Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130382e302f32322d3232203d3e2037393038.roa
File:                     3230302e34372e3130382e302f32322d3232203d3e2037393038.roa (raw, json)
Hash identifier:          YZgglOxyKuJEPsDRlphO9WcxVr+tuqgJgz/lRbM77C0=
Subject key identifier:   C3:CC:9D:A0:31:77:D5:CC:29:75:83:DD:3A:D9:8B:B0:A5:75:53:39
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       6B4A5507712EAC8B620A160E9D7BB1CB17FF93E8
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130382e302f32322d3232203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:05 +0000
ROA not before:           Wed 29 Apr 2026 13:55:05 +0000
ROA not after:            Wed 28 Apr 2027 14:00:05 +0000
asID:                     7908
IP address blocks:        200.47.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4a:55:07:71:2e:ac:8b:62:0a:16:0e:9d:7b:b1:cb:17:ff:93:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:05 2026 GMT
            Not After : Apr 28 14:00:05 2027 GMT
        Subject: CN=C3CC9DA03177D5CC297583DD3AD98BB0A5755339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:d7:e7:03:6b:b6:d1:14:2b:10:7e:86:ee:
                    0a:7b:0d:b6:8a:99:c1:47:5d:4c:59:37:17:b6:33:
                    82:45:1f:45:fc:b7:78:57:ab:5c:85:b8:0e:dc:8d:
                    4f:c7:da:25:bb:17:ae:11:48:02:e1:91:b0:f9:91:
                    b8:8d:07:65:47:9f:57:a2:09:13:97:70:c1:fb:aa:
                    31:86:eb:16:72:97:65:6e:7f:e4:63:4e:3a:a9:8c:
                    5a:52:48:41:32:85:b0:96:c4:fa:ac:6d:04:49:95:
                    1f:af:1e:e8:6b:9d:b1:d9:d6:03:d1:31:db:0f:57:
                    d1:f4:7b:66:2b:3f:49:02:cd:ce:d1:6b:0c:74:e3:
                    93:9c:2d:ad:fa:b1:17:ed:09:03:b8:c4:0f:8c:63:
                    89:42:38:16:38:3a:d8:e9:46:af:e1:b3:f2:a5:1f:
                    e9:0a:2a:2d:f4:52:c6:1b:5a:a5:24:0e:19:71:bc:
                    f3:11:bf:f7:64:28:d1:1d:7f:a6:a1:68:31:d6:a3:
                    db:96:ab:77:76:9d:e5:e5:69:b5:c8:e6:2e:04:0a:
                    99:13:0a:16:ee:bf:0f:95:99:3d:38:68:9a:74:8a:
                    8a:8c:3e:02:38:ef:0f:73:22:65:46:5c:4e:d6:74:
                    97:f6:30:b5:79:cb:bc:81:ec:cc:a6:e1:8b:3a:bd:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CC:9D:A0:31:77:D5:CC:29:75:83:DD:3A:D9:8B:B0:A5:75:53:39
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130382e302f32322d3232203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:39:ed:ce:10:22:78:f9:18:30:6a:bf:51:5f:4b:18:78:65:
         cf:2a:1e:14:42:88:a9:7a:34:f3:71:91:c0:8a:f6:98:34:b9:
         45:a4:72:67:31:f2:f4:9d:17:a7:8f:a3:c0:dd:6d:26:8e:a8:
         07:79:27:a7:b8:df:d7:84:ac:ee:d3:3e:d8:dc:05:49:8a:0c:
         e1:f7:dd:48:16:16:f2:cb:98:84:08:52:95:37:2e:ea:bc:54:
         17:a5:6c:d6:19:1c:86:8c:ff:5e:86:78:5e:07:c9:f8:d6:24:
         16:3e:bd:ce:d8:98:6b:5f:f1:a6:6a:74:99:95:d0:a6:6d:91:
         5e:45:92:c8:de:91:87:0f:72:83:61:47:80:f9:81:08:8e:e5:
         c8:35:49:9b:05:66:5a:82:49:db:69:25:73:54:38:45:c5:b4:
         7e:bc:95:8a:f5:4e:98:4d:c2:da:75:87:d0:46:50:fa:27:0b:
         3b:a4:10:ba:c3:11:d0:68:f8:42:31:91:12:b4:89:38:f6:cb:
         f1:80:f6:99:c2:34:00:95:c6:f0:48:79:0e:28:bd:84:fe:49:
         ef:41:f5:72:44:fc:cc:e5:a2:89:e5:39:6f:f8:b1:a5:4d:f6:
         70:7e:75:65:93:23:eb:3b:8a:4e:85:4c:e9:ab:d4:95:bf:27:
         0e:fe:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:23 2026 by rpki-client