Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3136332e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3136332e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          3lMTAReeQ02lj+2BrREoiUhBZT1RtCcfOvVMneswHHY=
Subject key identifier:   1B:D7:AD:DC:00:DE:1B:83:8B:47:0F:4F:A9:48:25:BE:49:CC:28:B9
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       251E6C6FA4072EDBBAF2F4C7412C81EDADE80F3D
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3136332e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:19 +0000
ROA not before:           Wed 29 Apr 2026 13:55:19 +0000
ROA not after:            Wed 28 Apr 2027 14:00:19 +0000
asID:                     7908
IP address blocks:        200.47.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1e:6c:6f:a4:07:2e:db:ba:f2:f4:c7:41:2c:81:ed:ad:e8:0f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:19 2026 GMT
            Not After : Apr 28 14:00:19 2027 GMT
        Subject: CN=1BD7ADDC00DE1B838B470F4FA94825BE49CC28B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:51:f9:79:11:14:c7:11:fd:b7:27:d7:46:
                    f7:6c:ea:47:91:25:d4:c2:58:3b:72:6e:36:27:5b:
                    82:b0:cc:25:39:ce:34:61:c8:db:21:f6:cc:6f:1c:
                    b8:af:36:7c:b6:25:37:c7:1a:43:a7:c7:8a:ab:90:
                    e1:a5:ec:58:67:09:76:b3:62:8f:fe:11:8e:4f:4b:
                    b7:e5:34:ca:40:36:80:3d:ab:50:ee:0a:21:de:3b:
                    be:71:fa:10:92:6e:77:7c:02:10:3a:9b:95:a1:f8:
                    f7:7a:09:ec:c2:9e:0f:1c:ed:6f:85:ed:4e:59:98:
                    6b:89:75:18:0d:ac:69:93:fc:cd:3c:2b:36:76:bf:
                    a2:dd:21:c1:78:de:83:6a:64:d8:94:11:c5:51:24:
                    b1:b7:d6:11:8e:33:c3:88:02:f4:d7:eb:3d:ca:03:
                    91:38:a8:fa:32:58:de:39:18:5b:58:d4:98:a7:7d:
                    bf:95:20:c8:e5:3f:fb:93:b3:b4:6a:8a:6e:7d:bc:
                    1a:85:85:46:f2:bf:d0:b1:0c:ce:a5:5f:24:58:4c:
                    6d:9d:c3:00:d2:55:4e:dd:1b:e3:a1:3e:78:ff:5b:
                    f2:44:62:b1:1d:31:8a:ca:c5:45:01:ca:3e:6a:23:
                    af:ed:44:8e:0b:5b:2e:ac:4d:bc:92:89:3a:9e:56:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D7:AD:DC:00:DE:1B:83:8B:47:0F:4F:A9:48:25:BE:49:CC:28:B9
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3136332e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c7:ce:90:62:c9:4f:b8:82:ad:00:ac:64:ed:e7:80:a3:64:
         ea:ec:f4:7c:74:70:f5:27:6c:36:5c:c9:9d:79:f3:17:2f:72:
         66:c3:b3:d5:2a:b4:9e:a8:81:31:ef:c5:71:30:20:c8:4d:a9:
         40:87:cc:89:19:94:91:22:6e:c9:a5:61:e0:23:33:01:2c:c7:
         5a:84:cf:33:ff:3a:d4:58:45:dd:2d:46:fd:7a:43:d8:d5:48:
         d6:ab:bf:9a:c0:63:0e:e1:78:6d:fb:88:d3:15:ac:8b:f6:01:
         1f:2d:10:48:c8:2a:5a:42:df:78:5d:28:44:ab:89:5b:4e:dd:
         1a:ae:0a:a0:ab:b4:7c:bf:09:f1:05:6b:c7:59:4a:74:1c:f9:
         9e:8e:1e:c7:65:52:4e:45:7a:ca:6b:29:a0:4b:39:1f:e5:5e:
         00:e6:4e:95:03:45:f1:3c:8f:0b:d8:94:8c:ad:b8:41:a0:f4:
         93:15:df:f5:30:dd:1c:9d:c8:59:56:5e:b5:54:a7:65:28:b7:
         32:12:c7:02:66:15:f7:00:f3:d8:cf:6b:23:62:1c:36:71:b8:
         ef:78:ab:27:bb:61:d6:ba:40:1f:48:86:6b:44:76:75:f2:a2:
         b3:8d:32:74:ff:cd:b4:e5:14:94:17:93:9d:fe:44:31:5a:69:
         51:f6:b6:35
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJR5sb6QHLtu68vTHQSyB7a3oDz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNjA0MjkxMzU1MTlaFw0yNzA0MjgxNDAwMTlaMDMxMTAvBgNV
BAMTKDFCRDdBRERDMDBERTFCODM4QjQ3MEY0RkE5NDgyNUJFNDlDQzI4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZ1H5eREUxxH9tyfXRvds6keR
JdTCWDtybjYnW4KwzCU5zjRhyNsh9sxvHLivNny2JTfHGkOnx4qrkOGl7FhnCXaz
Yo/+EY5PS7flNMpANoA9q1DuCiHeO75x+hCSbnd8AhA6m5Wh+Pd6CezCng8c7W+F
7U5ZmGuJdRgNrGmT/M08KzZ2v6LdIcF43oNqZNiUEcVRJLG31hGOM8OIAvTX6z3K
A5E4qPoyWN45GFtY1Jinfb+VIMjlP/uTs7Rqim59vBqFhUbyv9CxDM6lXyRYTG2d
wwDSVU7dG+OhPnj/W/JEYrEdMYrKxUUByj5qI6/tRI4LWy6sTbySiTqeVoFDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUG9et3ADeG4OLRw9PqUglvknMKLkwHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzEzNjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczOTMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIL6MwDQYJ
KoZIhvcNAQELBQADggEBAAHHzpBiyU+4gq0ArGTt54CjZOrs9Hx0cPUnbDZcyZ15
8xcvcmbDs9UqtJ6ogTHvxXEwIMhNqUCHzIkZlJEibsmlYeAjMwEsx1qEzzP/OtRY
Rd0tRv16Q9jVSNarv5rAYw7heG37iNMVrIv2AR8tEEjIKlpC33hdKESriVtO3Rqu
CqCrtHy/CfEFa8dZSnQc+Z6OHsdlUk5FesprKaBLOR/lXgDmTpUDRfE8jwvYlIyt
uEGg9JMV3/Uw3RydyFlWXrVUp2UotzISxwJmFfcA89jPayNiHDZxuO94qye7Yda6
QB9IhmtEdnXyorONMnT/zbTlFJQXk53+RDFaaVH2tjU=
-----END CERTIFICATE-----
Generated at Wed May 13 18:04:04 2026 by rpki-client