Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e33372e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e33372e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          bBNz/9KnIZ53u4q0w4I1NTPqM5AtXDCURDADtPWo854=
Subject key identifier:   BF:6F:EA:08:36:5D:7C:6E:18:61:6D:D2:F9:49:BF:88:04:81:7C:1D
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       1B8C2AF5B4187B70BE6738C648DC58DB5088CCB6
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e33372e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:12 +0000
ROA not before:           Wed 29 Apr 2026 13:55:12 +0000
ROA not after:            Wed 28 Apr 2027 14:00:12 +0000
asID:                     7908
IP address blocks:        200.47.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8c:2a:f5:b4:18:7b:70:be:67:38:c6:48:dc:58:db:50:88:cc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:12 2026 GMT
            Not After : Apr 28 14:00:12 2027 GMT
        Subject: CN=BF6FEA08365D7C6E18616DD2F949BF8804817C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:e1:61:97:10:24:57:c6:14:e9:2c:d0:58:
                    35:00:e1:43:15:6c:37:75:8f:3f:c1:19:46:d6:8d:
                    d2:31:0d:46:b5:d3:be:9c:d2:bc:51:3a:d4:d4:11:
                    01:5c:01:cb:69:9e:d3:0b:f8:17:33:24:62:7b:57:
                    d5:2c:9b:e5:de:5b:f0:36:78:5c:9c:92:57:fb:40:
                    14:0b:15:e9:04:1f:6f:b9:9e:e7:c7:cb:68:b9:be:
                    97:67:9b:29:12:61:c9:39:48:ac:9f:aa:a5:97:97:
                    3b:d6:d2:0b:4e:3e:03:73:56:78:bf:bb:b8:4b:b9:
                    83:74:96:ff:e2:96:50:c7:51:3c:72:66:ca:36:b5:
                    11:d3:c3:62:e2:ee:3a:14:f6:10:5f:04:de:d7:73:
                    3b:b2:11:ad:1c:6d:36:43:98:06:b8:50:fb:23:4e:
                    24:a4:04:3f:1d:12:14:fe:dd:08:ae:16:a3:66:d7:
                    a5:df:2c:f1:7c:d5:8f:e1:2b:d2:9b:3e:0e:db:d9:
                    28:40:3c:c9:e0:73:47:a2:f2:eb:8d:1d:93:15:04:
                    8c:3d:47:81:35:8b:9e:76:10:2f:1e:8a:ad:09:90:
                    57:f4:57:62:71:aa:75:87:cb:13:08:9d:ec:bb:cb:
                    a7:35:61:dc:05:d3:10:82:c6:d3:1b:41:18:bc:e3:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:EA:08:36:5D:7C:6E:18:61:6D:D2:F9:49:BF:88:04:81:7C:1D
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e33372e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:fb:c3:36:34:7e:16:26:03:6f:89:6d:05:19:80:1f:e3:
         d7:17:69:30:cb:aa:b5:e9:92:0b:0f:28:55:64:23:28:32:9d:
         c4:35:5b:81:bb:4b:b9:76:34:b2:1a:8c:d7:5d:4a:fd:14:31:
         9f:ff:99:f8:29:8c:0d:59:1b:70:b0:a7:8f:8a:64:72:b9:fe:
         cf:c1:b9:8b:37:70:d5:c9:27:b2:0b:33:35:14:92:8c:1a:73:
         0f:ae:5d:b6:49:66:be:b4:0e:ce:cb:47:d3:b5:c3:e8:07:c1:
         cb:e1:fa:bb:fe:d9:27:99:53:32:ad:10:0b:b2:a4:23:94:f7:
         54:07:61:60:da:6e:b2:9d:b0:9d:e9:8d:ad:fa:22:55:98:ec:
         5f:ac:fd:58:d9:fb:46:00:7e:7d:0e:0f:20:0b:2a:b6:b1:e3:
         92:e1:5d:21:77:2f:06:e4:76:b6:f4:eb:6f:1e:6b:e7:c8:73:
         4d:32:28:82:20:0d:6c:b7:c2:f1:f8:8c:d7:6e:b9:0a:cd:28:
         f5:00:23:4e:86:42:fa:e0:09:2a:b8:a3:87:d7:59:27:b6:0c:
         fe:e4:62:7e:b1:ae:08:04:67:7a:37:c2:9e:ee:8a:a6:38:94:
         b7:30:58:d6:91:80:2f:99:81:e1:c4:5c:4d:49:72:05:38:9a:
         2d:0e:23:6a
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUG4wq9bQYe3C+ZzjGSNxY21CIzLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNjA0MjkxMzU1MTJaFw0yNzA0MjgxNDAwMTJaMDMxMTAvBgNV
BAMTKEJGNkZFQTA4MzY1RDdDNkUxODYxNkREMkY5NDlCRjg4MDQ4MTdDMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQM+FhlxAkV8YU6SzQWDUA4UMV
bDd1jz/BGUbWjdIxDUa1076c0rxROtTUEQFcActpntML+BczJGJ7V9Usm+XeW/A2
eFycklf7QBQLFekEH2+5nufHy2i5vpdnmykSYck5SKyfqqWXlzvW0gtOPgNzVni/
u7hLuYN0lv/illDHUTxyZso2tRHTw2Li7joU9hBfBN7XczuyEa0cbTZDmAa4UPsj
TiSkBD8dEhT+3QiuFqNm16XfLPF81Y/hK9KbPg7b2ShAPMngc0ei8uuNHZMVBIw9
R4E1i552EC8eiq0JkFf0V2JxqnWHyxMIney7y6c1YdwF0xCCxtMbQRi8443TAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUv2/qCDZdfG4YYW3S+Um/iASBfB0wHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzMzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzkzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyC8lMA0GCSqG
SIb3DQEBCwUAA4IBAQCZ/vvDNjR+FiYDb4ltBRmAH+PXF2kwy6q16ZILDyhVZCMo
Mp3ENVuBu0u5djSyGozXXUr9FDGf/5n4KYwNWRtwsKePimRyuf7PwbmLN3DVySey
CzM1FJKMGnMPrl22SWa+tA7Oy0fTtcPoB8HL4fq7/tknmVMyrRALsqQjlPdUB2Fg
2m6ynbCd6Y2t+iJVmOxfrP1Y2ftGAH59Dg8gCyq2seOS4V0hdy8G5Ha29OtvHmvn
yHNNMiiCIA1st8Lx+IzXbrkKzSj1ACNOhkL64AkquKOH11kntgz+5GJ+sa4IBGd6
N8Ke7oqmOJS3MFjWkYAvmYHhxFxNSXIFOJotDiNq
-----END CERTIFICATE-----
Generated at Wed May 13 17:13:46 2026 by rpki-client