Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa
File:                     3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          dEwNim2ewOc74NiYuNhEM4o7psBMJrJDzPQBO/Kk9E8=
Subject key identifier:   81:4A:00:4D:18:0B:18:FB:C1:E0:56:56:CD:A7:04:95:B0:DA:ED:A4
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       5F999D1E4AAEA8D47E35E51385E519985E1E20C0
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa
Signing time:             Wed 13 Aug 2025 14:35:33 +0000
ROA not before:           Wed 13 Aug 2025 14:30:33 +0000
ROA not after:            Wed 12 Aug 2026 14:35:33 +0000
asID:                     26426
IP address blocks:        200.115.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:99:9d:1e:4a:ae:a8:d4:7e:35:e5:13:85:e5:19:98:5e:1e:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:33 2025 GMT
            Not After : Aug 12 14:35:33 2026 GMT
        Subject: CN=814A004D180B18FBC1E05656CDA70495B0DAEDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:c3:ec:23:e4:1d:f2:cc:e3:c8:5e:a3:64:
                    d0:06:11:69:4a:15:84:9a:2d:5b:9f:db:a5:58:3a:
                    84:a0:4a:76:45:df:91:05:a4:4d:7a:e6:c5:9b:05:
                    62:6d:00:9b:66:cc:38:4d:5d:6a:1a:a8:a7:96:4e:
                    95:6f:3c:65:5e:d5:12:e7:8b:88:4d:57:a0:bd:ff:
                    08:4c:43:82:8e:a8:71:1c:c1:ea:a9:37:4e:95:1a:
                    a8:d3:ff:66:7a:d2:dd:aa:be:4b:df:a8:0e:02:80:
                    da:b3:36:62:28:ea:9c:52:45:78:05:5f:cf:db:6a:
                    dc:09:ef:dc:18:ff:0a:3e:98:36:a6:a8:fe:0c:a9:
                    26:b3:41:de:ca:f2:01:e4:cf:4e:2e:40:81:aa:0d:
                    27:3b:e1:4e:66:75:39:20:a9:20:fa:55:1c:40:ed:
                    19:cf:db:04:b6:2c:30:3c:d9:f4:74:38:dd:03:61:
                    0c:da:5a:fb:45:42:f5:42:bf:f8:37:e1:9b:b9:c9:
                    8a:be:bb:80:cf:19:06:2c:28:e4:36:7e:50:5e:fd:
                    07:ef:c4:75:d1:45:4d:db:66:e0:3d:4c:d5:4e:17:
                    39:52:1b:3d:8d:3f:38:1e:be:a8:d6:f3:09:aa:a8:
                    4e:24:14:4d:b0:57:df:33:0b:93:58:2f:da:bc:10:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4A:00:4D:18:0B:18:FB:C1:E0:56:56:CD:A7:04:95:B0:DA:ED:A4
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:32:7c:4e:19:cc:cd:ce:16:77:f5:cc:48:d8:7e:3d:a7:8e:
         ad:e4:cd:f2:82:14:e2:64:8d:46:9a:e4:09:52:f4:54:f2:57:
         90:44:72:6d:f0:a6:de:ee:86:a1:92:84:aa:1f:44:dc:0e:da:
         9b:37:2f:0b:c6:d8:0d:1b:83:76:36:4e:c5:92:50:57:84:07:
         c9:7d:ff:cc:3e:e4:78:71:b3:c7:cb:d6:b4:86:ef:fd:20:bd:
         c2:0c:bb:d7:b4:89:44:94:b8:11:8f:80:3e:6e:dc:6f:03:0f:
         9b:5d:f6:ad:2d:8a:14:7f:76:ca:cd:7b:ff:07:f5:6a:d9:71:
         f2:e0:7c:5e:75:a6:65:d7:01:4e:4d:18:8b:f4:bd:5b:0c:bf:
         f7:e0:85:2a:30:c1:88:09:95:f5:9c:31:49:6d:f2:1d:77:8d:
         46:ee:46:57:2a:ed:62:32:af:6f:56:0c:12:12:70:96:ec:3f:
         37:cd:ff:47:2b:d2:70:98:66:6e:9e:09:26:3c:9f:c6:da:33:
         9f:d6:1f:85:d2:1b:f1:57:af:ba:8d:77:ad:a3:d2:6a:ff:7e:
         f1:de:70:47:6b:71:51:aa:80:ca:06:b9:36:54:95:90:2b:1f:
         a7:93:fd:20:da:fc:1e:e0:5e:96:2c:af:2a:13:d4:57:d3:89:
         a6:e0:a3:40
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUX5mdHkquqNR+NeUTheUZmF4eIMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNTA4MTMxNDMwMzNaFw0yNjA4MTIxNDM1MzNaMDMxMTAvBgNV
BAMTKDgxNEEwMDREMTgwQjE4RkJDMUUwNTY1NkNEQTcwNDk1QjBEQUVEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkicPsI+Qd8szjyF6jZNAGEWlK
FYSaLVuf26VYOoSgSnZF35EFpE165sWbBWJtAJtmzDhNXWoaqKeWTpVvPGVe1RLn
i4hNV6C9/whMQ4KOqHEcweqpN06VGqjT/2Z60t2qvkvfqA4CgNqzNmIo6pxSRXgF
X8/batwJ79wY/wo+mDamqP4MqSazQd7K8gHkz04uQIGqDSc74U5mdTkgqSD6VRxA
7RnP2wS2LDA82fR0ON0DYQzaWvtFQvVCv/g34Zu5yYq+u4DPGQYsKOQ2flBe/Qfv
xHXRRU3bZuA9TNVOFzlSGz2NPzgevqjW8wmqqE4kFE2wV98zC5NYL9q8ENCNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgUoATRgLGPvB4FZWzacElbDa7aQwHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMyMzAzMDJlMzEzMTM1MmUzMTM2MzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzQzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHOi
MA0GCSqGSIb3DQEBCwUAA4IBAQAYMnxOGczNzhZ39cxI2H49p46t5M3yghTiZI1G
muQJUvRU8leQRHJt8Kbe7oahkoSqH0TcDtqbNy8LxtgNG4N2Nk7FklBXhAfJff/M
PuR4cbPHy9a0hu/9IL3CDLvXtIlElLgRj4A+btxvAw+bXfatLYoUf3bKzXv/B/Vq
2XHy4HxedaZl1wFOTRiL9L1bDL/34IUqMMGICZX1nDFJbfIdd41G7kZXKu1iMq9v
VgwSEnCW7D83zf9HK9JwmGZungkmPJ/G2jOf1h+F0hvxV6+6jXeto9Jq/37x3nBH
a3FRqoDKBrk2VJWQKx+nk/0g2vwe4F6WLK8qE9RX04mm4KNA
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:58:29 2025 by rpki-client