Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3136382e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e3136382e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          yFW6A1RqReSGOpwLSUd7frYgd9RwWQCudB6etUp+3YI=
Subject key identifier:   0D:9F:41:E2:2B:A6:A0:F1:5F:4E:E3:CE:39:63:63:A6:FE:E8:57:6E
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       041B0953E2846E490E1317789700C0C72DFB561B
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3136382e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:18 +0000
ROA not before:           Wed 29 Apr 2026 13:55:18 +0000
ROA not after:            Wed 28 Apr 2027 14:00:18 +0000
asID:                     7908
IP address blocks:        200.47.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1b:09:53:e2:84:6e:49:0e:13:17:78:97:00:c0:c7:2d:fb:56:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:18 2026 GMT
            Not After : Apr 28 14:00:18 2027 GMT
        Subject: CN=0D9F41E22BA6A0F15F4EE3CE396363A6FEE8576E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:d5:e4:35:36:33:73:03:df:83:20:6f:29:
                    4d:b4:a7:f5:68:0f:ff:0a:5c:75:0f:b4:b0:5e:5b:
                    fb:71:f6:d1:bd:cc:83:8a:c6:9a:91:59:79:56:a4:
                    20:66:d4:c3:27:68:3d:8c:25:30:3e:50:dc:60:75:
                    4c:29:03:60:c2:41:77:ad:c8:1c:6a:a1:fb:bd:5a:
                    6b:af:19:8e:4a:7c:ae:3e:87:19:a3:14:81:cd:53:
                    0b:4a:db:38:1c:82:ed:ca:a2:47:0b:f3:dc:ce:67:
                    5b:d8:c2:a3:83:d2:c1:77:a0:f2:82:6b:e3:28:18:
                    87:67:08:ab:b9:7f:d3:43:ea:3a:fa:a1:05:09:da:
                    23:72:dc:d8:cf:0e:61:43:5f:7b:92:ba:20:fb:86:
                    67:ed:e2:fb:1f:6b:ac:6d:c8:7b:65:65:de:7c:55:
                    c0:24:c7:23:00:21:fc:ff:33:c3:83:8b:3d:26:b8:
                    ac:ce:a1:88:91:d6:89:c1:75:2c:b3:51:4e:a9:23:
                    5c:9c:b0:f9:60:dc:50:f5:89:8d:c6:b1:35:37:ca:
                    58:bb:12:5d:b2:11:ed:f1:6b:fe:ab:15:0e:cb:39:
                    db:f0:d1:16:73:11:9d:13:e2:72:67:b8:38:5d:10:
                    51:08:6b:5a:c5:52:50:5c:e8:3e:e3:aa:63:67:5d:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:41:E2:2B:A6:A0:F1:5F:4E:E3:CE:39:63:63:A6:FE:E8:57:6E
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3136382e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:58:f2:89:6f:8f:c0:41:22:98:15:d8:39:18:6a:2b:91:fd:
         bf:57:48:a0:f4:e6:87:56:22:c4:05:8d:a5:26:bb:cc:61:b0:
         d9:91:84:e3:8d:da:7d:3c:50:e9:4e:93:42:03:9e:c4:dd:33:
         d8:c0:a6:3c:56:03:1a:03:b9:de:5e:44:57:3a:00:52:3a:8d:
         ee:02:2a:85:8e:b9:23:7d:26:c4:76:b6:ed:2a:99:18:8f:65:
         26:d6:0d:ec:27:5f:d8:fb:73:1e:06:29:11:79:51:74:10:63:
         55:42:c1:73:e5:6b:7b:a3:ba:89:62:a8:ec:50:62:33:aa:7c:
         34:81:a6:a1:19:f0:02:4d:3b:81:7d:94:c2:37:42:12:e2:f8:
         2b:ab:bc:df:1c:12:3a:0e:72:e8:f4:cf:7a:c3:9f:9f:57:b7:
         25:4b:83:f4:50:4c:3a:7e:3e:c5:eb:29:75:62:28:db:81:86:
         4a:01:65:97:a2:43:33:9f:6d:ca:ad:4c:b9:6b:3e:4e:71:0b:
         38:d3:e0:c1:68:4e:2c:88:10:1a:14:b5:e6:51:d1:6f:ab:b1:
         94:ef:a8:26:bb:83:e8:87:5b:4f:36:f2:81:67:19:a2:2e:43:
         e9:16:4b:e6:d2:66:3e:e9:3f:82:e7:2a:1f:d8:0d:68:72:1c:
         b3:2c:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:29 2026 by rpki-client