Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3134332e302f32342d3234203d3e203138383039.roa
File:                     3230302e39302e3134332e302f32342d3234203d3e203138383039.roa (raw, json)
Hash identifier:          aPO7qTG3EkvV5W3gwb+UGouljV1sPCDMyZ55mv4GMI4=
Subject key identifier:   D7:9D:B4:F9:36:6B:75:59:FF:F8:BF:30:68:80:CC:14:C7:A2:3F:B0
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       3CA0BDB5ECFD84F8B9851DF3370CB32DD93CBD4E
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3134332e302f32342d3234203d3e203138383039.roa
Signing time:             Fri 24 Oct 2025 14:35:07 +0000
ROA not before:           Fri 24 Oct 2025 14:30:07 +0000
ROA not after:            Fri 23 Oct 2026 14:35:07 +0000
asID:                     18809
IP address blocks:        200.90.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Nov 2025 18:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:bd:b5:ec:fd:84:f8:b9:85:1d:f3:37:0c:b3:2d:d9:3c:bd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:07 2025 GMT
            Not After : Oct 23 14:35:07 2026 GMT
        Subject: CN=D79DB4F9366B7559FFF8BF306880CC14C7A23FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:c5:f2:f7:c9:21:31:a3:19:6f:57:78:ac:
                    26:ad:a8:40:b6:e8:36:1e:d3:ec:60:34:b5:18:6a:
                    84:05:cc:8b:98:3d:5d:ad:7e:15:8a:75:29:7d:fd:
                    96:ba:13:67:95:ad:42:e3:71:1e:18:a5:74:0f:b9:
                    1d:64:01:a3:55:52:ff:48:5c:b3:71:d9:13:c9:4d:
                    ad:18:f0:90:d8:c2:8a:a7:58:08:39:7a:d8:ab:8b:
                    b3:8e:19:1a:b5:3e:4e:46:13:82:76:7a:fb:cf:fb:
                    65:18:78:ed:79:fa:23:12:d9:9e:97:da:8f:5d:e5:
                    74:18:93:0c:c4:3f:95:cb:86:f2:78:df:24:f5:bd:
                    de:67:76:f7:16:f2:6a:ef:0e:5d:46:ab:21:0a:95:
                    ab:1b:e9:a3:81:e8:61:5b:94:8f:e7:ec:fd:c3:ba:
                    2a:6e:4e:82:00:01:8f:0a:6b:55:89:87:f0:e5:ad:
                    6e:00:ea:5c:fe:fb:20:8c:07:27:55:2a:31:f4:96:
                    26:5f:77:f6:8d:3a:ab:c8:d9:39:45:66:90:9f:9d:
                    19:d8:19:42:1c:b7:92:56:b0:31:bd:0a:28:9a:3b:
                    c9:eb:29:91:0b:fc:12:79:97:d8:df:ec:0c:1c:7b:
                    37:d5:d2:d3:c7:d9:cb:63:56:f6:2f:66:8a:21:ae:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9D:B4:F9:36:6B:75:59:FF:F8:BF:30:68:80:CC:14:C7:A2:3F:B0
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e39302e3134332e302f32342d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:89:22:9a:a3:18:69:cb:99:ed:ef:07:a1:71:cf:d8:c2:
         65:61:ac:39:d1:f0:e9:67:f0:e8:30:13:23:79:2f:68:33:0a:
         ee:14:47:fa:33:6d:24:6f:53:fd:24:f4:c7:ce:80:1b:eb:3a:
         2c:1f:39:08:7d:99:64:d1:06:51:06:85:e0:25:d1:33:98:87:
         4e:44:a6:7a:7b:9b:a9:02:eb:c9:0c:5f:57:0f:7b:43:fb:96:
         f2:db:19:70:fb:24:15:85:90:3f:b0:63:24:5f:56:26:c9:94:
         36:e4:87:27:76:37:6a:86:ea:62:bc:7f:91:fe:fe:d3:33:bf:
         f9:f7:1f:26:13:9e:41:27:da:73:53:63:82:27:72:e0:da:f5:
         a6:a6:b8:dc:59:02:50:2f:60:76:d3:d2:02:2e:50:54:6b:8a:
         bd:af:99:38:d3:81:5f:1c:2f:09:55:e7:96:e0:58:1f:ec:f5:
         8f:26:c7:58:68:2c:4d:99:74:5e:75:97:5b:5b:83:b5:16:3f:
         86:55:ad:4f:38:9f:1c:e8:8d:c8:e8:ee:57:8d:4f:0a:cc:d9:
         7f:29:70:e4:4a:52:60:f1:94:09:f8:4a:9d:b2:29:fe:17:ae:
         34:db:e6:12:b8:3b:ae:e3:be:bb:34:2e:5e:47:bc:33:78:01:
         a1:95:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:12:39 2025 by rpki-client