Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3132382e302f32302d3234203d3e203231353939.roa
File:                     3230302e39302e3132382e302f32302d3234203d3e203231353939.roa (raw, json)
Hash identifier:          vm7r8L6VjVlVSKEJr9H4O5X4Jq59qbuiY61N0hVkAL4=
Subject key identifier:   76:BC:2E:03:6F:C2:D0:54:51:E7:A3:9A:B4:CC:84:FC:3C:6F:10:54
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       2BE223348712A47235538B8D980337B24127CD42
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3132382e302f32302d3234203d3e203231353939.roa
Signing time:             Fri 24 Oct 2025 14:35:21 +0000
ROA not before:           Fri 24 Oct 2025 14:30:21 +0000
ROA not after:            Fri 23 Oct 2026 14:35:21 +0000
asID:                     21599
IP address blocks:        200.90.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e2:23:34:87:12:a4:72:35:53:8b:8d:98:03:37:b2:41:27:cd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:21 2025 GMT
            Not After : Oct 23 14:35:21 2026 GMT
        Subject: CN=76BC2E036FC2D05451E7A39AB4CC84FC3C6F1054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:fa:26:58:6e:b6:34:5b:1e:6b:52:2c:3d:
                    b5:02:0c:e8:c8:76:51:5b:ab:b2:ed:df:cc:92:59:
                    1d:95:b2:18:70:7f:3d:7e:6f:d1:b7:7a:7d:c8:f8:
                    fd:7d:33:51:75:29:b8:4c:b8:b7:b4:4b:4c:e0:40:
                    ba:62:f1:47:95:84:7d:04:dc:58:16:e6:7c:2b:92:
                    9b:30:ae:fb:51:e1:c9:d6:25:78:f5:f2:68:cb:36:
                    a2:04:44:7b:4e:02:be:1f:59:84:c1:8c:77:b3:f6:
                    49:77:8a:0b:cb:84:3d:20:5f:5a:1e:1e:cb:c9:c4:
                    9f:7d:4c:3f:ab:29:ae:50:46:27:ad:98:61:65:07:
                    e1:a2:ae:30:ae:ad:c6:43:53:d6:a7:54:e2:e0:50:
                    56:ff:6f:f6:8c:44:e7:a2:a0:46:b1:19:b6:01:d7:
                    44:43:c6:3f:71:b2:e7:90:e9:cf:6b:73:c1:40:34:
                    2e:5e:11:42:36:05:f0:72:34:04:12:da:d5:87:af:
                    3a:97:f2:bb:de:ba:94:34:bb:1e:ab:be:8e:fd:e6:
                    76:95:da:9d:54:38:40:97:1d:8a:71:46:13:d8:9a:
                    24:6b:ec:fb:7b:c9:bd:e5:94:6c:07:56:06:bd:f0:
                    41:5c:e0:a5:6c:3b:0b:29:f4:c7:9d:c6:ef:82:6e:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:2E:03:6F:C2:D0:54:51:E7:A3:9A:B4:CC:84:FC:3C:6F:10:54
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3132382e302f32302d3234203d3e203231353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:67:ce:42:b7:ee:85:d5:b7:72:f2:e8:61:7f:ba:65:34:
         27:68:b8:cb:50:e7:2d:6a:05:62:b2:4a:8f:30:e6:74:10:95:
         85:cf:04:a4:75:db:9c:db:f4:62:fb:f5:08:6d:78:c6:6a:12:
         6a:21:08:0c:e2:22:03:64:36:2d:8c:72:7e:7f:ef:4c:60:d5:
         89:9f:a9:bd:0b:8a:38:e5:ca:ef:7d:c9:20:a1:ee:4b:9d:bd:
         14:3c:3b:98:f9:0b:23:77:2c:20:7e:4c:1c:71:c6:71:cb:b1:
         68:77:6d:3e:f7:59:fe:ce:98:4a:46:58:fa:b3:f2:d3:e5:dd:
         76:f7:81:c8:f8:4b:b9:a1:c0:1b:68:ad:15:9a:5f:da:82:c4:
         46:ec:56:60:c5:bc:50:67:bb:e9:dc:9b:b8:7c:4d:c6:c9:93:
         c5:5f:0c:1e:81:53:7f:55:10:6a:15:e5:22:62:cc:18:2a:ad:
         c1:18:92:eb:87:db:8a:fd:1d:82:99:53:bc:31:4b:1b:6d:2c:
         bb:18:63:83:43:12:c8:8b:22:5a:b5:99:9f:da:b9:05:cb:33:
         72:ff:a3:b2:a2:45:64:fe:63:92:5e:0f:ef:83:75:5d:8e:a1:
         6a:4e:b7:2f:a3:0e:ac:35:13:1d:ec:52:52:c1:92:ec:54:66:
         1d:d0:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:05:09 2025 by rpki-client