Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3132382e302f32302d3234203d3e203231353939.roa
File:                     3230302e39302e3132382e302f32302d3234203d3e203231353939.roa (raw, json)
Hash identifier:          IbpxifRchCQ3rX6GylA5ilu9PiegA8i0Felo4iEkZw0=
Subject key identifier:   C3:67:F1:5A:D0:82:F1:06:1A:87:FD:11:43:D8:8D:93:9E:6C:55:8D
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       19261C188EF1048CE016A180848E5A253DC1747B
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3132382e302f32302d3234203d3e203231353939.roa
Signing time:             Fri 25 Sep 2026 14:36:54 +0000
ROA not before:           Fri 25 Sep 2026 14:31:54 +0000
ROA not after:            Fri 24 Sep 2027 14:36:54 +0000
asID:                     21599
IP address blocks:        200.90.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:26:1c:18:8e:f1:04:8c:e0:16:a1:80:84:8e:5a:25:3d:c1:74:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:54 2026 GMT
            Not After : Sep 24 14:36:54 2027 GMT
        Subject: CN=C367F15AD082F1061A87FD1143D88D939E6C558D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:91:ff:8d:fa:ca:22:f9:84:4b:eb:3c:b9:
                    4b:5d:0f:ea:22:07:1d:dd:f9:f1:52:8c:c6:c4:af:
                    75:97:26:28:ce:37:e5:7c:0e:b3:dd:ae:d2:d5:86:
                    9a:13:48:d9:b7:76:0d:54:f5:b3:1d:9a:c1:e4:8e:
                    74:76:1d:93:76:92:4a:76:f5:3f:44:4a:e0:96:9b:
                    ea:0e:e6:30:5a:3b:9c:32:68:3d:40:32:a2:da:62:
                    83:7d:7a:41:15:76:33:1d:9f:05:c7:3d:8d:b9:13:
                    51:01:00:9c:dd:8f:c3:98:9e:f9:08:1e:42:97:aa:
                    dd:38:eb:74:ee:2c:82:ce:9c:4a:f9:74:5f:97:71:
                    f1:bd:12:12:b1:6e:71:c3:6f:b6:e1:ac:56:98:a5:
                    07:6a:93:ff:82:2b:e1:6c:17:e3:46:d5:f0:44:a1:
                    35:04:3e:fc:c7:1f:da:49:bb:6c:a4:7a:f3:d5:6f:
                    8e:5d:1a:14:7a:09:7e:82:90:ba:41:ee:ac:15:b6:
                    b9:c1:fe:21:92:21:0b:4b:0c:d7:2d:f1:5b:25:d7:
                    46:1b:e8:dc:52:02:3f:40:32:a7:27:27:41:76:5b:
                    0c:9f:e5:c8:04:2f:a9:93:de:65:30:b6:3a:df:c0:
                    67:2d:9d:0b:96:e7:c4:03:55:fb:9d:4a:7c:06:8d:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:67:F1:5A:D0:82:F1:06:1A:87:FD:11:43:D8:8D:93:9E:6C:55:8D
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3132382e302f32302d3234203d3e203231353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:1b:42:a5:bb:11:9f:31:4d:17:89:26:2f:c6:1e:23:7b:
         4e:bd:2f:dc:b7:8c:73:08:53:3f:bf:b0:bd:f2:07:e3:f8:18:
         b7:a7:c6:a0:3a:f6:a2:d6:3b:d7:c2:e8:0e:f7:c2:d5:16:d8:
         f6:41:2e:84:76:b7:b7:47:80:37:65:7c:81:a8:eb:76:b2:6b:
         6d:cb:25:0d:ca:a3:c5:11:1d:61:33:e9:24:18:02:dd:f2:3e:
         30:11:53:ed:d6:ec:22:2b:79:c9:03:45:01:2a:14:91:c1:71:
         f3:86:25:1d:6b:b9:e8:65:d2:3a:45:38:6e:25:38:4f:8f:80:
         29:e5:62:ae:36:5f:14:2b:8e:b1:a0:df:18:87:fb:e1:6a:18:
         50:6a:d0:64:9a:b2:42:e9:23:82:2c:0a:e7:35:40:cc:53:37:
         dc:5d:6b:0c:5a:98:b5:a0:1d:1b:c0:01:ad:74:2b:8f:88:5f:
         90:3a:cd:82:26:6a:d5:ee:d0:95:72:28:54:54:67:bb:0d:64:
         0b:73:05:d1:56:a2:df:d2:cc:b4:45:25:7e:b4:4c:61:e1:5a:
         2b:7d:70:88:d2:63:e0:2f:11:7b:96:c5:49:31:a9:cb:44:8e:
         17:12:aa:a8:b3:6f:20:7c:b1:70:70:2f:44:3d:30:ee:38:7c:
         5f:a6:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:29:17 2026 by rpki-client