Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139322e302f31382d3234203d3e203138383039.roa
File:                     3230312e3231382e3139322e302f31382d3234203d3e203138383039.roa (raw, json)
Hash identifier:          8LYiIMXwMYZdII5YBrMBCz93BS793dCvn27li8bSCzY=
Subject key identifier:   B6:B5:E9:2A:D7:13:EC:1C:C4:6E:54:5E:7D:AE:87:EA:EE:01:5F:8F
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       5DDA552530BB96C435EE7CEA34D48FD78111E084
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139322e302f31382d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:51 +0000
ROA not before:           Fri 25 Sep 2026 14:31:51 +0000
ROA not after:            Fri 24 Sep 2027 14:36:51 +0000
asID:                     18809
IP address blocks:        201.218.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:da:55:25:30:bb:96:c4:35:ee:7c:ea:34:d4:8f:d7:81:11:e0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:51 2026 GMT
            Not After : Sep 24 14:36:51 2027 GMT
        Subject: CN=B6B5E92AD713EC1CC46E545E7DAE87EAEE015F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7d:21:13:c3:c6:0b:34:a2:c7:02:54:9a:0a:
                    cb:90:52:1f:9b:53:18:bf:2a:90:0f:d4:0e:e1:42:
                    7d:73:89:33:e5:fe:35:a1:05:9a:06:be:8e:71:49:
                    2c:c1:72:65:fe:5a:51:19:1e:2a:9c:4f:e1:75:b1:
                    52:63:bd:f4:f6:5a:e0:4f:86:73:16:6a:ab:ed:ff:
                    80:60:94:d8:f2:95:b2:23:40:24:2b:25:80:f9:40:
                    9e:ef:d6:4a:eb:14:db:fb:f9:b4:0e:47:23:e9:d6:
                    e4:bc:89:f1:f2:51:3a:de:34:e2:6c:17:13:ad:7d:
                    14:de:71:ef:81:69:64:b6:7e:a8:66:a7:9d:29:62:
                    3b:68:af:e1:26:f3:32:a9:88:5a:69:66:4a:05:fa:
                    80:00:e0:91:52:1e:9e:16:fd:f5:cc:1d:9b:b2:51:
                    f8:2d:09:46:91:05:a8:77:00:fb:aa:ad:c5:d0:fa:
                    48:14:e8:fa:d0:ea:41:6b:ce:e7:77:f6:70:85:d5:
                    eb:e9:13:9f:f4:09:4b:ff:37:58:a8:65:1a:b0:cb:
                    a8:e5:26:4b:bb:35:91:6c:5c:d3:00:f0:74:1b:4b:
                    9d:4e:9d:0c:bd:a0:31:bd:d8:e8:f5:76:52:58:34:
                    0d:f9:14:f4:0c:a0:58:11:08:bf:2b:88:21:bf:b2:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:E9:2A:D7:13:EC:1C:C4:6E:54:5E:7D:AE:87:EA:EE:01:5F:8F
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139322e302f31382d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:5c:81:1d:ef:a7:86:1d:5a:67:92:7d:90:06:01:01:9a:5e:
         49:3c:eb:a8:55:a8:1a:db:80:28:eb:25:7b:5e:0a:99:df:c9:
         39:7c:ac:7f:f9:fd:bb:c0:88:1f:1a:12:2e:96:6c:1b:7a:5b:
         c6:26:23:28:5f:3a:cf:8b:0d:43:8a:2b:13:33:54:b6:0a:ca:
         96:3e:20:38:b6:6d:b1:5b:34:b8:a3:32:77:93:1d:b9:57:5b:
         2e:ab:09:55:44:0b:3f:e2:fa:dc:a6:85:d2:80:62:4d:12:93:
         9e:1c:57:06:87:bf:b2:bd:d5:3e:39:62:87:95:6f:ec:11:46:
         e9:d1:ef:bb:8e:2c:59:d9:1e:f3:7c:84:23:44:e2:5b:d3:52:
         d4:86:b2:db:8c:fe:57:03:f7:bd:8f:04:3e:b5:b3:ef:41:c4:
         a4:7a:1c:5d:dc:fb:22:7b:31:a0:b1:01:5f:63:f4:7f:f9:d6:
         7d:38:bf:67:a5:5d:4b:96:f2:f2:ae:d0:01:b0:01:80:5d:d7:
         a3:f8:33:8c:d2:b4:5a:52:88:09:c5:0c:d1:ba:7e:c2:f9:a4:
         84:ac:0e:79:91:fa:b0:8c:e6:a2:e4:3e:a8:3d:9e:15:2f:22:
         7f:aa:f0:14:0c:e4:04:fd:1f:c5:72:13:26:0b:71:8d:f1:ea:
         3a:f2:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:00:36 2026 by rpki-client