Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3131352e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3131352e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          NA9eaOopqG8D+Snx8ROKB4bW46jTp2BoMudchndjjAM=
Subject key identifier:   E8:CE:F1:1E:FF:44:75:CE:29:48:C2:42:25:42:43:A1:FE:9E:41:19
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       32CA8BFD2E0F0881527B1C6D17C6E64031A9E0
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3131352e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:16 +0000
ROA not before:           Wed 29 Apr 2026 13:55:16 +0000
ROA not after:            Wed 28 Apr 2027 14:00:16 +0000
asID:                     7908
IP address blocks:        200.47.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ca:8b:fd:2e:0f:08:81:52:7b:1c:6d:17:c6:e6:40:31:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:16 2026 GMT
            Not After : Apr 28 14:00:16 2027 GMT
        Subject: CN=E8CEF11EFF4475CE2948C242254243A1FE9E4119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:44:03:30:dd:1f:14:6e:d1:12:41:86:8c:
                    17:d6:e6:49:ab:de:16:88:36:3e:3e:bc:b2:41:5e:
                    f7:a9:6c:71:be:6e:c1:af:fc:cd:2c:5b:96:64:5f:
                    43:5b:26:04:1f:57:b8:1d:91:09:a9:de:52:cd:98:
                    7f:c1:14:21:28:25:f4:56:ec:00:8c:e8:39:f8:0c:
                    eb:17:af:9b:58:ea:98:44:d5:e4:1b:34:2e:94:7d:
                    c9:4f:71:69:6b:62:7b:ab:2e:71:42:04:4d:5e:e8:
                    56:3f:48:62:1d:93:cf:05:d6:a7:62:8f:ac:9e:d6:
                    bc:e8:af:93:29:bc:59:5e:ce:2a:d8:6a:61:ce:b4:
                    3d:77:89:0d:45:eb:64:d0:ac:fc:93:9e:76:2a:c7:
                    c1:f4:ae:63:7a:1b:8a:b6:ab:86:bf:37:e6:a1:db:
                    74:d5:f4:91:c3:dc:70:61:7b:fd:68:1d:61:72:cd:
                    ec:f4:7c:df:c4:b9:36:db:7d:d0:09:b0:4d:9c:6c:
                    a9:aa:03:7e:d9:cd:a6:58:72:36:39:ae:29:90:87:
                    ec:1e:07:c0:47:17:36:36:e4:47:9c:11:d1:f5:c0:
                    41:c3:73:e9:ff:c3:7c:de:ae:47:20:7d:91:f6:cd:
                    b8:4e:ce:d7:e3:b0:34:43:c0:8d:8c:68:b0:fa:d5:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CE:F1:1E:FF:44:75:CE:29:48:C2:42:25:42:43:A1:FE:9E:41:19
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3131352e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:57:96:77:0b:4b:e0:ff:f3:f8:4d:e6:5b:30:36:81:bb:98:
         89:ce:0b:07:8c:3d:3a:4a:bf:d7:08:c1:85:b6:14:e3:a3:a6:
         64:ec:e7:6a:f2:e1:6b:a2:8e:2c:cc:f1:4b:67:52:6e:c3:20:
         94:8f:7d:b1:3f:36:37:57:60:fa:23:62:56:88:fc:da:61:37:
         26:6d:36:d0:cb:2c:d0:b3:18:3b:77:af:88:12:e1:ff:b4:b4:
         46:15:10:48:fc:cf:0b:b5:8d:21:7a:be:05:12:c5:c8:55:95:
         80:95:70:9d:91:9f:8c:5e:42:36:0c:63:fc:a0:d1:24:8a:c1:
         18:9e:fa:68:59:2e:bc:79:6c:a0:97:8e:4e:da:7a:cb:ca:48:
         59:93:53:42:7c:0d:cd:39:77:8c:72:fb:7b:a1:6c:50:ec:84:
         91:fe:3e:9d:05:ea:a1:ea:10:5e:b0:6d:74:7d:64:6f:73:f6:
         22:17:f5:b7:f9:3b:ae:f6:a5:05:82:d9:5b:27:10:a6:08:0e:
         be:db:24:42:55:b4:46:e3:56:82:48:45:46:2e:4b:a5:d4:76:
         08:d5:27:c6:42:29:c4:45:27:99:cc:50:3b:6a:6f:2d:ec:90:
         d9:17:3f:5d:a3:7f:07:4f:87:d8:07:a3:1c:81:f3:8d:82:ed:
         bc:52:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:06 2026 by rpki-client