Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e37352e3139322e302f31382d3234203d3e203138383039.roa
File:                     3230302e37352e3139322e302f31382d3234203d3e203138383039.roa (raw, json)
Hash identifier:          rAzFEA1PpHyzrPUW5hGxl2W3zPi9xJC1UVi7Q+ZnG54=
Subject key identifier:   EF:FC:29:97:BF:D2:0A:7E:4A:FC:37:D5:1E:3E:BF:B5:ED:52:40:DD
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       77D756D6B4B40415E39CC8447D679F4282FB9B83
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e37352e3139322e302f31382d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:49 +0000
ROA not before:           Fri 25 Sep 2026 14:31:49 +0000
ROA not after:            Fri 24 Sep 2027 14:36:49 +0000
asID:                     18809
IP address blocks:        200.75.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d7:56:d6:b4:b4:04:15:e3:9c:c8:44:7d:67:9f:42:82:fb:9b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:49 2026 GMT
            Not After : Sep 24 14:36:49 2027 GMT
        Subject: CN=EFFC2997BFD20A7E4AFC37D51E3EBFB5ED5240DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:1c:4f:e2:61:b5:df:78:48:03:e8:19:e0:
                    6b:0b:e0:1e:a8:0f:22:b7:26:81:e3:a7:13:35:9a:
                    a8:ba:0d:ab:20:60:c8:b2:02:48:6d:40:d6:9c:fc:
                    f4:82:fb:ae:31:5a:86:06:12:c5:16:58:6b:12:33:
                    5a:22:ae:7e:1d:7f:2d:2e:99:1e:21:aa:64:8e:62:
                    f6:96:3b:2c:3d:ea:fb:09:ff:bc:8a:d2:db:af:36:
                    1c:62:5a:94:40:c5:0e:b3:5c:87:ac:bc:55:3b:7f:
                    04:62:11:8d:af:a5:fc:ae:01:ce:ca:70:2b:c3:39:
                    28:b8:42:13:a8:fd:6f:19:45:c6:af:f8:7d:45:d2:
                    61:97:9a:13:b5:22:d0:ca:d7:73:e4:56:02:f3:ae:
                    a9:a9:51:7a:af:11:77:8a:90:83:82:ae:41:c7:fa:
                    e3:15:35:0f:3f:0d:ee:f2:d3:54:80:6e:04:13:cf:
                    92:e1:5a:a2:2b:4e:fa:71:28:96:61:87:b5:53:8f:
                    7e:ef:64:da:54:fb:89:84:85:82:ea:28:15:50:60:
                    7e:3c:df:1c:8b:94:ef:25:f7:9f:2e:53:59:44:1f:
                    30:77:cf:90:3d:a7:39:42:26:38:2c:38:6b:cc:c7:
                    c6:06:48:6c:88:a2:12:a4:c5:b9:cc:68:18:29:74:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FC:29:97:BF:D2:0A:7E:4A:FC:37:D5:1E:3E:BF:B5:ED:52:40:DD
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e37352e3139322e302f31382d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:37:64:8d:0a:b5:58:78:e8:d0:55:60:ef:c9:3f:39:8f:d7:
         b8:e1:5e:e2:65:bc:9e:9e:6b:7f:e4:82:aa:d8:62:bf:22:d1:
         11:8e:ac:5b:53:e8:8c:bd:0b:e5:b1:13:84:4d:45:28:7d:13:
         7a:8e:3c:e0:ac:1d:b6:26:39:c3:d6:1e:42:ad:0e:ef:76:0d:
         67:d3:de:31:ba:bf:2c:14:b8:bf:d6:7b:53:86:ee:21:3b:76:
         cc:4d:64:06:db:a4:47:f9:f1:e1:5d:1c:5a:a4:33:cd:b5:b2:
         70:65:54:d4:6d:0c:c1:4e:e5:be:f1:3e:5a:1f:56:8c:82:8e:
         65:d6:e1:25:f6:bf:4d:85:78:75:40:8f:d8:1f:82:b3:55:62:
         5a:f8:3e:97:82:1e:db:ed:97:97:5e:a6:85:5e:fe:92:56:2f:
         2b:8a:cc:5a:e3:69:bb:bc:1b:e4:98:ae:ac:89:d3:ea:b3:44:
         ef:ff:f0:1b:a8:7c:34:c6:d1:65:b0:8c:1b:48:61:7d:85:0a:
         4c:16:c4:96:fe:6f:c9:46:98:6a:44:1e:8a:2d:0b:09:c8:4f:
         96:88:26:6e:c5:62:a5:c7:51:82:e3:b5:47:2c:d4:91:58:b5:
         9f:04:d6:68:88:16:2d:3d:8f:19:e7:09:f5:7e:07:27:cb:5e:
         51:c7:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:25:05 2026 by rpki-client