Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3131362e302f32332d3233203d3e2037393038.roa
File:                     3230302e34372e3131362e302f32332d3233203d3e2037393038.roa (raw, json)
Hash identifier:          AuzhD9e1Vvfv0DwiOitVowTn6+6U1IPrK4RUmUaygZ0=
Subject key identifier:   42:69:8D:DC:D7:E9:76:BB:9F:CF:80:16:E8:C8:41:DB:40:DD:E9:6F
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       7B2BC0FEE00B1F67C19AB549F31254EF26B74278
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3131362e302f32332d3233203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:15 +0000
ROA not before:           Wed 29 Apr 2026 13:55:15 +0000
ROA not after:            Wed 28 Apr 2027 14:00:15 +0000
asID:                     7908
IP address blocks:        200.47.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2b:c0:fe:e0:0b:1f:67:c1:9a:b5:49:f3:12:54:ef:26:b7:42:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:15 2026 GMT
            Not After : Apr 28 14:00:15 2027 GMT
        Subject: CN=42698DDCD7E976BB9FCF8016E8C841DB40DDE96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:19:bf:a4:b5:9b:1c:96:aa:21:79:28:5c:
                    b2:b0:84:b8:4e:cc:b0:fc:50:8b:47:45:79:2a:ca:
                    f6:a7:9d:a8:d4:45:b9:d2:0c:de:43:eb:14:cd:03:
                    fd:d4:95:08:91:da:14:2b:cf:2f:f0:fd:a7:59:9f:
                    e5:34:81:0f:fc:b2:33:38:c9:80:a1:ca:30:ab:12:
                    c5:2e:07:05:40:7e:aa:42:9c:cb:0a:23:eb:a2:53:
                    bd:c0:ff:cf:9f:17:08:10:7b:c1:c4:7f:d3:53:9e:
                    07:89:d8:28:e7:99:c2:4a:1f:be:1a:8f:d5:00:d5:
                    d5:20:c4:27:44:c5:a6:70:ea:94:4a:b1:33:2c:1c:
                    8f:6d:d9:a4:43:db:83:fe:41:38:0a:7b:1d:55:07:
                    64:bc:aa:b2:3b:32:e3:b7:6a:33:cd:c7:71:ad:2d:
                    57:b7:d6:13:be:d5:22:99:93:09:df:dc:ed:74:ac:
                    83:fe:fc:38:a2:3c:1d:3e:f2:1a:b5:fe:44:0c:ad:
                    0f:e0:2a:e0:c9:80:fc:31:fb:48:9c:d1:10:46:ae:
                    1b:26:6b:20:1b:b8:a0:02:49:c6:9f:cc:f8:3e:af:
                    40:ee:d5:7e:43:76:77:e7:17:d9:c8:ca:b7:03:92:
                    82:0d:39:1b:61:5d:cb:8f:c9:56:64:72:29:91:25:
                    42:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:69:8D:DC:D7:E9:76:BB:9F:CF:80:16:E8:C8:41:DB:40:DD:E9:6F
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3131362e302f32332d3233203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:6a:fe:0e:7d:16:34:0f:70:84:92:ad:1e:f1:71:18:95:22:
         b2:d1:8e:4c:86:54:54:28:24:1a:2f:ab:cf:bc:e9:9c:83:23:
         87:99:be:64:35:bf:e5:9e:b2:7c:a7:c6:a7:fd:6d:f4:35:d3:
         0b:c1:60:f1:70:42:35:2e:bb:9f:41:b5:44:f5:86:a9:b0:d6:
         f6:91:66:de:e6:66:b9:31:8d:bb:29:8f:3c:33:7a:ca:8b:0a:
         57:44:89:ca:35:82:2d:da:ee:28:27:db:b7:51:b6:b7:f4:40:
         ef:dc:99:0e:0e:0c:5f:57:25:ec:1f:ed:44:f6:7b:3b:15:73:
         5e:6c:ec:45:f3:7e:80:da:99:41:90:b2:33:eb:a7:4c:7f:28:
         be:16:77:ea:b6:9e:ed:8d:6e:de:ea:da:fe:81:2d:83:12:63:
         c5:2d:c5:13:79:61:0a:03:92:82:55:ff:33:d3:58:da:10:56:
         78:93:3c:20:3d:6a:dd:0a:4e:1f:69:60:4f:66:82:23:5a:99:
         99:b0:96:f4:5e:5e:f9:b1:cd:fa:9b:db:ee:ed:8d:25:7a:01:
         d7:ca:1a:70:17:61:bd:d5:26:a4:02:eb:ca:8a:99:63:a2:b3:
         45:db:fd:26:0a:0d:8c:6d:28:c2:90:bd:0c:ff:2c:c2:44:7b:
         9f:2b:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:46 2026 by rpki-client