Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130392e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3130392e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          fo8HqDzRcqGRu6jLx/rcCRWzOg5h+Vl01qgaTw5JUio=
Subject key identifier:   14:FE:3F:44:31:57:BC:62:6F:31:A5:D7:89:74:0A:E9:47:72:B3:3D
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       1C4515585C8E18AC71F578DC1A57AD3FFB2F6B65
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130392e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:19 +0000
ROA not before:           Wed 29 Apr 2026 13:55:19 +0000
ROA not after:            Wed 28 Apr 2027 14:00:19 +0000
asID:                     7908
IP address blocks:        200.47.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:45:15:58:5c:8e:18:ac:71:f5:78:dc:1a:57:ad:3f:fb:2f:6b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:19 2026 GMT
            Not After : Apr 28 14:00:19 2027 GMT
        Subject: CN=14FE3F443157BC626F31A5D789740AE94772B33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:2b:b9:f4:1f:08:23:76:ef:50:eb:b4:2e:
                    e7:f8:8c:54:2c:bb:dd:94:29:fd:4c:92:31:65:61:
                    91:64:71:6f:7f:39:55:43:c1:50:75:d0:77:7d:ce:
                    db:ec:66:e0:1e:e6:5d:dd:07:43:a9:f0:1b:f4:bc:
                    3b:b1:6d:55:b1:e0:cf:49:42:35:ea:8d:b1:03:c0:
                    a0:5b:2a:56:57:d3:f6:62:6a:9a:8c:b3:0c:6d:b7:
                    d3:5f:bb:4d:40:b4:ea:0c:69:0f:4f:69:3f:f1:0c:
                    c8:c0:32:76:80:55:75:79:b2:d2:20:e3:04:cf:03:
                    83:4d:69:39:2b:18:34:ec:30:28:e2:87:ab:c1:ac:
                    9d:3d:32:16:4a:a9:2e:51:0b:e8:df:ce:00:be:b0:
                    37:27:11:be:db:1c:7b:30:ae:66:2a:f9:14:06:fb:
                    23:b4:e9:1b:de:0a:e0:f7:5f:ae:5b:d9:ab:79:ef:
                    41:f5:96:46:58:a9:59:81:51:e9:7f:a9:1a:e7:16:
                    b1:a0:a7:ea:34:b7:7c:7e:96:a0:ce:6d:21:82:f1:
                    b0:0e:43:d4:59:fc:ee:39:c3:b2:e4:16:b3:e6:65:
                    0e:12:58:3e:ff:59:6c:b1:7b:de:c2:96:cc:21:30:
                    0f:98:50:8a:f6:db:dc:fe:1d:50:1a:d8:5d:7c:45:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FE:3F:44:31:57:BC:62:6F:31:A5:D7:89:74:0A:E9:47:72:B3:3D
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3130392e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:57:f7:b4:d9:71:9c:e0:99:d0:88:35:ce:41:fb:cd:47:e6:
         11:a7:fb:5b:4c:cf:65:57:7b:9d:f0:76:ef:6d:2d:58:c8:31:
         72:0c:e9:db:2d:eb:b9:a6:a2:28:ce:9e:5e:c2:95:64:46:8b:
         18:74:13:14:59:56:75:8b:14:7a:9e:58:52:ec:f8:6d:ee:8e:
         89:17:3a:c5:b6:73:47:b7:d1:ad:9a:2a:55:de:4f:e3:20:26:
         04:ee:6b:78:3b:fc:f2:b0:19:31:ea:73:8b:38:bd:42:bc:ab:
         97:b4:46:ef:83:ad:11:9d:01:10:87:8a:fe:46:01:4b:f8:cc:
         bb:3e:77:98:9f:99:ca:89:7d:88:57:37:e5:a4:0d:6c:1e:ee:
         9d:52:a8:92:28:2e:5b:1d:98:7f:47:de:da:89:a4:db:ca:e4:
         29:e5:ae:41:70:31:50:48:19:d8:6c:11:9e:59:33:d6:8a:74:
         fc:07:3c:31:35:62:3d:a0:66:c3:ee:a9:9f:f1:f9:5d:08:36:
         e8:3f:24:6e:32:1b:bc:45:d0:b4:27:8d:54:4c:4b:f4:55:c6:
         72:3a:05:03:1c:f2:4f:a7:79:29:4e:75:5d:51:13:57:dd:23:
         ee:e8:85:00:1b:c9:ec:49:71:c5:f2:9b:17:7f:1e:75:17:2a:
         84:55:b9:95
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHEUVWFyOGKxx9XjcGletP/sva2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNjA0MjkxMzU1MTlaFw0yNzA0MjgxNDAwMTlaMDMxMTAvBgNV
BAMTKDE0RkUzRjQ0MzE1N0JDNjI2RjMxQTVENzg5NzQwQUU5NDc3MkIzM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTSu59B8II3bvUOu0Luf4jFQs
u92UKf1MkjFlYZFkcW9/OVVDwVB10Hd9ztvsZuAe5l3dB0Op8Bv0vDuxbVWx4M9J
QjXqjbEDwKBbKlZX0/ZiapqMswxtt9Nfu01AtOoMaQ9PaT/xDMjAMnaAVXV5stIg
4wTPA4NNaTkrGDTsMCjih6vBrJ09MhZKqS5RC+jfzgC+sDcnEb7bHHswrmYq+RQG
+yO06RveCuD3X65b2at570H1lkZYqVmBUel/qRrnFrGgp+o0t3x+lqDObSGC8bAO
Q9RZ/O45w7LkFrPmZQ4SWD7/WWyxe97ClswhMA+YUIr229z+HVAa2F18RQZLAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUFP4/RDFXvGJvMaXXiXQK6Udysz0wHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzEzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczOTMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIL20wDQYJ
KoZIhvcNAQELBQADggEBABRX97TZcZzgmdCINc5B+81H5hGn+1tMz2VXe53wdu9t
LVjIMXIM6dst67mmoijOnl7ClWRGixh0ExRZVnWLFHqeWFLs+G3ujokXOsW2c0e3
0a2aKlXeT+MgJgTua3g7/PKwGTHqc4s4vUK8q5e0Ru+DrRGdARCHiv5GAUv4zLs+
d5ifmcqJfYhXN+WkDWwe7p1SqJIoLlsdmH9H3tqJpNvK5CnlrkFwMVBIGdhsEZ5Z
M9aKdPwHPDE1Yj2gZsPuqZ/x+V0INug/JG4yG7xF0LQnjVRMS/RVxnI6BQMc8k+n
eSlOdV1RE1fdI+7ohQAbyexJccXymxd/HnUXKoRVuZU=
-----END CERTIFICATE-----
Generated at Wed May 13 18:04:05 2026 by rpki-client