Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231322e302f32342d3234203d3e203238303331.roa
File:                     3230312e3231382e3231322e302f32342d3234203d3e203238303331.roa (raw, json)
Hash identifier:          vT/iPHPD/5hPAKaSjTknJp/FKdVUcNC49iMDcuJ+WwA=
Subject key identifier:   E5:55:35:74:88:11:0C:16:33:90:A3:DE:51:87:C4:EB:91:A0:7C:61
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       6B205D9FBD15BFAA1FC8E08729716477FCBC333F
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231322e302f32342d3234203d3e203238303331.roa
Signing time:             Fri 24 Oct 2025 14:35:20 +0000
ROA not before:           Fri 24 Oct 2025 14:30:20 +0000
ROA not after:            Fri 23 Oct 2026 14:35:20 +0000
asID:                     28031
IP address blocks:        201.218.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:20:5d:9f:bd:15:bf:aa:1f:c8:e0:87:29:71:64:77:fc:bc:33:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:20 2025 GMT
            Not After : Oct 23 14:35:20 2026 GMT
        Subject: CN=E555357488110C163390A3DE5187C4EB91A07C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:0c:b5:51:bd:b3:1d:ee:c9:aa:d8:56:5d:
                    8d:45:7b:e0:ec:86:1c:2c:c8:5a:89:f5:3b:6c:55:
                    f1:df:44:10:77:a4:92:56:a1:ba:d9:ba:93:05:43:
                    68:a9:a5:72:a1:37:1d:f3:28:fe:15:2e:2b:aa:cd:
                    1b:b3:07:39:f0:32:6d:65:a4:4f:a7:dd:21:b6:a7:
                    7d:60:58:ce:40:95:cc:c2:49:fe:67:8e:90:88:08:
                    d4:2d:32:75:9f:2d:0e:f8:77:98:50:60:0b:55:4e:
                    7c:ac:91:97:93:77:c2:ac:92:76:42:25:e9:50:66:
                    22:9a:10:b1:5c:b4:07:2b:87:b4:10:66:7b:ff:74:
                    73:60:f8:69:25:7a:22:b0:10:bc:67:b4:26:85:a8:
                    6e:5f:71:aa:2e:be:f2:99:60:8b:e6:fc:fe:23:7b:
                    ea:a5:1a:98:5e:ea:0e:39:64:3c:7d:1d:a0:af:c7:
                    6a:57:b9:8b:3c:32:75:6f:2e:08:cc:24:39:e0:c6:
                    e7:1a:79:31:06:6d:66:47:08:93:cb:d9:57:de:c0:
                    17:e9:fa:eb:2c:75:9a:d9:aa:ed:99:40:8a:ea:42:
                    44:6b:a8:1a:b5:02:a3:dd:d8:b4:7b:c4:b7:3b:96:
                    e1:a9:66:89:9d:59:e3:ac:cb:59:8f:6f:95:68:d6:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:55:35:74:88:11:0C:16:33:90:A3:DE:51:87:C4:EB:91:A0:7C:61
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231322e302f32342d3234203d3e203238303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:65:60:61:29:a0:3f:51:dd:88:ac:32:53:ee:9c:31:b5:
         10:ce:60:e1:19:42:1f:21:a3:06:0a:a2:6f:31:1a:2c:8d:6b:
         be:a9:54:f0:41:b3:2d:89:e5:a5:a5:b7:63:42:30:e3:44:b1:
         8d:cc:d3:54:78:7a:2e:3d:64:c7:fd:09:87:2d:4d:f4:63:ab:
         48:71:e2:34:21:70:3b:58:82:b4:95:da:03:34:ae:df:ff:b2:
         7c:26:c0:b9:23:de:32:6d:f2:52:51:d4:d8:dd:8a:e3:7a:4a:
         b1:fe:ea:80:a3:e0:9b:e7:cb:3a:66:9c:ea:b3:ea:02:f4:c0:
         97:02:78:25:b8:25:72:ba:35:06:cd:ff:de:51:70:70:dc:0a:
         5a:cc:af:4c:24:e9:48:54:92:7e:fa:b1:60:1c:aa:b3:e1:70:
         48:47:3d:b1:da:dc:da:53:46:c6:5f:9f:b6:fe:c5:38:70:db:
         c0:07:2e:5b:1b:2a:b8:02:d7:3e:07:4a:7e:68:f2:97:c6:c4:
         0e:f1:34:58:fb:7c:9c:4c:8d:fa:e3:cb:90:02:c9:04:c7:7a:
         05:67:4d:2a:cc:50:ea:f4:a8:e9:a4:20:17:31:9c:86:5b:09:
         82:53:3f:ef:4a:79:0e:01:64:73:b8:c1:c4:9b:13:89:db:60:
         a0:9a:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:01:07 2025 by rpki-client