Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa
File:                     3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa (raw, json)
Hash identifier:          qaK06+WEL3ckhofrCaMxWJindD1URGZ4HH/tA1U2urg=
Subject key identifier:   73:51:D2:24:DE:E3:17:D2:0B:D9:29:75:92:C0:14:7A:C1:C1:45:91
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       65052C291EB5CEFAC4E7968741EE4F7A48C5ED14
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa
Signing time:             Tue 07 Oct 2025 03:20:00 +0000
ROA not before:           Tue 07 Oct 2025 03:15:00 +0000
ROA not after:            Tue 06 Oct 2026 03:20:00 +0000
asID:                     265622
IP address blocks:        200.110.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:05:2c:29:1e:b5:ce:fa:c4:e7:96:87:41:ee:4f:7a:48:c5:ed:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Oct  7 03:15:00 2025 GMT
            Not After : Oct  6 03:20:00 2026 GMT
        Subject: CN=7351D224DEE317D20BD9297592C0147AC1C14591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:7e:9b:5a:39:c5:07:fc:a6:91:38:ce:4a:
                    65:55:fa:1f:c0:66:6d:fa:53:1c:77:6f:0b:86:62:
                    46:96:cd:f1:a2:bd:66:d8:9f:67:d7:62:65:72:8d:
                    59:47:65:18:11:14:7a:d3:d1:89:8a:52:6d:b1:84:
                    7b:dc:1e:92:0e:3d:09:ca:62:d8:e2:6a:bd:5e:4d:
                    2a:8f:ed:52:df:ae:f2:6d:52:bc:33:d8:53:31:82:
                    b2:a8:62:d5:dd:a1:b4:1a:8e:15:5b:b6:0e:37:85:
                    8b:85:6d:c2:fd:70:c2:da:7e:d3:ea:6b:2b:55:49:
                    0a:ac:43:5a:2e:68:a5:37:08:7c:93:0d:1e:a4:69:
                    77:d5:e9:47:95:fb:0c:44:b4:37:5f:13:7d:8c:15:
                    78:9b:3c:d2:ad:aa:40:64:e7:a5:f8:1a:f8:6b:87:
                    38:ad:d6:3a:fb:40:34:41:5f:1b:a9:ca:f3:53:03:
                    3f:40:2b:f2:bb:82:f6:7c:68:6c:b7:8f:c8:ba:a6:
                    d1:6c:20:73:0c:13:c2:01:98:6b:ab:af:c8:fd:52:
                    e4:16:70:4c:73:d0:9c:08:09:40:c6:d4:57:a1:1c:
                    b4:4d:0d:b8:35:fa:e5:84:b1:9b:77:d1:4d:f8:01:
                    20:93:2d:e7:22:61:82:4f:c3:99:26:65:88:cc:19:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:51:D2:24:DE:E3:17:D2:0B:D9:29:75:92:C0:14:7A:C1:C1:45:91
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32332d3233203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:d8:ab:30:5f:f4:ce:5e:37:eb:55:50:78:b8:dd:90:c7:
         ff:5b:32:f7:69:93:50:8f:72:d9:b6:9b:48:05:41:2d:90:fb:
         e3:cd:0b:56:fc:64:9b:81:f5:80:de:13:cb:93:da:87:16:2d:
         91:71:30:48:d5:7d:6f:a7:5c:7e:59:71:be:25:f5:a3:e7:83:
         36:c9:46:34:55:4d:09:e0:c3:61:b9:d6:61:40:ec:b0:fb:14:
         10:70:3a:50:c0:23:a6:fa:10:f7:5d:58:58:4e:ab:8f:01:fe:
         fd:2e:74:5a:10:10:ae:ad:34:f9:db:7b:b4:b1:49:d5:f6:18:
         08:ca:01:44:9b:39:79:ff:43:c1:38:00:67:b6:b6:14:c7:7a:
         d3:77:50:0b:30:f4:59:cf:d9:ef:a4:c5:bf:5b:28:63:62:8c:
         2e:da:fe:8d:dd:d7:c5:9f:90:60:d5:37:d8:96:8e:8a:eb:86:
         87:b6:85:a2:16:f0:16:1a:1e:32:08:3d:c0:b2:91:9d:48:1d:
         c0:bc:f9:85:61:02:22:96:45:92:35:8b:c2:07:da:30:c2:76:
         02:36:b9:76:32:a5:ae:60:d4:d3:85:1f:39:f7:b3:7e:99:16:
         d8:82:cd:43:46:e3:64:54:c5:56:f3:51:e1:5a:87:b8:9e:94:
         6f:e8:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:00 2025 by rpki-client