Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130352e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3130352e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          NMagHzCRktjlpRvog0Ks5/wi1/a8ig6nzzb945Nntj4=
Subject key identifier:   10:64:1D:99:44:8F:75:2A:5E:C1:C0:50:63:78:EE:E7:43:32:4E:0E
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       6DF75B4E48697570CE122B084AB06852C23A606C
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130352e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:20 +0000
ROA not before:           Wed 29 Apr 2026 13:55:20 +0000
ROA not after:            Wed 28 Apr 2027 14:00:20 +0000
asID:                     7908
IP address blocks:        200.47.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f7:5b:4e:48:69:75:70:ce:12:2b:08:4a:b0:68:52:c2:3a:60:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:20 2026 GMT
            Not After : Apr 28 14:00:20 2027 GMT
        Subject: CN=10641D99448F752A5EC1C0506378EEE743324E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:e5:9d:73:19:83:ae:3e:31:b9:b1:86:d3:
                    d2:a3:65:ce:3e:92:09:8f:05:f7:ad:ea:3b:28:7e:
                    22:4b:5c:d1:ad:d3:3d:3e:d6:f2:0b:63:72:2c:54:
                    66:8f:d8:5a:7e:61:a5:e0:34:00:bc:c3:4f:91:9b:
                    b8:ef:63:61:ea:fa:a7:13:8e:09:15:12:b9:11:a3:
                    d6:42:68:bc:a4:f7:fa:a7:dd:ba:1d:83:32:e0:a3:
                    db:c5:3c:12:f5:34:4f:3e:e9:5a:76:0c:a3:e1:db:
                    78:07:ae:24:3f:b6:47:99:62:55:16:59:04:ca:f1:
                    16:bc:d4:b6:da:d0:54:da:0a:4b:ac:b6:46:33:0f:
                    18:31:88:c2:7a:7d:20:50:5b:3b:ff:0f:8e:01:94:
                    97:0c:02:39:1a:fa:bf:ef:5b:8c:04:9c:5a:7c:18:
                    52:b2:62:32:99:0e:0f:4d:0c:bb:8d:e4:e7:91:ac:
                    0e:72:4b:8a:dd:e7:40:65:b8:20:01:0c:09:01:a4:
                    90:83:0d:bd:4c:27:09:9f:1f:7a:b0:43:0a:98:8b:
                    f0:79:68:67:4a:bf:c2:07:08:36:94:ec:c0:e6:23:
                    2a:af:88:65:f5:f7:0c:18:d3:ef:e2:93:e2:ce:ed:
                    cc:a4:19:fb:97:e5:eb:5f:74:da:29:8b:f3:7c:57:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:64:1D:99:44:8F:75:2A:5E:C1:C0:50:63:78:EE:E7:43:32:4E:0E
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130352e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:be:aa:da:6a:ad:1e:ec:d0:8b:0d:c2:5d:dc:7d:05:25:55:
         25:5d:3e:35:e0:fa:4a:7e:38:a4:b9:de:5a:66:51:65:7a:31:
         26:60:7e:96:91:00:f0:f6:61:6d:1c:82:87:b2:92:bb:ef:0b:
         15:91:30:ae:1f:71:cb:8d:32:46:10:41:3f:d5:4b:97:1e:c2:
         b0:a2:6c:6a:13:1d:8b:1a:3a:c8:a5:24:2b:43:79:df:bd:6e:
         2b:47:cf:ae:5e:06:47:f0:4a:cb:d4:2e:40:7c:89:5c:9b:aa:
         5d:2e:38:77:3f:be:52:67:46:ac:85:a9:97:c9:ee:e8:b8:cd:
         fe:97:9a:21:d1:f5:b1:0c:fd:07:ca:c6:85:3e:73:78:a0:77:
         59:1e:d5:ad:e5:99:e5:df:2d:7d:7f:cf:ff:b7:8b:db:91:c3:
         b5:0e:8c:5c:cb:3c:ed:2b:49:ad:8b:28:46:ac:40:c6:73:de:
         92:19:57:f8:60:f6:e0:f2:2c:32:e9:13:a6:2e:d1:26:29:4b:
         9d:78:f5:1e:2c:78:bd:61:1e:4c:d8:df:5b:bd:87:81:e7:28:
         78:05:6d:56:96:7a:0b:b2:2f:a7:c9:75:e0:ae:dc:28:34:71:
         14:90:3b:3f:60:01:f9:d0:d7:71:26:94:bf:d5:aa:64:88:9a:
         ad:4c:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:24 2026 by rpki-client