Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e302e3135382e302f32342d3234203d3e203136383734.roa
File:                     3230302e302e3135382e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          KEOwW8gvjOOVaoNvsYMbwODppRpxRUy3YFzE1DdX3Bk=
Subject key identifier:   32:51:5C:F4:16:53:EC:C0:97:50:7A:61:17:C9:7D:1F:9C:04:48:64
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       074619CB656F8E315B093E5C721CFB12EF0D233C
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e302e3135382e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:15:00 +0000
ROA not before:           Thu 09 Jul 2026 23:10:00 +0000
ROA not after:            Thu 08 Jul 2027 23:15:00 +0000
asID:                     16874
IP address blocks:        200.0.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:46:19:cb:65:6f:8e:31:5b:09:3e:5c:72:1c:fb:12:ef:0d:23:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:10:00 2026 GMT
            Not After : Jul  8 23:15:00 2027 GMT
        Subject: CN=32515CF41653ECC097507A6117C97D1F9C044864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:18:ce:f0:af:d5:d5:c3:e2:c1:4c:c6:62:
                    bc:6c:5f:56:b8:2c:01:36:c6:20:72:46:ee:c0:63:
                    45:f6:c3:fc:b0:a1:79:da:46:97:a7:48:35:0b:92:
                    d6:41:01:66:0a:4e:49:cf:23:cc:69:39:25:b6:b7:
                    8b:36:53:5b:5c:ac:23:c2:06:21:b2:fc:94:b0:d6:
                    32:7c:13:ce:f7:8b:6b:e6:b8:a7:65:1e:61:19:91:
                    79:5f:df:ea:ab:56:b3:6f:e2:36:de:ca:e7:9a:02:
                    e5:e3:a7:e6:af:e6:f7:f2:98:b2:cc:f2:71:fe:0e:
                    a9:91:33:cf:76:2f:e2:e4:e7:9a:84:ed:a5:40:b0:
                    0f:6a:6b:30:df:89:49:8a:8d:c7:c1:81:b7:bf:3e:
                    fa:b8:e3:ca:12:53:0e:d7:d3:d7:a7:db:49:fa:14:
                    c2:a3:b1:95:c5:ab:8d:6e:c4:1c:a3:c6:27:94:13:
                    55:b0:7a:f0:dd:64:93:11:cb:ee:f6:1e:f4:e7:61:
                    e1:11:ae:36:0f:8f:fb:c5:9a:c6:f4:7e:19:09:22:
                    e1:18:0f:13:2e:b9:61:69:65:30:84:cd:a5:ab:4f:
                    59:a8:4a:d9:43:33:8f:6c:0f:63:d4:00:04:12:7d:
                    d2:98:59:fd:92:c6:81:b9:83:57:d2:9d:1e:fd:ab:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:51:5C:F4:16:53:EC:C0:97:50:7A:61:17:C9:7D:1F:9C:04:48:64
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e302e3135382e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:5a:71:4e:f6:10:91:86:98:f8:d3:d5:35:8e:cc:1a:ec:
         1b:79:04:a5:ab:ee:d6:e0:bf:cf:86:6b:7c:bb:d1:7b:d7:ba:
         b8:0c:52:dd:eb:4d:ae:a2:48:43:8f:c5:8d:77:dd:c7:b4:c3:
         81:47:e2:25:9c:29:11:b4:99:ca:17:5b:6a:63:4b:98:fc:c8:
         6b:81:61:e0:6c:33:1f:43:53:00:05:44:d9:82:25:b8:cc:6b:
         52:03:c3:a0:07:af:26:10:31:77:13:b3:41:7a:f7:26:03:22:
         0b:4f:15:c1:2c:ca:6e:26:af:c8:7c:df:9d:2c:ee:5d:4a:d5:
         ec:ca:ce:40:f6:2a:d4:19:87:fe:e5:e7:9c:63:55:e0:44:68:
         a9:35:60:df:cf:5a:52:6b:c5:9e:57:e8:2a:30:86:8a:48:63:
         33:aa:c8:32:97:d2:b0:91:3f:df:a8:b6:2f:93:4a:01:a1:c9:
         ec:a4:eb:c8:ce:98:db:35:7d:9d:bc:4c:1c:7c:e6:45:e8:95:
         cb:98:a0:85:b4:31:12:75:1b:df:f8:0e:86:39:82:6a:8f:c6:
         3b:e3:5f:e1:4a:d3:a7:7f:2e:0f:66:63:fa:f7:12:0e:f6:c7:
         74:07:29:d2:25:d7:4b:fb:76:06:22:e9:7a:97:6f:26:a5:c6:
         73:bc:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:02:33 2026 by rpki-client