Women/3u7
VYvmeHdtzjEx3K8+d93qmLRmYAcJ18vtCD85hxmEnM3F+AMFnJJa496GK8+ns1hz
Up4ZOjzK+hRTSLJtUvK2b/jJH/5ZmhY3FTE4X/VSem/adslB5DPtaQo6JLteZ+3X
rdtLWqN4AD5UUjYUUfnL1V36f3ap2Dhgoii0xDkkPmmb9bOtGC9MO9tyMaC4Bwxr
GvL0X5XI8z2sLtlyvDe1OCoW9sfE7knqHU8Ln5PGeHnCgNkMqt+yLeaUV7R9fTVX
/7Y6DI9/nXVeWDzPJ7LYzsfcDTw89dwH9KA+WlEZovyaoDRk6A0rW6KtFAR1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUGazIXuJKMKO90KweUMvbFLz8jzkwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMDJlMzQzNjJlMzgzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADILlEwDQYJ
KoZIhvcNAQELBQADggEBABZvdUXtidZLopv4aStsDA1r52NcnGHf7ROWhaoTH0BX
pcnQltMNH65JdtHpxgWHv74eEiEFxItmukl/9X2Hdj5T03hRoyVnLiBprJf6Dy2o
FXlUzxL5URMUjuRhcsDN7umysXSA6bV9HdNJwN/3SdpzeVsswUcqS5rz7XRNaoZK
IMlulO0ddchcHWa499bUab3uEmxlhfUD8EBH+ZDFyhqWrmPiNQKt74nO6up3EQ5l
XF2Z8CthJh7HJ/ule+n6TicTZrYR9LYP//RUXy2Za7RIlgFHELcKHf5cZvKeC8OC
5L25rZgJ+lJlHxJXediFwNRATOXSTWix8naSZa01gxo=
-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:39 2025 by rpki-client