Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132362e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3132362e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          l81WrWW3cfY1fpnmxqUmsXcT+ZPOkkcp0oQg6kwi70I=
Subject key identifier:   50:EC:35:E2:FD:4F:59:E7:AC:F3:DF:EC:EE:9C:F8:03:D0:AB:5D:25
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       0AB96E990B9BA86373067DD4535BCA7EDEAFAACC
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132362e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:10 +0000
ROA not before:           Wed 29 Apr 2026 13:55:10 +0000
ROA not after:            Wed 28 Apr 2027 14:00:10 +0000
asID:                     7908
IP address blocks:        200.47.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b9:6e:99:0b:9b:a8:63:73:06:7d:d4:53:5b:ca:7e:de:af:aa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:10 2026 GMT
            Not After : Apr 28 14:00:10 2027 GMT
        Subject: CN=50EC35E2FD4F59E7ACF3DFECEE9CF803D0AB5D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:e8:33:1c:c0:ba:89:b1:84:f5:ce:41:2f:
                    88:f9:48:26:20:eb:1b:46:bc:db:a0:41:9a:14:dd:
                    aa:c9:0b:83:ba:11:9e:2d:0d:21:75:f2:a5:74:4a:
                    84:2f:79:e4:9e:8d:97:9e:27:90:78:e0:e4:21:12:
                    d8:a2:7d:21:f2:d9:ee:40:ea:23:89:aa:04:4b:9d:
                    51:b8:c9:c3:57:91:08:80:18:1d:b5:fc:b6:7f:fb:
                    69:cf:fe:c9:2a:3d:ed:e1:83:b3:62:b8:73:bc:28:
                    32:b1:05:0a:c5:d4:e5:a6:e3:3d:e5:74:37:1e:8d:
                    36:a7:ce:37:99:ca:1a:a7:e8:c5:4c:df:0a:61:48:
                    80:e3:48:ee:9c:43:d4:d7:b0:50:dc:1a:fe:0b:ba:
                    6d:df:ce:dc:e0:5e:7a:6c:31:76:1d:83:ac:08:5e:
                    d4:8f:8c:e9:6b:61:46:52:be:ca:fa:1e:49:6f:0b:
                    1f:45:0b:46:fc:a6:71:43:53:d0:3d:39:8e:8e:a7:
                    46:8b:c9:19:61:3d:c1:83:8c:1a:08:6e:e6:c9:dc:
                    86:5d:ea:33:81:be:66:27:3e:5c:65:5a:ef:0f:0a:
                    1a:9c:fd:d8:5a:86:70:fa:0f:44:1e:11:4a:69:82:
                    26:27:12:96:dc:60:49:2d:78:fb:4c:5e:a5:08:ed:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:35:E2:FD:4F:59:E7:AC:F3:DF:EC:EE:9C:F8:03:D0:AB:5D:25
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132362e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:56:96:21:ef:9c:07:cc:0c:94:55:1f:4a:c7:db:19:da:5d:
         84:23:f0:c3:3b:b4:9a:df:dd:c5:d9:82:cb:f9:6c:ca:bc:83:
         67:9b:18:53:5c:a2:3d:b9:b0:c5:08:d2:31:4c:32:cb:09:ac:
         83:51:7a:57:4e:7f:e4:cf:78:80:1e:ad:a9:35:2d:8b:60:b6:
         9f:4c:6f:13:19:c8:e0:c6:25:52:34:e3:60:ef:b3:10:39:18:
         9a:50:52:84:fb:ea:80:4d:92:43:00:85:55:c6:78:ed:52:c6:
         57:b7:2e:62:ed:f4:2f:7a:d7:16:2d:e8:46:43:3f:d0:1a:8d:
         65:9b:c3:35:c5:6b:48:cd:8a:25:97:7b:36:f0:3b:8d:ec:82:
         f2:8e:4c:98:1a:49:07:33:6c:e7:b2:22:9e:ef:2a:32:ae:42:
         32:19:19:c9:fb:07:8a:3c:90:77:32:e3:86:32:cb:9b:73:4f:
         aa:ea:f9:94:1c:8d:21:1a:32:b2:a4:a0:f9:a1:44:34:3d:86:
         9d:9e:8f:61:47:e5:23:c8:e7:a4:71:26:b4:35:ec:25:bf:56:
         08:89:aa:af:00:c5:48:e9:2f:1f:7a:8d:00:25:25:30:4d:e3:
         ff:e2:58:3c:83:44:55:58:56:70:a3:73:bc:d1:e2:89:a9:ca:
         aa:41:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:03:34 2026 by rpki-client