Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130372e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3130372e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          xqnfa3FnlKelb4qDtln4nQq8vwWwBMQaNh6qTx/QcB8=
Subject key identifier:   E0:3C:51:88:A0:A7:E0:EB:2D:9C:CD:DF:B5:8E:54:31:42:4A:2F:AE
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       6C0D9AA1C76F1BD6E91782DE1E3CED3ACEBC4C2E
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130372e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:09 +0000
ROA not before:           Wed 29 Apr 2026 13:55:09 +0000
ROA not after:            Wed 28 Apr 2027 14:00:09 +0000
asID:                     7908
IP address blocks:        200.47.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:9a:a1:c7:6f:1b:d6:e9:17:82:de:1e:3c:ed:3a:ce:bc:4c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:09 2026 GMT
            Not After : Apr 28 14:00:09 2027 GMT
        Subject: CN=E03C5188A0A7E0EB2D9CCDDFB58E5431424A2FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:9c:7c:f4:e3:19:01:66:16:e4:d9:dd:0a:
                    4b:87:32:31:9e:6a:b0:0a:a4:1c:59:32:cc:c6:e9:
                    dc:ad:99:17:5c:bb:5c:9c:81:9d:b0:ef:67:5d:98:
                    a3:ff:f1:4e:46:42:99:2b:3a:c9:d8:2a:08:85:e5:
                    09:64:08:b4:c8:3d:56:4e:66:fc:1a:bf:7c:0d:94:
                    67:e7:31:d1:f8:9d:6c:d2:76:63:b4:b7:65:23:f4:
                    ac:91:78:7e:f4:fd:4e:9f:97:32:7d:eb:56:a2:6e:
                    f0:11:f8:87:66:7b:e1:c7:81:24:94:a7:2a:94:b8:
                    fd:f7:93:80:ae:f6:47:34:51:bd:10:a4:b0:ff:25:
                    86:58:3f:2a:f1:5e:24:f5:d4:60:a7:8b:a9:0d:6d:
                    95:94:1c:b3:83:01:a3:07:62:aa:0b:82:7e:7b:10:
                    5e:cb:6b:6d:26:d7:f2:c9:0c:d2:54:ab:95:17:25:
                    87:0f:fb:83:87:5a:fe:3f:5e:7e:0f:d8:7e:63:d7:
                    66:74:df:b6:00:83:1e:9e:df:ea:6e:80:cf:6f:87:
                    a9:d0:c6:ac:b6:4a:ff:99:d0:5a:d4:51:79:11:b6:
                    f2:90:0e:16:30:47:41:3c:54:91:3b:a8:ef:2a:a6:
                    0a:e1:7c:b8:cb:cc:b4:ae:e0:a8:ec:a9:87:fb:f0:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3C:51:88:A0:A7:E0:EB:2D:9C:CD:DF:B5:8E:54:31:42:4A:2F:AE
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130372e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a1:f5:5e:c8:0b:26:81:ce:77:24:29:37:4e:8e:78:be:ae:
         1b:f3:3f:bd:85:36:07:62:fb:96:2d:60:a0:a6:3b:f4:41:21:
         24:8d:ba:f2:bc:3b:4d:3c:ac:c2:02:73:bb:95:2a:82:74:ec:
         9d:d5:8d:ba:75:b1:8b:af:0f:f4:28:d3:3c:52:1d:72:ce:d7:
         9a:9b:5b:24:61:ee:0b:a4:5b:1a:ed:96:36:6e:9e:62:57:d4:
         cb:04:d5:a1:2e:da:5d:bb:54:47:ec:5d:be:af:2d:65:d9:59:
         ba:89:4f:79:9f:1f:96:3c:68:5e:ec:4d:12:b4:19:a2:23:f7:
         d2:a4:22:9f:ff:b5:74:5f:a4:a8:95:3b:a1:2e:d9:7c:1c:86:
         8e:db:94:da:16:e3:a1:85:7e:8b:5e:4a:03:d9:5d:0e:1c:a1:
         e6:9a:53:f3:e8:0a:eb:90:f4:35:a5:16:b1:14:9c:54:27:57:
         21:0a:28:8f:d2:ea:0f:1b:8b:f7:54:8d:be:7c:6a:9b:ee:fa:
         32:d3:d4:d7:4f:48:f7:45:ff:50:94:9a:7f:6a:36:56:f0:16:
         59:92:d4:47:6c:be:0b:00:48:0b:12:5d:aa:13:18:5f:6b:f8:
         96:40:77:24:73:2d:6f:1d:88:aa:72:47:6b:ee:85:d4:b8:9c:
         52:b9:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:25 2026 by rpki-client