Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130362e302f32332d3233203d3e2037393038.roa
File:                     3230302e34372e3130362e302f32332d3233203d3e2037393038.roa (raw, json)
Hash identifier:          MJ4Wo6/EK7fxxH50Jv8LOQSA0AaPEiJND5SCKkBl3a0=
Subject key identifier:   76:BB:05:2D:04:40:DB:7B:56:8E:6B:71:7E:B1:8E:C5:DB:49:3C:3A
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       4BE77CF24F4BBE6A02D1246B3E6022CA60324811
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130362e302f32332d3233203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:00 +0000
ROA not before:           Wed 29 Apr 2026 13:55:00 +0000
ROA not after:            Wed 28 Apr 2027 14:00:00 +0000
asID:                     7908
IP address blocks:        200.47.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e7:7c:f2:4f:4b:be:6a:02:d1:24:6b:3e:60:22:ca:60:32:48:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:00 2026 GMT
            Not After : Apr 28 14:00:00 2027 GMT
        Subject: CN=76BB052D0440DB7B568E6B717EB18EC5DB493C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:a4:91:e2:a2:82:cb:a4:e3:51:bd:ff:1e:
                    94:91:c7:74:d5:3d:b8:04:4e:bc:bc:7d:1b:af:ed:
                    fd:66:7a:1c:70:c1:00:b4:bd:b8:3c:b5:40:66:49:
                    84:64:d5:4c:f9:ba:4b:8b:d8:6b:38:8a:e6:2b:d1:
                    1d:d1:6d:e8:b9:05:54:60:86:1c:06:16:09:58:83:
                    85:c3:f2:60:82:08:ac:20:31:2a:e8:a8:77:47:f8:
                    92:40:b1:c1:da:30:c4:d5:6b:b9:89:f9:74:23:67:
                    54:be:59:ae:2c:ac:0b:b8:67:f7:20:9a:7f:0a:ef:
                    5e:78:59:0b:b6:fa:2f:11:de:d9:2a:fc:3b:76:6a:
                    1a:40:d8:b5:dd:0e:ca:82:2b:fb:53:4a:e0:3b:fd:
                    ec:55:67:ba:61:ec:b4:7f:f6:92:69:c2:2e:82:0c:
                    f6:42:5c:f5:7e:3f:3c:d8:db:f5:e9:c1:0f:aa:d8:
                    b8:96:69:ee:94:ca:76:35:56:99:c4:5f:fa:98:29:
                    8d:b9:ea:bc:36:45:9a:c1:bc:8e:9b:f9:f0:e0:79:
                    b2:4d:30:1a:cb:01:60:1b:42:70:51:0a:64:4b:52:
                    87:98:55:d9:5e:28:fe:7e:88:43:ea:7a:17:4e:ef:
                    11:f6:0f:3a:ca:38:87:30:dd:78:e2:6e:3d:de:e8:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:05:2D:04:40:DB:7B:56:8E:6B:71:7E:B1:8E:C5:DB:49:3C:3A
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130362e302f32332d3233203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:22:b3:60:54:97:a1:17:4e:be:c5:18:4c:b5:e3:df:64:88:
         4f:b8:17:7d:fc:39:67:5e:43:aa:7c:8a:a5:79:fb:b2:b1:57:
         30:78:65:23:df:23:43:98:b4:e6:e3:d3:57:39:55:19:f1:e1:
         fe:87:6a:db:d4:e0:0a:a3:7a:f6:ee:2d:4b:2f:c1:c3:9e:70:
         85:99:6b:60:b1:cd:8f:61:dc:1d:85:41:1c:49:a5:a9:2d:ac:
         ac:73:68:08:12:5c:ac:9a:a0:a3:c2:9f:1e:b2:bc:04:3b:ef:
         ba:36:42:45:90:22:8d:0f:2d:d8:17:11:db:13:23:cb:2d:4b:
         4c:0b:22:f5:42:b2:67:b2:63:83:db:3b:8a:01:67:43:0b:4e:
         ff:e7:40:a8:4d:71:0a:00:64:e5:54:be:f5:46:4f:b2:a2:3f:
         33:ea:d3:9b:9e:9d:7f:2e:fa:62:62:38:b4:b6:e2:2d:1e:36:
         e1:78:3f:d2:6d:41:7b:c8:a6:8a:7e:00:c8:c7:b6:ff:a7:78:
         98:53:d5:67:42:7d:05:3f:41:80:2f:dc:89:a1:da:35:4d:e5:
         eb:ba:b1:04:da:cf:e2:4e:17:98:ef:85:8a:86:0a:7d:16:dd:
         0f:73:93:db:a6:24:a3:29:05:0e:bd:ea:79:62:45:74:f1:18:
         02:73:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:47:52 2026 by rpki-client