Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35302e302f32332d3233203d3e2037393038.roa
File:                     3230302e34372e35302e302f32332d3233203d3e2037393038.roa (raw, json)
Hash identifier:          ZYMZMgKMsWfEJTSzqQZKRc8tFLtTSbbhaXcyOSvEC6U=
Subject key identifier:   37:88:06:B0:55:2C:2F:F9:8B:1D:A5:8B:EB:23:6A:4C:13:E0:00:64
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       062EDBABBAD093E86BDB176DE805349DE0177E0B
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35302e302f32332d3233203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:08 +0000
ROA not before:           Wed 29 Apr 2026 13:55:08 +0000
ROA not after:            Wed 28 Apr 2027 14:00:08 +0000
asID:                     7908
IP address blocks:        200.47.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2e:db:ab:ba:d0:93:e8:6b:db:17:6d:e8:05:34:9d:e0:17:7e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:08 2026 GMT
            Not After : Apr 28 14:00:08 2027 GMT
        Subject: CN=378806B0552C2FF98B1DA58BEB236A4C13E00064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:38:1b:49:94:7a:52:57:28:09:c5:46:bf:
                    89:cf:99:f3:8b:36:04:25:8f:18:dd:c5:7e:b3:ba:
                    5b:6d:fa:2b:08:30:e3:2c:6b:bc:13:f6:d8:c4:ef:
                    cc:e1:a4:a3:ee:72:38:1f:ad:30:65:62:cf:5d:e6:
                    dc:0a:82:d6:31:0e:6c:57:fd:50:98:25:f5:de:e3:
                    53:6b:5e:32:88:fb:b5:59:cf:46:fb:68:ab:e9:c7:
                    84:83:4b:7a:10:c6:a9:1b:70:8f:ae:d9:6d:e6:4a:
                    8f:8c:df:7a:a8:ac:97:ec:cd:0c:78:9c:9c:8d:80:
                    5a:bf:a2:0d:c3:39:36:33:34:2c:a4:72:2e:e5:73:
                    63:b6:f7:08:12:54:c1:30:b8:39:1d:29:15:78:3b:
                    2f:ec:03:a0:34:f5:c9:f5:ed:f0:56:73:fe:61:ab:
                    e0:9f:c6:13:40:38:e2:82:29:f1:28:c4:19:5d:a3:
                    fa:35:35:f8:fb:2c:0a:6f:6a:ec:70:81:1d:ef:f3:
                    e2:db:8e:b3:cf:ff:83:33:f1:ac:77:a5:7a:3d:de:
                    35:98:e6:3c:d0:df:09:38:b7:43:6a:dd:b4:75:0e:
                    01:2b:5b:bc:98:8b:59:14:5a:61:27:0d:a9:e6:a2:
                    1a:18:a3:20:13:40:d7:48:e1:14:87:cc:12:19:2f:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:06:B0:55:2C:2F:F9:8B:1D:A5:8B:EB:23:6A:4C:13:E0:00:64
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35302e302f32332d3233203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:7e:73:1c:f5:73:17:79:0e:5f:f5:b0:ad:75:c9:30:4f:
         ad:78:23:4d:ef:74:cb:ec:51:a6:f2:3c:b6:60:16:2d:9b:89:
         64:23:31:58:b7:62:1c:6a:ca:1d:0e:7f:90:f7:d0:86:7c:d0:
         04:e3:3f:6d:c2:ed:45:25:2a:82:18:c6:bd:4b:a0:3e:7e:b0:
         a5:a1:61:00:e7:1f:0c:15:d9:03:67:e5:ba:54:c1:67:b0:b0:
         b8:4a:3e:ed:38:e1:b9:32:36:b1:de:45:65:74:03:c8:d4:0d:
         96:27:08:83:6e:81:bb:1d:bc:86:33:b5:d1:5c:3a:fb:a0:d6:
         c9:74:2c:a4:72:bb:0a:81:52:7f:4b:ba:0f:a6:18:a8:d3:f0:
         8d:38:c2:a9:f5:90:6f:29:01:a8:d0:d3:a6:97:83:be:5b:7a:
         f4:ad:64:97:89:45:f9:81:07:a9:6f:a5:08:c1:1d:b5:c2:86:
         3b:80:80:d9:84:d5:ef:b5:8d:fb:78:3f:ce:a5:4c:17:fd:26:
         ba:1e:86:a3:c8:6d:35:67:b3:2b:2b:22:c0:2e:89:d5:a6:b2:
         31:ca:79:97:f0:e5:f4:14:4c:a5:0f:62:a9:99:14:c6:3f:0d:
         1c:84:7b:3f:bf:06:4e:bc:54:05:aa:37:6a:04:78:7d:e9:ec:
         57:82:31:82
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUBi7bq7rQk+hr2xdt6AU0neAXfgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNjA0MjkxMzU1MDhaFw0yNzA0MjgxNDAwMDhaMDMxMTAvBgNV
BAMTKDM3ODgwNkIwNTUyQzJGRjk4QjFEQTU4QkVCMjM2QTRDMTNFMDAwNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAjgbSZR6UlcoCcVGv4nPmfOL
NgQljxjdxX6zultt+isIMOMsa7wT9tjE78zhpKPucjgfrTBlYs9d5twKgtYxDmxX
/VCYJfXe41NrXjKI+7VZz0b7aKvpx4SDS3oQxqkbcI+u2W3mSo+M33qorJfszQx4
nJyNgFq/og3DOTYzNCykci7lc2O29wgSVMEwuDkdKRV4Oy/sA6A09cn17fBWc/5h
q+CfxhNAOOKCKfEoxBldo/o1Nfj7LApvauxwgR3v8+LbjrPP/4Mz8ax3pXo93jWY
5jzQ3wk4t0Nq3bR1DgErW7yYi1kUWmEnDanmohoYoyATQNdI4RSHzBIZL0hLAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUN4gGsFUsL/mLHaWL6yNqTBPgAGQwHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzUzMDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDM3MzkzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByC8yMA0GCSqG
SIb3DQEBCwUAA4IBAQAD3X5zHPVzF3kOX/WwrXXJME+teCNN73TL7FGm8jy2YBYt
m4lkIzFYt2IcasodDn+Q99CGfNAE4z9twu1FJSqCGMa9S6A+frCloWEA5x8MFdkD
Z+W6VMFnsLC4Sj7tOOG5Mjax3kVldAPI1A2WJwiDboG7HbyGM7XRXDr7oNbJdCyk
crsKgVJ/S7oPphio0/CNOMKp9ZBvKQGo0NOml4O+W3r0rWSXiUX5gQepb6UIwR21
woY7gIDZhNXvtY37eD/OpUwX/Sa6HoajyG01Z7MrKyLALonVprIxynmX8OX0FEyl
D2KpmRTGPw0chHs/vwZOvFQFqjdqBHh96exXgjGC
-----END CERTIFICATE-----
Generated at Wed May 13 16:47:58 2026 by rpki-client