Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3136372e302f32342d3234203d3e203238303035.roa
File:                     3230302e34362e3136372e302f32342d3234203d3e203238303035.roa (raw, json)
Hash identifier:          F6vTB3DwmRMXK/GVNOi3Xnq8kaH6QnBCpxLJMv+hbG0=
Subject key identifier:   E2:86:B2:59:09:E1:10:84:AE:C7:42:CE:F6:34:D5:40:5B:D4:BD:92
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       68FDEA73A69944BC0020F552228C5122570167A1
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3136372e302f32342d3234203d3e203238303035.roa
Signing time:             Fri 24 Oct 2025 14:35:04 +0000
ROA not before:           Fri 24 Oct 2025 14:30:04 +0000
ROA not after:            Fri 23 Oct 2026 14:35:04 +0000
asID:                     28005
IP address blocks:        200.46.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fd:ea:73:a6:99:44:bc:00:20:f5:52:22:8c:51:22:57:01:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:04 2025 GMT
            Not After : Oct 23 14:35:04 2026 GMT
        Subject: CN=E286B25909E11084AEC742CEF634D5405BD4BD92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:ad:1a:6b:06:68:ca:10:c7:b3:a7:f9:4b:
                    79:bd:d0:05:33:6d:67:12:cf:d9:2f:a0:f3:c5:24:
                    9a:9d:20:ea:fc:55:23:19:d5:75:a5:55:20:a3:57:
                    bc:29:f5:4d:88:92:34:56:fa:98:7d:f5:c2:f3:f0:
                    46:b7:07:72:a5:5a:35:04:26:b1:25:c0:4b:7c:44:
                    1a:ab:90:80:fe:0d:69:44:34:1b:f0:21:92:38:bc:
                    eb:c6:4d:4f:8b:03:61:72:db:ca:a9:b1:89:21:07:
                    83:0c:28:19:fb:c2:7a:8c:84:ef:1a:c6:c6:3d:9d:
                    85:d6:ef:cf:b2:f3:23:9b:97:57:75:fa:18:3f:81:
                    af:e3:7c:66:c1:8b:93:a4:14:83:6c:5e:e4:f1:87:
                    f5:d1:d5:d8:6a:96:9f:f8:3c:36:f9:2a:57:01:c6:
                    80:55:e0:74:42:ef:76:b4:07:2e:61:59:b2:33:42:
                    98:5d:f7:5d:77:ae:69:35:d5:72:d2:8c:f2:a0:09:
                    4b:fc:28:17:e5:99:0b:66:37:ef:73:b3:19:d0:1d:
                    0f:10:80:d8:58:0a:3f:dd:d9:b8:ed:e1:d7:e5:f3:
                    27:3a:3c:0c:48:c9:47:da:c4:56:aa:e4:a1:e8:2f:
                    1e:39:b8:da:cb:88:ff:fd:50:c7:42:cd:71:f9:c5:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:B2:59:09:E1:10:84:AE:C7:42:CE:F6:34:D5:40:5B:D4:BD:92
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3136372e302f32342d3234203d3e203238303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:75:74:58:ef:75:70:57:43:5a:60:b1:37:7e:8c:e6:6b:
         c4:f1:a5:97:74:d6:30:f8:d5:ec:cc:18:7c:e5:7f:a6:f8:78:
         2c:bf:91:d8:20:06:e3:ca:5c:91:f4:b8:a5:5f:2b:de:ae:e1:
         09:1e:a0:e1:11:33:e0:21:e9:65:6d:e0:cd:28:a0:69:45:fc:
         2b:44:14:16:95:78:e1:b7:5a:5a:77:93:12:fd:f8:eb:7a:d9:
         c2:50:07:ab:e9:b9:5c:d4:2b:cb:b4:68:13:11:f8:54:e6:1a:
         5e:6c:51:92:3a:57:5b:95:b8:58:44:ad:8d:9b:6a:6b:ab:fc:
         fb:b2:7f:79:12:61:57:f0:f1:41:50:12:8f:07:45:2a:d0:f2:
         4d:fc:fe:ff:18:b5:7a:c1:d4:57:e9:41:78:53:b9:18:dd:04:
         0d:b7:54:ba:a0:ec:3f:2d:e0:43:c9:b5:fd:d1:9c:4e:a0:65:
         7f:25:00:8e:c9:d0:4a:b3:d1:1d:70:dc:84:2b:81:dd:4f:36:
         ff:32:d7:90:bc:f7:36:a1:5d:ec:37:ad:9c:2f:ab:42:1e:08:
         0b:af:28:b3:d2:cb:7a:1d:9d:67:ad:8d:04:cf:5a:8d:08:d5:
         7f:d0:83:c0:ae:2c:bc:ad:9a:39:59:73:93:e8:32:6e:10:60:
         54:1b:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:12:24 2025 by rpki-client