Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132382e302f32312d3231203d3e2037393038.roa
File:                     3230302e34372e3132382e302f32312d3231203d3e2037393038.roa (raw, json)
Hash identifier:          9Tgaf73tmyH/qxqHEHTeQeYXtJ4rzTfdVYRjGcVDWj0=
Subject key identifier:   37:65:DD:5E:6A:8F:AF:6C:49:D1:6A:D1:4F:44:35:D2:39:87:A5:B0
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       0E2B83FA2AAA1F8D8A2EAE68B060AED13DEEBB16
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132382e302f32312d3231203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:12 +0000
ROA not before:           Wed 29 Apr 2026 13:55:12 +0000
ROA not after:            Wed 28 Apr 2027 14:00:12 +0000
asID:                     7908
IP address blocks:        200.47.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2b:83:fa:2a:aa:1f:8d:8a:2e:ae:68:b0:60:ae:d1:3d:ee:bb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:12 2026 GMT
            Not After : Apr 28 14:00:12 2027 GMT
        Subject: CN=3765DD5E6A8FAF6C49D16AD14F4435D23987A5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:13:5e:e5:fc:1b:18:38:58:fe:77:cf:66:81:
                    b5:69:d2:97:5a:35:e0:3b:f1:35:3e:3a:a1:fb:19:
                    ea:ab:66:47:f1:c8:70:a1:62:04:ee:c8:dd:fc:a4:
                    19:2a:c6:d8:f3:40:96:f0:c5:e8:f1:80:cf:c0:ce:
                    b4:29:76:6f:fc:4f:b2:bd:bd:b5:16:a5:b0:91:78:
                    09:8e:84:43:c7:07:5b:e4:31:2c:a2:5a:bb:c4:d0:
                    55:dd:89:d6:c1:d8:c1:9b:8a:56:a2:28:03:5a:86:
                    72:6c:d1:8b:3b:00:2f:df:ca:26:e1:c4:98:4d:0a:
                    3c:16:e5:61:e7:ff:4b:a3:a8:14:7d:14:79:9a:8a:
                    96:54:5a:50:e9:1c:4d:c8:28:27:8e:19:ec:e5:a5:
                    06:39:9c:52:f9:57:71:97:2e:c8:55:20:8a:e5:88:
                    ae:03:39:70:24:35:b2:87:12:0a:37:56:10:9f:73:
                    db:89:b7:bf:31:4a:8b:79:5c:9f:82:06:53:0b:06:
                    d0:77:85:21:30:cb:df:46:9a:28:db:3e:ef:9f:d4:
                    24:ea:6c:e2:a7:d9:fb:0b:ed:e7:1a:2f:ee:af:2c:
                    c2:5f:09:c6:e3:c0:63:53:d4:ce:c3:c1:d0:e0:1a:
                    42:8a:9a:60:e0:b7:3e:41:12:9b:bb:c0:6d:ea:73:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:DD:5E:6A:8F:AF:6C:49:D1:6A:D1:4F:44:35:D2:39:87:A5:B0
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3132382e302f32312d3231203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:bb:f6:1f:7c:75:f3:25:44:20:fe:59:53:6a:d4:9d:b1:
         c5:90:a1:75:5e:fd:e4:b2:53:c8:37:8b:46:c6:e1:a1:a1:1b:
         75:f8:98:cf:bd:83:d5:2a:9c:22:fb:fc:71:b0:32:49:b6:66:
         85:6e:d3:93:ea:f7:2b:15:b7:9b:23:ff:0d:ec:79:a8:f5:d0:
         93:19:ac:fd:c1:5c:01:49:d7:b4:6c:1e:f9:50:b9:87:f4:1f:
         15:e4:b9:30:89:8b:40:b9:53:1b:76:80:f2:9c:6d:e6:0c:b8:
         9e:17:90:de:a3:7a:ed:89:6d:c4:43:88:0f:42:3d:e9:2c:54:
         fc:25:0a:cf:fa:6c:aa:6b:ca:9d:4a:fb:65:d5:c0:3e:ab:15:
         f8:87:77:a6:2b:fd:1b:11:46:c1:ca:0a:ab:e9:af:c4:4a:2f:
         b1:48:d6:79:c4:b5:dd:aa:39:06:c0:c0:e8:54:e2:f3:e0:d2:
         be:c0:17:80:82:82:e9:7c:8b:2a:d6:3b:0f:8e:41:35:86:7c:
         d6:ca:e8:a3:2b:df:a5:b4:a4:4a:b3:dd:b2:f2:9b:9e:c4:c3:
         67:9d:81:f0:40:56:62:87:e2:41:e3:ab:4e:04:d1:cd:0a:0d:
         bb:f1:2c:59:f6:eb:55:3b:31:fb:ff:ec:20:5a:d5:bc:49:77:
         6d:f1:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:25 2026 by rpki-client