Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132372e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3132372e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          znAHmWN5i5o/qPrMumCA/t3EC1oq9ZVJBSDwQppHm0g=
Subject key identifier:   C8:16:20:A2:63:E5:AE:9B:0D:1A:4D:32:2E:98:E9:E7:AC:90:5A:2E
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       3885C202AA1EC73CBDE8C8AB9E0BF4BC2F348EBD
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132372e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:10 +0000
ROA not before:           Wed 29 Apr 2026 13:55:10 +0000
ROA not after:            Wed 28 Apr 2027 14:00:10 +0000
asID:                     7908
IP address blocks:        200.47.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:85:c2:02:aa:1e:c7:3c:bd:e8:c8:ab:9e:0b:f4:bc:2f:34:8e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:10 2026 GMT
            Not After : Apr 28 14:00:10 2027 GMT
        Subject: CN=C81620A263E5AE9B0D1A4D322E98E9E7AC905A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:e7:d0:26:e5:9a:a9:76:96:ae:77:ac:08:
                    f2:46:18:49:ac:99:fc:cb:d5:60:6b:cb:a2:b3:6d:
                    55:49:74:53:90:24:19:35:c1:f0:b7:e4:01:e9:aa:
                    6c:64:96:2b:6e:e7:7e:e7:d4:da:10:dd:54:3b:69:
                    41:15:0b:36:52:9a:d3:3b:dc:bf:2a:0b:36:e9:ee:
                    a4:a6:c5:31:2b:ef:a5:7e:f5:b6:8f:30:5b:97:16:
                    4e:96:b4:51:27:45:b5:68:e2:34:15:25:33:11:aa:
                    68:81:46:7d:c1:2b:af:6b:b8:77:72:93:78:1b:81:
                    e2:83:61:ca:29:41:b5:e4:d6:49:3e:ca:98:5b:8d:
                    4d:22:0e:83:1c:8d:0e:a5:68:0b:c7:50:93:64:a1:
                    ba:15:32:d9:39:b4:ac:f4:e3:50:03:78:12:39:5e:
                    47:30:17:b4:bc:01:05:88:43:02:d2:4f:fb:20:2b:
                    e3:ca:cf:72:89:75:04:ae:f9:26:9b:5d:b5:f9:86:
                    db:15:c7:bd:02:6b:dc:6f:3d:51:55:fc:23:e8:74:
                    e2:3e:7e:27:e2:50:1f:ae:15:d1:c1:13:51:b2:04:
                    87:ec:89:5a:c9:2f:9b:ef:21:04:2c:e4:e7:60:be:
                    6f:e3:d4:59:99:72:bd:3e:99:bf:ac:72:ab:5e:7c:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:20:A2:63:E5:AE:9B:0D:1A:4D:32:2E:98:E9:E7:AC:90:5A:2E
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132372e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:95:b3:bf:49:25:54:c9:6d:84:38:b0:52:59:1a:c9:0e:
         66:c6:fb:ff:e6:19:63:10:5e:68:1c:a3:e5:49:ad:66:4b:e4:
         08:50:ca:52:48:c6:98:5a:13:88:84:48:23:6b:a1:4d:5c:b5:
         8b:16:f0:00:1f:d9:c7:72:f1:d5:ca:fd:dd:f5:3f:44:03:af:
         f8:9e:7c:32:0b:91:61:5c:13:cf:df:7d:00:3c:dd:0c:99:1e:
         ce:6a:89:c3:55:64:57:ab:4f:8f:3c:65:78:a8:a1:b2:ba:2b:
         44:97:db:84:f6:02:11:44:85:b3:b3:4f:2d:85:87:1e:1a:12:
         7e:9d:c1:98:33:46:2b:ce:f1:b3:7d:3c:92:b7:4a:e0:45:48:
         6b:f6:ea:f2:33:80:dd:07:c3:68:9c:8c:4f:34:d0:45:6e:66:
         aa:32:c7:c8:f3:59:d7:95:94:40:d3:a0:c6:b3:60:1f:20:be:
         e2:b9:c2:eb:75:75:71:df:73:95:4a:11:64:b1:20:20:9d:8f:
         e3:64:a0:62:1d:17:a6:5c:3c:b0:6c:c7:5c:e5:4a:32:d3:93:
         8f:11:18:b2:37:e4:66:48:a9:6b:1a:50:18:5d:94:b0:d7:ab:
         41:47:58:e4:66:6f:10:49:09:20:5a:4a:6e:df:2a:3f:bb:f4:
         7f:6e:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:41 2026 by rpki-client