Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa
File:                     3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa (raw, json)
Hash identifier:          zKH2BxlBrifXxlpPgPATz1CSl0cWKn5NZ7HddUIimMk=
Subject key identifier:   2E:2B:81:67:47:0B:3D:D0:46:E9:E5:31:8A:32:D3:55:16:7E:E9:21
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       10C74B08C6687190682185690B0213B79B8BCB3A
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa
Signing time:             Fri 25 Sep 2026 14:37:00 +0000
ROA not before:           Fri 25 Sep 2026 14:32:00 +0000
ROA not after:            Fri 24 Sep 2027 14:37:00 +0000
asID:                     262198
IP address blocks:        201.218.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 19:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:4b:08:c6:68:71:90:68:21:85:69:0b:02:13:b7:9b:8b:cb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:32:00 2026 GMT
            Not After : Sep 24 14:37:00 2027 GMT
        Subject: CN=2E2B8167470B3DD046E9E5318A32D355167EE921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:4f:d9:48:2a:a6:37:0d:8f:17:f9:80:25:
                    3c:d2:9c:3d:ba:f8:a4:39:6b:87:24:24:63:37:9d:
                    17:c7:c6:bd:33:4a:0b:27:3c:da:a9:5e:03:96:7f:
                    0b:b7:f7:de:31:b3:20:d3:b6:4f:ae:51:8e:ea:01:
                    68:45:04:b6:80:c3:55:69:ed:79:b5:1d:49:86:51:
                    45:b1:39:8d:4c:bf:5b:94:5d:49:4c:44:56:a8:09:
                    8a:7b:83:f5:3a:90:78:31:25:a7:a1:e4:53:31:b2:
                    da:60:17:d9:f1:ae:5e:8a:bb:b2:3b:a7:28:5c:b8:
                    fa:d9:dc:09:9a:e6:1e:63:6e:3c:3a:ea:44:51:78:
                    56:60:18:33:70:9d:1d:7c:d8:a0:ef:9f:30:e0:bb:
                    11:4c:42:f7:8b:dd:af:89:32:d0:24:9c:dc:07:bd:
                    79:d7:58:c0:f8:04:32:9a:58:d5:a3:55:3b:cc:d3:
                    63:1c:44:62:5d:c8:af:a8:e3:af:be:46:ed:f6:01:
                    0b:91:50:63:ba:58:26:03:3a:d7:3b:14:8e:5c:2d:
                    22:a8:d6:0f:e0:3a:a6:ad:84:f3:7f:89:43:f8:cc:
                    90:45:6e:0e:d0:95:57:d9:d7:e8:81:c0:30:4a:84:
                    74:22:b8:0f:3f:9c:a4:e5:e8:b9:33:1d:d1:ca:4f:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2B:81:67:47:0B:3D:D0:46:E9:E5:31:8A:32:D3:55:16:7E:E9:21
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:22:14:36:a0:c7:74:a7:97:96:cb:1d:71:66:d0:0f:5c:45:
         c4:ad:b7:cd:b2:7c:37:4a:6c:ed:ef:22:91:4a:27:d0:89:37:
         df:aa:98:b8:93:ed:bb:d4:b5:92:07:0b:b2:85:e8:90:8a:cb:
         47:61:d8:61:dc:37:12:cd:2e:d0:e1:4a:c6:e1:6c:86:12:da:
         ef:81:be:3c:34:4f:06:77:a9:f2:d2:1f:07:f4:35:c3:82:be:
         98:a4:62:62:81:9e:69:82:99:59:7f:78:c2:76:5b:d1:04:b9:
         53:01:42:de:57:a5:a0:19:4a:27:56:24:99:39:6d:a2:c5:13:
         54:3f:36:e3:3c:82:68:dc:b0:37:34:30:f4:7a:88:46:11:ec:
         25:6e:02:e5:4c:b1:b5:1e:9b:f8:29:c5:29:da:0a:20:b6:b3:
         41:f5:d6:cf:e7:db:b0:af:58:79:42:34:df:f1:bb:9e:d8:72:
         57:c4:50:d3:46:b9:00:e6:51:9e:b0:24:85:24:fd:30:71:0f:
         97:b0:dc:c5:01:75:61:c8:be:43:dc:a3:6b:97:3a:c3:05:18:
         c5:97:9f:87:9a:23:ca:58:df:e4:4f:65:08:d7:79:8b:08:11:
         8c:6d:76:b6:18:24:9e:28:55:5e:5c:1b:fb:f2:8c:4e:d4:47:
         41:1f:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:01:29 2026 by rpki-client