Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3234342e302f32342d3234203d3e203238303634.roa
File:                     3230312e3231382e3234342e302f32342d3234203d3e203238303634.roa (raw, json)
Hash identifier:          WBe45/y+yhmomWS5qdzORxfgylFZtcwnbHZoS1S6Wpc=
Subject key identifier:   35:3D:F8:C0:74:74:07:74:58:74:C0:01:26:79:E5:D0:2B:CF:E9:5B
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       0B7741CA4AAF225D814E9AA89839A89443BA8BD7
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3234342e302f32342d3234203d3e203238303634.roa
Signing time:             Fri 24 Oct 2025 14:35:03 +0000
ROA not before:           Fri 24 Oct 2025 14:30:03 +0000
ROA not after:            Fri 23 Oct 2026 14:35:03 +0000
asID:                     28064
IP address blocks:        201.218.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 16:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:77:41:ca:4a:af:22:5d:81:4e:9a:a8:98:39:a8:94:43:ba:8b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:03 2025 GMT
            Not After : Oct 23 14:35:03 2026 GMT
        Subject: CN=353DF8C0747407745874C0012679E5D02BCFE95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:5a:17:26:5b:e0:e4:d7:33:ae:de:36:b5:
                    8e:52:ae:d6:80:b6:af:4d:2b:89:31:a0:93:be:15:
                    18:bc:1e:f7:3d:ef:c0:27:7b:46:23:c5:26:9d:24:
                    b8:42:a5:01:66:19:d4:24:3b:0f:65:1f:51:58:48:
                    b1:34:d2:78:92:88:1e:e1:af:f1:60:77:38:d7:07:
                    d8:f3:6c:4d:71:78:83:3d:c5:82:03:d0:ca:e4:97:
                    6f:40:4d:6b:88:c5:e4:f8:12:0f:a3:01:ab:09:b3:
                    dd:5c:12:35:28:9d:01:d0:83:60:ca:b6:da:36:0d:
                    2a:9e:b0:81:4e:62:12:2a:fb:34:45:d3:eb:97:eb:
                    75:cb:3e:00:56:3f:17:53:c5:af:58:a9:2c:a4:b3:
                    77:e6:e0:9d:21:3d:75:42:33:f4:d8:e5:9d:af:cd:
                    0b:d7:12:65:a6:75:6c:05:c0:c0:c1:cb:c3:39:ad:
                    1c:79:90:e8:2e:7e:73:15:e5:16:b6:50:b1:f3:4b:
                    01:33:92:ac:13:f8:74:26:98:3d:93:59:d9:04:9a:
                    b5:55:38:58:28:9f:61:46:7c:03:17:9c:f3:31:9a:
                    1a:b5:5d:fb:88:fa:75:2f:84:86:44:6d:17:35:a2:
                    ca:93:7e:89:47:1e:59:30:70:bc:e2:50:d8:b6:c3:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3D:F8:C0:74:74:07:74:58:74:C0:01:26:79:E5:D0:2B:CF:E9:5B
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3234342e302f32342d3234203d3e203238303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:f8:8a:fb:6c:a3:d1:8a:32:8a:8c:65:91:33:dd:90:b2:
         01:ed:da:28:30:76:29:d8:49:20:fc:2c:ea:b6:8b:81:87:86:
         91:cb:77:f9:fb:09:b8:e6:68:c3:be:17:44:cf:94:b2:43:1d:
         a2:5c:1c:6a:e5:67:eb:30:36:d8:c9:ce:3c:0a:a7:6d:f9:a4:
         11:aa:4a:8c:95:0f:4e:d5:66:1c:88:bf:90:ab:78:08:68:32:
         69:34:ee:66:bf:dd:d2:fa:c0:9c:b6:b0:a1:8d:67:fd:bb:fe:
         89:da:88:65:0f:fa:5e:7b:60:bd:ce:03:1c:e2:2d:00:33:ce:
         85:0d:4b:d0:d8:0c:44:d5:4e:c1:38:c7:0b:eb:41:69:83:f8:
         eb:8d:34:d7:25:b6:bf:79:1d:1d:51:ad:1b:8c:86:0a:30:10:
         c2:88:da:d8:74:8b:d3:5d:36:f1:fc:68:e3:69:4a:60:27:88:
         bf:78:08:41:7c:4b:73:f3:f6:4d:2b:78:93:37:69:7d:f8:63:
         4a:91:91:d9:c1:30:b0:a8:cd:88:46:60:75:28:6c:05:ad:a8:
         51:1f:b5:d6:83:98:23:8d:c8:15:6f:c1:bf:43:f8:72:30:7b:
         6d:f9:bf:eb:e8:0f:d5:48:44:a4:a1:f2:74:f3:9f:9d:7d:54:
         e7:c4:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:32:09 2025 by rpki-client