Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3234302e302f32342d3234203d3e203237393434.roa
File:                     3230312e3231382e3234302e302f32342d3234203d3e203237393434.roa (raw, json)
Hash identifier:          Q2yksOOO5OhKmLjCwsNpno4BlvhHIqCSZpMr3hg9YkQ=
Subject key identifier:   3A:59:E2:D2:DF:05:CA:A7:F3:D0:50:D4:5F:E2:9B:28:77:0A:3D:8A
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       1444F6D2D6F8BD274BE7DDCBE08908C99B24DEB2
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3234302e302f32342d3234203d3e203237393434.roa
Signing time:             Fri 25 Sep 2026 14:36:59 +0000
ROA not before:           Fri 25 Sep 2026 14:31:59 +0000
ROA not after:            Fri 24 Sep 2027 14:36:59 +0000
asID:                     27944
IP address blocks:        201.218.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:44:f6:d2:d6:f8:bd:27:4b:e7:dd:cb:e0:89:08:c9:9b:24:de:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:59 2026 GMT
            Not After : Sep 24 14:36:59 2027 GMT
        Subject: CN=3A59E2D2DF05CAA7F3D050D45FE29B28770A3D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:38:53:9a:cd:ca:4e:16:ca:c3:f6:ce:30:
                    bc:0a:1c:48:4a:1e:d5:d7:a6:d2:52:1f:2d:2b:de:
                    89:c1:6b:9f:80:f3:7f:bb:49:00:21:5e:ea:c6:53:
                    7a:ab:02:40:63:22:4e:41:57:04:8a:57:39:c0:62:
                    de:47:ad:5e:f7:3a:8e:0d:41:bd:0b:09:4c:c0:4a:
                    73:81:b0:2c:9a:d5:bd:dc:bb:f5:f7:61:50:98:5e:
                    e2:db:37:18:b1:bb:dc:78:ad:b0:54:4e:b9:82:25:
                    41:f1:51:04:74:60:42:d0:e8:3f:c2:a8:8f:13:b5:
                    fa:5b:9e:a8:3e:bf:29:97:08:db:59:9c:63:28:b3:
                    bb:67:dc:01:4f:33:07:8f:9c:61:f5:91:6a:94:52:
                    b0:d8:f6:d5:dd:b7:dc:94:0b:af:82:ff:f0:ef:70:
                    bd:32:43:ba:dc:e8:59:b3:68:5f:73:ee:b0:b0:c5:
                    3c:5b:a0:dd:29:e4:15:83:ba:bd:36:08:75:45:05:
                    f5:ae:a7:07:24:ac:a3:e5:ef:76:f7:5e:6d:5a:9e:
                    f5:aa:9a:c3:de:c2:ba:27:01:c5:69:70:4f:b8:ac:
                    f1:0e:b0:86:ae:c6:00:f2:ec:dd:51:ad:fe:9b:4c:
                    d6:55:cb:16:37:1b:ae:0e:d6:5c:ef:c3:e3:61:f8:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:59:E2:D2:DF:05:CA:A7:F3:D0:50:D4:5F:E2:9B:28:77:0A:3D:8A
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3234302e302f32342d3234203d3e203237393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ba:80:9c:ea:5a:0b:bb:f5:d4:27:3b:25:0a:ac:29:f1:a7:
         41:05:e9:bb:46:53:f4:0a:5d:25:c0:ca:2c:b5:8c:14:29:7e:
         81:0b:df:0e:2a:17:ab:33:e2:50:d0:c0:4b:ee:e3:2e:4f:3d:
         a0:05:b7:2b:a8:10:1a:cd:81:3e:b4:16:8a:82:1e:18:51:51:
         f8:fa:29:97:2e:a0:d7:f6:f4:cf:c8:57:46:16:79:59:b8:2f:
         73:83:a7:bd:33:a8:15:d4:83:0a:f0:00:3b:5f:26:84:7a:ba:
         c7:53:68:28:ea:5b:17:7a:e9:9d:22:97:28:71:ae:81:ec:db:
         e2:6c:cc:f4:75:62:6c:c0:86:2d:ff:7e:68:d5:82:3e:6e:60:
         01:c3:04:5d:d7:f3:bd:96:32:00:8a:a9:90:db:3e:56:3c:3f:
         6b:d4:f8:cd:c4:98:a7:b4:5f:e2:cc:42:50:94:2d:81:dd:4f:
         7b:b9:3c:bc:1e:d8:28:b1:92:ac:e5:10:2d:79:d3:36:3e:f1:
         c7:d0:02:ac:59:a4:57:a4:0f:8b:0a:64:d6:81:57:8b:a3:e1:
         78:71:4e:da:35:65:2f:73:11:a0:cc:c9:09:b6:8b:01:ef:6f:
         ef:9e:31:f1:6d:bc:c5:1e:cf:bb:41:81:a4:d5:16:20:0f:20:
         96:1f:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:59:51 2026 by rpki-client