Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e34362e302f32342d3234203d3e203131353134.roa
File:                     3230302e34372e34362e302f32342d3234203d3e203131353134.roa (raw, json)
Hash identifier:          Gozgsuaxhf+KXXmsMHOhhCTWX7mPxaByMku2EEn43Uk=
Subject key identifier:   98:83:F2:41:E0:85:51:7C:80:11:F9:50:DB:07:A0:A6:E7:59:F7:DE
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       541A29047B64DD18126C3D12196CD278F5EF52FC
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e34362e302f32342d3234203d3e203131353134.roa
Signing time:             Thu 30 Apr 2026 12:30:00 +0000
ROA not before:           Thu 30 Apr 2026 12:25:00 +0000
ROA not after:            Thu 29 Apr 2027 12:30:00 +0000
asID:                     11514
IP address blocks:        200.47.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1a:29:04:7b:64:dd:18:12:6c:3d:12:19:6c:d2:78:f5:ef:52:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 30 12:25:00 2026 GMT
            Not After : Apr 29 12:30:00 2027 GMT
        Subject: CN=9883F241E085517C8011F950DB07A0A6E759F7DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:7f:c5:7e:b8:9a:1d:64:ad:bb:5f:68:ff:
                    e5:0d:5c:a3:d0:55:66:13:9a:22:59:cd:5f:bc:8e:
                    0b:6b:19:89:e9:28:2b:b0:4b:78:8b:c3:8c:ff:0d:
                    06:38:59:82:62:b9:37:42:a0:bd:6c:bd:4b:08:0b:
                    36:4c:e4:23:6e:76:42:ae:10:fa:85:da:88:3d:c8:
                    da:62:d0:a3:56:e0:5a:97:84:cc:9e:86:63:9a:43:
                    5a:0b:b9:e3:2b:91:e2:e6:84:4f:f3:14:bb:67:06:
                    96:81:f2:a2:21:19:29:00:11:bb:de:09:b1:98:24:
                    3d:b2:41:08:9f:e1:53:0b:6e:ba:83:06:f1:5a:23:
                    01:95:0d:87:43:4f:55:5f:c4:f7:ec:78:b7:e6:c4:
                    d9:f9:9f:76:29:17:51:e0:26:b1:3a:1c:a4:83:ad:
                    b4:b3:a0:23:a3:32:29:bd:e2:c5:4a:f8:1c:20:77:
                    10:70:86:db:60:82:7f:5f:47:44:96:c5:10:d8:aa:
                    8a:b8:6a:cf:f8:5b:c2:61:26:9c:e7:04:fe:11:12:
                    b9:dc:6c:2f:77:b1:a8:f5:cc:56:0c:d3:e8:d3:71:
                    7f:a7:23:ee:ad:cd:33:7c:ce:80:32:21:0c:0f:e0:
                    bd:56:bd:21:82:c0:68:ae:90:b5:74:f1:70:4e:b5:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:F2:41:E0:85:51:7C:80:11:F9:50:DB:07:A0:A6:E7:59:F7:DE
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e34362e302f32342d3234203d3e203131353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:de:47:94:57:1a:e8:41:6b:8e:44:2e:37:8e:7c:fe:e8:c0:
         5f:85:06:d8:98:a2:5f:87:b4:c3:f1:1b:04:1f:d7:8a:1a:55:
         28:80:3e:e2:29:3c:25:15:a3:57:7b:fb:bb:35:82:56:37:e4:
         be:b4:88:02:e8:dc:c8:7b:19:82:ac:89:bf:31:6e:89:54:41:
         a6:ad:d5:23:91:96:d8:8c:7b:fe:5c:98:36:57:b6:16:46:29:
         38:32:88:0d:c0:6b:1c:8b:5a:86:a4:5c:31:f2:47:45:a9:85:
         05:27:d9:d1:ab:42:bb:8e:d3:6f:e3:e6:6f:af:51:ba:ab:9a:
         90:d4:ff:5a:e0:4b:7e:1f:3a:99:0a:7c:32:e4:04:dc:52:02:
         be:a8:85:9e:b1:08:a6:0c:31:9f:1c:97:5d:b5:2a:8a:06:aa:
         bf:b6:d1:8e:b7:7d:d4:df:2f:23:15:f2:4a:48:68:e3:b3:75:
         1e:fc:c3:29:02:24:7e:0b:33:2c:6c:5b:4d:da:5e:90:c8:fe:
         22:ae:87:43:19:2c:42:69:5b:ab:07:3a:0c:92:75:9f:af:74:
         9d:27:02:84:95:01:d5:c2:b0:22:b0:67:42:5e:e7:58:d1:a8:
         31:ff:6b:f3:d2:ec:e0:b4:ba:5b:91:38:54:23:f8:f6:d3:ee:
         0a:01:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:28 2026 by rpki-client