Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3230302e302f32312d3231203d3e2037393038.roa
File:                     3230302e34372e3230302e302f32312d3231203d3e2037393038.roa (raw, json)
Hash identifier:          nSHxAIoFtgxoubjKi+aF2B0PNFTIH1VM1XXyxvLTCU0=
Subject key identifier:   5F:E7:29:61:44:19:02:A5:C1:5A:A7:B4:6E:8F:A4:30:08:83:59:EE
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       4F54EB56F8EFBEA6A2CBE181143EF39CFF036771
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3230302e302f32312d3231203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:12 +0000
ROA not before:           Wed 29 Apr 2026 13:55:12 +0000
ROA not after:            Wed 28 Apr 2027 14:00:12 +0000
asID:                     7908
IP address blocks:        200.47.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:54:eb:56:f8:ef:be:a6:a2:cb:e1:81:14:3e:f3:9c:ff:03:67:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:12 2026 GMT
            Not After : Apr 28 14:00:12 2027 GMT
        Subject: CN=5FE72961441902A5C15AA7B46E8FA430088359EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:82:4c:4d:f3:5a:22:1f:6a:8e:98:52:d4:
                    d5:4d:e5:df:62:77:91:f2:be:43:d4:3f:3c:5e:e8:
                    73:55:01:cc:d3:4f:b2:77:1c:8b:3b:69:ed:47:40:
                    38:8a:a5:08:a6:45:38:a9:ad:e0:40:c9:cc:c6:06:
                    24:91:9a:8b:42:b4:42:5b:12:88:96:15:8e:72:15:
                    9c:d5:98:df:3d:f1:a8:f4:2a:26:10:c1:20:b1:b1:
                    17:f3:0a:48:30:03:2a:a7:58:f0:8e:7f:0b:21:80:
                    12:c8:8f:72:e9:c0:d1:30:9f:7e:1a:3a:85:0b:40:
                    e9:cb:44:34:7f:c5:56:3a:ad:10:da:d0:15:29:8d:
                    f5:4c:e0:18:af:59:95:6f:fe:d0:ca:77:26:cf:4d:
                    65:91:bf:59:af:81:05:9c:6f:51:28:e8:82:45:a9:
                    bc:4a:77:30:23:a6:26:86:a6:8d:38:56:35:03:d3:
                    85:6a:b0:30:eb:8e:cb:a8:13:99:21:77:b3:ef:c3:
                    aa:b4:aa:fc:2e:ac:ce:ed:f8:f7:44:a3:fb:4a:5f:
                    8c:ad:fe:cd:c0:69:ae:b9:63:90:14:16:0d:be:cf:
                    4b:5c:a0:be:44:6d:f3:0f:41:6b:11:fb:35:1b:1f:
                    d6:3c:5b:1a:3e:8e:b0:36:fd:83:c0:a4:49:a4:34:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E7:29:61:44:19:02:A5:C1:5A:A7:B4:6E:8F:A4:30:08:83:59:EE
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3230302e302f32312d3231203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:75:96:69:5d:72:ac:60:b6:34:79:2c:62:4a:0c:fa:43:4c:
         f0:d9:d3:f9:ad:6a:89:a7:d6:38:8d:eb:72:9d:61:4d:2e:0d:
         f4:c5:74:cf:84:74:32:b2:37:f7:f3:a0:23:5d:4e:59:b0:fc:
         41:6e:f4:34:7a:94:c5:38:48:ea:57:51:df:95:99:40:90:6e:
         18:df:bf:46:a8:50:9a:98:7f:a0:bf:38:5e:1a:4c:68:18:27:
         f3:b3:43:77:79:0c:33:d7:57:b9:45:d9:cc:4b:fd:64:16:be:
         57:3c:ba:31:e9:9a:03:ab:34:ca:44:a8:1c:29:d3:46:6d:7b:
         be:aa:4a:5f:94:15:8f:b4:bf:c0:08:ad:c3:94:9b:8f:d8:be:
         66:6a:0b:75:01:17:7d:68:dc:99:eb:57:e6:5d:ef:da:51:c9:
         60:9e:25:c8:51:3b:e5:8c:e3:7f:06:86:f3:d5:d6:f6:68:d3:
         20:2d:f3:1a:46:a0:a5:09:6c:11:45:32:f5:95:2f:7b:59:23:
         a0:47:45:eb:19:f9:d0:55:e1:72:29:5c:14:ae:7e:46:21:73:
         f4:3c:6e:96:c7:40:bc:dd:a7:7b:4c:70:fa:a8:36:5d:2d:6d:
         0c:5f:34:2c:86:06:ae:a3:11:82:5b:a9:8f:89:a3:53:d0:5b:
         a2:49:0e:0f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUT1TrVvjvvqaiy+GBFD7znP8DZ3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNjA0MjkxMzU1MTJaFw0yNzA0MjgxNDAwMTJaMDMxMTAvBgNV
BAMTKDVGRTcyOTYxNDQxOTAyQTVDMTVBQTdCNDZFOEZBNDMwMDg4MzU5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMR4JMTfNaIh9qjphS1NVN5d9i
d5HyvkPUPzxe6HNVAczTT7J3HIs7ae1HQDiKpQimRTipreBAyczGBiSRmotCtEJb
EoiWFY5yFZzVmN898aj0KiYQwSCxsRfzCkgwAyqnWPCOfwshgBLIj3LpwNEwn34a
OoULQOnLRDR/xVY6rRDa0BUpjfVM4BivWZVv/tDKdybPTWWRv1mvgQWcb1Eo6IJF
qbxKdzAjpiaGpo04VjUD04VqsDDrjsuoE5khd7Pvw6q0qvwurM7t+PdEo/tKX4yt
/s3Aaa65Y5AUFg2+z0tcoL5EbfMPQWsR+zUbH9Y8Wxo+jrA2/YPApEmkNEsnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUX+cpYUQZAqXBWqe0bo+kMAiDWe4wHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzIzMDMwMmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzczOTMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIL8gwDQYJ
KoZIhvcNAQELBQADggEBAGV1lmldcqxgtjR5LGJKDPpDTPDZ0/mtaomn1jiN63Kd
YU0uDfTFdM+EdDKyN/fzoCNdTlmw/EFu9DR6lMU4SOpXUd+VmUCQbhjfv0aoUJqY
f6C/OF4aTGgYJ/OzQ3d5DDPXV7lF2cxL/WQWvlc8ujHpmgOrNMpEqBwp00Zte76q
Sl+UFY+0v8AIrcOUm4/YvmZqC3UBF31o3JnrV+Zd79pRyWCeJchRO+WM438GhvPV
1vZo0yAt8xpGoKUJbBFFMvWVL3tZI6BHResZ+dBV4XIpXBSufkYhc/Q8bpbHQLzd
p3tMcPqoNl0tbQxfNCyGBq6jEYJbqY+Jo1PQW6JJDg8=
-----END CERTIFICATE-----
Generated at Wed May 13 17:13:45 2026 by rpki-client