Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132342e302f32332d3233203d3e2037393038.roa
File:                     3230302e34372e3132342e302f32332d3233203d3e2037393038.roa (raw, json)
Hash identifier:          3bZV15z0NcdwcLxUSiEpD01FEZBclvSLh1HK+sTEnAs=
Subject key identifier:   E3:AF:BD:E3:71:55:1D:46:AB:F7:AC:3B:92:ED:C4:11:F3:1A:F1:00
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       6BD92D2A3840387ADB113E5CC29B4405957498F2
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132342e302f32332d3233203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:10 +0000
ROA not before:           Wed 29 Apr 2026 13:55:10 +0000
ROA not after:            Wed 28 Apr 2027 14:00:10 +0000
asID:                     7908
IP address blocks:        200.47.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d9:2d:2a:38:40:38:7a:db:11:3e:5c:c2:9b:44:05:95:74:98:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:10 2026 GMT
            Not After : Apr 28 14:00:10 2027 GMT
        Subject: CN=E3AFBDE371551D46ABF7AC3B92EDC411F31AF100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:a0:dc:25:ca:ac:76:82:ff:77:05:8e:68:
                    b1:48:74:30:1e:a1:9e:ee:45:19:ce:41:d2:92:7d:
                    35:bc:33:88:48:35:91:b2:ea:32:c1:3b:c6:2a:5e:
                    29:5a:56:9b:24:2a:ae:52:3b:10:68:8b:f1:59:ca:
                    39:7a:60:d4:96:45:02:66:06:07:3d:75:4e:32:df:
                    c4:29:1f:f4:55:63:c3:ac:05:f1:e2:0d:f0:a5:db:
                    6a:4a:8a:54:74:20:92:64:d0:f6:ba:87:bb:a4:7e:
                    ae:d2:e3:26:2f:34:ca:0e:c4:74:8b:10:71:71:35:
                    e3:5d:be:55:12:05:60:84:ff:dd:f1:70:45:00:0a:
                    b0:c7:e6:bf:2b:b2:d6:74:56:88:a5:01:55:df:4b:
                    d4:9e:64:c0:3b:6d:a8:0a:e2:d3:6e:2d:02:88:35:
                    d7:48:d3:ee:cb:54:59:43:43:98:d7:2a:65:66:74:
                    09:e4:2d:19:aa:a4:56:77:bc:bc:39:b9:d9:76:26:
                    c2:f7:e7:8a:24:a1:73:64:57:45:69:67:93:7c:84:
                    10:da:23:2e:cb:74:ef:14:7e:88:f8:d4:71:26:9f:
                    e1:c5:2b:db:91:ba:a9:d6:a0:16:e5:61:df:aa:f9:
                    66:78:ca:95:a3:14:24:ea:22:a8:42:61:fe:12:6e:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AF:BD:E3:71:55:1D:46:AB:F7:AC:3B:92:ED:C4:11:F3:1A:F1:00
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132342e302f32332d3233203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:18:8c:44:b2:c6:f5:de:0f:f5:80:f2:ed:02:17:55:f6:95:
         1e:0c:78:4f:60:18:6d:bb:6d:18:dd:a5:38:3d:16:f8:d4:f4:
         32:c4:35:3c:3f:e9:10:cd:6c:63:4c:f7:18:63:a6:72:3e:27:
         d9:f3:d9:ce:03:85:9a:3d:87:24:17:43:8b:d2:b0:63:43:71:
         55:c8:2c:2c:cc:0e:f0:ca:d2:2e:c5:5e:fd:2f:d4:f9:92:9e:
         ba:ba:c2:ba:21:a4:b5:1d:ba:13:2a:a1:0f:b3:0c:17:49:e3:
         c3:3f:6c:e9:88:50:60:31:29:b3:e9:9c:b2:5f:43:ab:85:65:
         19:26:22:f1:3c:5c:ed:b8:1b:5d:41:e9:f9:62:81:5a:97:04:
         96:3b:d6:15:a1:a7:b3:7b:42:f8:b9:3b:d8:dd:f2:9d:e2:c3:
         08:72:a1:89:bf:d4:9a:2a:02:0d:85:1a:02:a8:34:1a:53:ab:
         5a:28:b8:02:87:bb:30:60:00:d1:83:fb:be:76:46:d8:a5:12:
         e1:9c:ee:0f:c8:69:ed:8b:e3:f8:54:e1:27:81:c5:e6:fe:16:
         e8:80:8d:35:6f:c3:55:11:37:78:03:2a:39:da:d3:d7:45:43:
         8e:3e:4c:7b:5c:bb:c0:a2:b1:b8:ed:d9:f4:a5:4d:5b:29:9a:
         72:eb:6c:b1
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUa9ktKjhAOHrbET5cwptEBZV0mPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNjA0MjkxMzU1MTBaFw0yNzA0MjgxNDAwMTBaMDMxMTAvBgNV
BAMTKEUzQUZCREUzNzE1NTFENDZBQkY3QUMzQjkyRURDNDExRjMxQUYxMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVm6DcJcqsdoL/dwWOaLFIdDAe
oZ7uRRnOQdKSfTW8M4hINZGy6jLBO8YqXilaVpskKq5SOxBoi/FZyjl6YNSWRQJm
Bgc9dU4y38QpH/RVY8OsBfHiDfCl22pKilR0IJJk0Pa6h7ukfq7S4yYvNMoOxHSL
EHFxNeNdvlUSBWCE/93xcEUACrDH5r8rstZ0VoilAVXfS9SeZMA7bagK4tNuLQKI
NddI0+7LVFlDQ5jXKmVmdAnkLRmqpFZ3vLw5udl2JsL354okoXNkV0VpZ5N8hBDa
Iy7LdO8Ufoj41HEmn+HFK9uRuqnWoBblYd+q+WZ4ypWjFCTqIqhCYf4SbveBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU46+943FVHUar96w7ku3EEfMa8QAwHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzEzMjM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzczOTMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIL3wwDQYJ
KoZIhvcNAQELBQADggEBAJAYjESyxvXeD/WA8u0CF1X2lR4MeE9gGG27bRjdpTg9
FvjU9DLENTw/6RDNbGNM9xhjpnI+J9nz2c4DhZo9hyQXQ4vSsGNDcVXILCzMDvDK
0i7FXv0v1PmSnrq6wrohpLUduhMqoQ+zDBdJ48M/bOmIUGAxKbPpnLJfQ6uFZRkm
IvE8XO24G11B6fligVqXBJY71hWhp7N7Qvi5O9jd8p3iwwhyoYm/1JoqAg2FGgKo
NBpTq1oouAKHuzBgANGD+752RtilEuGc7g/Iae2L4/hU4SeBxeb+FuiAjTVvw1UR
N3gDKjna09dFQ44+THtcu8Cisbjt2fSlTVspmnLrbLE=
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:02 2026 by rpki-client