Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa
File:                     3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa (raw, json)
Hash identifier:          NbNCREbIClCNFlMRoz23OqXHGQTHU863naaMLKThhxU=
Subject key identifier:   CB:26:AB:FC:A5:70:43:51:10:CF:D7:59:65:76:F6:EB:A2:42:EE:90
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       2CC04C900C0A600A32A9B5145D4386E065F156A9
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa
Signing time:             Tue 07 Oct 2025 03:20:04 +0000
ROA not before:           Tue 07 Oct 2025 03:15:04 +0000
ROA not after:            Tue 06 Oct 2026 03:20:04 +0000
asID:                     265622
IP address blocks:        200.110.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:4c:90:0c:0a:60:0a:32:a9:b5:14:5d:43:86:e0:65:f1:56:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Oct  7 03:15:04 2025 GMT
            Not After : Oct  6 03:20:04 2026 GMT
        Subject: CN=CB26ABFCA570435110CFD7596576F6EBA242EE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:e8:b1:2d:49:2e:08:49:98:dc:52:c4:5f:
                    22:93:ed:17:5b:b5:cd:b4:57:7a:b1:da:9d:31:20:
                    13:32:1b:96:53:74:fb:4f:ec:12:3b:7e:8c:17:c0:
                    c1:06:95:f3:66:e3:54:cc:46:ec:f6:5a:00:5c:dd:
                    98:3f:86:3d:ca:1e:30:ff:49:4b:72:55:9c:a0:8a:
                    80:b4:28:63:35:90:54:9c:8f:11:9f:95:c6:ea:00:
                    6c:f5:38:fd:4e:bf:98:30:14:6a:fb:b3:9e:bb:98:
                    44:2a:ab:ab:9c:45:95:e7:25:ca:fd:00:aa:0c:64:
                    1b:21:f0:3d:8b:0b:39:08:de:a6:6e:55:f3:bf:dd:
                    8a:21:a4:c8:e1:d0:b2:57:73:9c:f2:bb:4b:43:14:
                    b1:5c:da:e3:a4:37:2e:17:2d:ae:32:12:f6:d2:92:
                    f1:4e:e9:f1:b8:ab:91:05:2c:6c:17:22:fe:2a:e1:
                    fd:ec:8a:c9:e1:f8:22:4e:ef:20:0e:d9:4a:8e:04:
                    50:20:88:48:27:3c:be:2f:8b:c9:c1:db:44:9a:e3:
                    88:50:d2:c0:54:94:2c:d6:43:1d:3a:b9:06:84:0e:
                    46:03:8d:b2:74:e7:ae:d5:e9:91:fa:d3:c6:03:4d:
                    cf:0f:c0:7d:99:cc:38:2d:19:cf:8c:b1:d5:6e:be:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:26:AB:FC:A5:70:43:51:10:CF:D7:59:65:76:F6:EB:A2:42:EE:90
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130362e302f32342d3234203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:39:d2:ce:db:bd:16:f3:11:e4:28:13:a0:25:99:66:d7:
         03:86:07:18:4d:65:d2:4e:50:90:bd:e8:f2:ef:b3:93:d1:f9:
         07:6b:7b:b0:0b:81:6f:d4:ec:53:43:30:3b:82:54:29:78:67:
         e1:17:b4:91:03:60:ea:c9:85:af:c4:47:9e:11:1c:6e:1d:e3:
         1b:89:9f:16:5b:a3:4a:7e:cc:6a:3c:46:d3:7b:b3:c0:9b:af:
         bc:f6:74:db:ae:13:e6:34:86:59:1f:60:ff:de:79:24:8f:43:
         cd:df:b0:d7:21:54:75:90:4a:a2:b0:fc:b9:d0:e2:7c:85:82:
         fa:e2:33:65:dc:f9:f8:d9:9b:54:02:c0:27:4b:0f:9c:a8:98:
         3c:df:f2:68:cd:ff:9d:bd:25:3e:48:c8:18:40:f9:1f:5a:90:
         4f:03:a6:72:b3:d0:1e:27:92:2d:36:7b:a7:f9:f1:c5:8f:79:
         45:3e:42:07:99:3d:1d:40:c7:78:43:40:65:be:9b:50:b9:c1:
         5c:6e:4f:a9:e8:45:1b:52:55:10:7a:78:4b:51:ea:f5:a8:da:
         d3:62:3f:b6:71:09:dd:3f:45:86:d3:7c:b0:23:c5:fb:72:22:
         e5:1e:ca:02:43:1d:e3:e5:dd:61:1f:3e:f3:3e:a1:87:18:92:
         b6:f4:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:57 2025 by rpki-client