Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3233322e302f32342d3234203d3e203237393135.roa
File:                     3230312e3231382e3233322e302f32342d3234203d3e203237393135.roa (raw, json)
Hash identifier:          6U2HHjVhwZh+9O1+cqcEupGVUvYpKOp3b269WYD6Lts=
Subject key identifier:   76:14:6E:6C:A6:DA:2A:2C:2B:3D:34:91:73:AB:29:C0:F5:AF:2F:B5
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       40597EFB01C40B84A7D06286E0DAA35143FABE0A
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3233322e302f32342d3234203d3e203237393135.roa
Signing time:             Fri 25 Sep 2026 14:36:53 +0000
ROA not before:           Fri 25 Sep 2026 14:31:53 +0000
ROA not after:            Fri 24 Sep 2027 14:36:53 +0000
asID:                     27915
IP address blocks:        201.218.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:59:7e:fb:01:c4:0b:84:a7:d0:62:86:e0:da:a3:51:43:fa:be:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:53 2026 GMT
            Not After : Sep 24 14:36:53 2027 GMT
        Subject: CN=76146E6CA6DA2A2C2B3D349173AB29C0F5AF2FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:42:b1:c2:87:1d:e8:fd:d7:7a:e8:8b:39:
                    67:46:0d:3d:4f:5e:ed:e6:6d:16:d0:91:f6:c5:21:
                    54:d9:a6:00:e1:94:98:96:c7:73:7f:13:b4:af:fb:
                    f5:da:b9:92:79:55:0a:01:fb:3c:bd:08:3f:ac:23:
                    53:21:c4:a6:56:35:f2:1f:d0:06:20:6e:af:7b:8e:
                    0d:b2:3c:0f:eb:7c:08:bf:16:21:c5:37:57:35:d3:
                    54:e4:41:a6:38:6b:a8:5b:c8:61:0d:2c:8f:31:55:
                    f0:1b:28:3c:ec:41:1a:2b:70:0c:e2:ea:38:05:1a:
                    b4:23:7f:23:0e:8e:9e:f2:bc:23:6c:05:08:0d:f3:
                    77:f0:05:55:12:34:de:0a:e7:5a:7e:bc:8d:86:3a:
                    f5:2c:11:24:a4:f9:a9:99:52:ba:ef:b2:6e:bf:8b:
                    53:25:66:34:9d:6f:ba:ff:d1:c0:af:49:e6:24:5c:
                    09:db:34:94:2a:1c:46:d2:0f:1c:3a:af:b2:81:8b:
                    29:e9:94:b2:3c:11:df:e2:61:55:a0:c3:45:46:55:
                    e2:62:a8:14:02:fd:05:12:d2:12:d5:45:ab:a2:c9:
                    f3:20:ca:b2:3c:9b:c3:39:bc:da:ba:6e:d8:b4:04:
                    2b:b3:58:f4:3d:05:91:9f:f4:af:bb:cb:53:81:2c:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:6E:6C:A6:DA:2A:2C:2B:3D:34:91:73:AB:29:C0:F5:AF:2F:B5
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3233322e302f32342d3234203d3e203237393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:ea:08:1a:25:b8:77:48:3d:25:80:33:72:66:dd:d2:6c:
         32:e6:9b:54:ce:c1:58:b6:a5:48:6a:45:cd:91:16:27:fc:56:
         d2:e4:d4:cd:1b:1b:bd:a4:3f:f2:2b:00:9f:59:d4:45:d8:8b:
         45:60:c4:67:ff:3a:81:cb:74:0d:1c:a7:89:b5:44:ce:bc:42:
         43:d3:75:60:09:75:e7:1a:e6:cd:9d:32:39:9f:77:41:d5:18:
         16:e6:10:7d:27:f8:77:b0:10:75:8b:5f:cf:ef:68:92:93:04:
         8c:ea:ff:61:f1:ec:00:00:7f:fa:d6:fd:8f:ea:3c:2e:ba:df:
         5b:c6:e0:69:a9:c5:fc:02:ce:4b:c4:41:98:ec:b9:a8:d5:c5:
         81:ca:4f:6d:94:3e:fb:06:b7:dd:4b:d0:13:a5:cf:f6:75:c2:
         71:07:bd:99:28:7f:56:05:0a:6e:09:4b:d2:81:ef:a0:ee:03:
         f1:08:9f:92:d8:d6:f5:57:ae:76:19:d3:b5:f7:9b:11:04:ca:
         3d:40:51:fb:44:86:bf:40:cb:98:2f:24:be:f7:c3:87:74:99:
         16:37:df:eb:a6:8a:7a:4f:a7:85:fc:2f:f3:9a:04:f0:10:3e:
         b6:53:2c:a3:f4:eb:9e:10:ff:5a:9c:d9:d6:32:89:c7:53:5d:
         a1:ab:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:13:06 2026 by rpki-client