Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa
File:                     3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa (raw, json)
Hash identifier:          vqn5tFHfvqUDzun24V5/bfWVUMUD6w0SNoi7ksQ4JG0=
Subject key identifier:   E6:52:4C:90:12:1C:E2:17:8C:10:E9:B0:9A:49:2A:57:EF:B4:B8:E2
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       7E25F8D681384811914348154CACD835C5CAAF3F
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa
Signing time:             Fri 25 Sep 2026 14:36:50 +0000
ROA not before:           Fri 25 Sep 2026 14:31:50 +0000
ROA not after:            Fri 24 Sep 2027 14:36:50 +0000
asID:                     27819
IP address blocks:        201.218.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:25:f8:d6:81:38:48:11:91:43:48:15:4c:ac:d8:35:c5:ca:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:50 2026 GMT
            Not After : Sep 24 14:36:50 2027 GMT
        Subject: CN=E6524C90121CE2178C10E9B09A492A57EFB4B8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:5d:c8:ba:d9:6a:16:67:22:e6:fc:44:02:
                    d9:6a:d4:49:b5:c5:d8:60:12:5e:02:ab:c5:74:d3:
                    ab:a0:43:0a:f9:1e:dc:69:1f:ab:10:68:76:af:59:
                    a3:f6:72:9b:0f:77:58:4e:81:3c:cb:ca:88:4f:04:
                    c9:fd:b6:9f:0e:7a:77:a8:53:a2:41:39:31:2f:a0:
                    cf:97:3a:00:a1:df:f9:3a:10:a5:2b:ad:f7:6f:37:
                    29:ff:77:82:f1:ad:0d:5d:43:72:80:82:86:2d:39:
                    92:e4:ba:46:39:46:64:aa:e6:8c:d5:51:15:98:d0:
                    a5:cf:2e:0f:6f:e8:c4:e8:52:aa:29:71:b3:06:bb:
                    4e:9f:3a:da:4e:1c:79:b4:8b:6d:04:45:85:01:67:
                    a9:33:d1:19:c0:ac:d6:f2:1d:be:2a:cf:49:df:fd:
                    52:59:ae:5b:41:76:5a:87:af:bc:50:0c:27:0a:bb:
                    04:32:44:ad:25:db:cb:6e:69:ff:4d:ef:c8:b9:6f:
                    38:89:5b:5b:c4:a2:a1:af:70:eb:36:99:dc:0b:fb:
                    39:be:cb:d8:e7:3d:63:6b:9d:fc:3d:8c:a4:ac:c5:
                    95:cd:5e:05:1a:2f:8f:23:91:e5:03:56:34:2f:b5:
                    67:81:15:c9:24:4b:3a:91:a1:dc:3f:7d:ad:75:fb:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:4C:90:12:1C:E2:17:8C:10:E9:B0:9A:49:2A:57:EF:B4:B8:E2
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:18:7c:63:93:8f:08:a8:7a:ea:0f:86:85:73:fc:e6:6d:aa:
         7c:56:55:ba:07:71:eb:ef:3a:c1:95:56:d1:1a:b9:4f:26:21:
         e8:48:bb:33:3b:cf:64:86:c6:f3:0c:c3:dc:dd:ae:b2:84:63:
         2b:ae:8c:d6:78:44:12:9a:ce:3e:d6:99:2d:0c:cc:90:e1:b2:
         70:b4:23:f0:cb:65:b3:e6:75:e9:7f:1d:d4:60:c4:f4:b4:e5:
         75:6a:37:44:c3:a4:ac:db:7e:4a:be:06:e9:71:c0:a1:a3:bf:
         96:0d:d2:98:0e:d3:c9:9a:8f:29:42:63:ee:71:75:ed:b9:bd:
         f5:4a:f0:aa:d4:12:7b:0a:23:dd:12:fb:ca:a0:5f:4d:5b:ad:
         2e:56:5d:11:6f:a6:09:da:79:24:85:4f:88:8f:ab:ab:c5:45:
         28:ce:fc:75:9b:ed:c2:44:f4:17:c0:51:bf:bb:cd:cc:44:2c:
         cc:a3:b5:3d:60:90:4c:a0:ee:e6:82:47:ec:c2:38:d9:81:16:
         00:a5:a8:52:1f:86:90:ff:ed:7e:78:c7:28:79:62:86:3f:c4:
         b6:0c:a3:30:e5:bb:3b:40:1f:bc:f7:95:ef:15:83:16:ef:77:
         db:5d:89:5c:db:60:09:cb:d6:29:50:33:5b:c5:50:bc:14:25:
         e1:c2:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:22:28 2026 by rpki-client