Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35322e302f32322d3232203d3e2037393038.roa
File:                     3230302e34372e35322e302f32322d3232203d3e2037393038.roa (raw, json)
Hash identifier:          U9vPx0IXz3choiz+BI3EAQnvneS6c8oY2Run09HhUaM=
Subject key identifier:   ED:E3:C8:1D:7A:A3:49:B1:C1:43:3F:61:82:4F:A3:7A:D6:9B:18:F1
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       5A83BA2DA0D2EF56FA8544131BB604E6D0DED2D8
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35322e302f32322d3232203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:09 +0000
ROA not before:           Wed 29 Apr 2026 13:55:09 +0000
ROA not after:            Wed 28 Apr 2027 14:00:09 +0000
asID:                     7908
IP address blocks:        200.47.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:ba:2d:a0:d2:ef:56:fa:85:44:13:1b:b6:04:e6:d0:de:d2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:09 2026 GMT
            Not After : Apr 28 14:00:09 2027 GMT
        Subject: CN=EDE3C81D7AA349B1C1433F61824FA37AD69B18F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:be:cd:65:22:e1:94:f3:5a:30:c2:70:16:
                    27:7f:56:3f:80:2f:d2:36:b9:fd:8a:69:f0:72:b4:
                    c3:45:08:ff:3a:64:e5:20:54:64:97:41:e1:59:75:
                    84:25:04:9e:bb:1d:6b:d7:56:15:39:7e:92:6e:3c:
                    c6:c7:e8:4c:0d:92:db:c7:2c:76:e6:71:04:b2:23:
                    aa:28:4a:b9:e0:e3:c3:fd:3d:40:d6:49:8a:2d:8b:
                    a8:4f:76:3d:71:21:99:25:fb:fd:97:67:c5:37:f7:
                    97:68:8f:20:20:07:09:0f:36:dc:32:13:3d:72:25:
                    50:5f:30:3b:5d:85:07:6e:4c:d8:90:83:e5:61:7e:
                    a2:1b:f8:fe:9e:f4:ea:3e:48:42:36:f9:d9:92:b5:
                    31:6b:2c:04:a7:2f:ae:2e:5b:8f:c7:49:3c:06:7d:
                    84:b2:f6:19:03:ca:11:40:99:af:be:28:06:c5:47:
                    b0:e9:46:e3:95:96:28:dc:e6:46:59:9c:aa:1b:4a:
                    1a:a9:32:cb:19:3c:cf:72:74:57:e0:b1:f1:b9:b9:
                    33:a4:a8:8e:ff:83:2c:05:2e:fb:33:c0:ba:40:9f:
                    dc:41:28:2b:ef:52:06:df:95:44:8c:f1:e1:f3:41:
                    f0:ae:ee:86:be:03:ea:45:dc:9c:68:3d:83:ad:60:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E3:C8:1D:7A:A3:49:B1:C1:43:3F:61:82:4F:A3:7A:D6:9B:18:F1
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35322e302f32322d3232203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:61:14:2c:76:34:b7:ca:28:10:ca:c3:5a:6b:43:4d:a0:84:
         4b:96:de:36:d4:92:0e:6c:f4:1b:0f:30:68:ea:d4:d3:82:18:
         21:18:11:ef:ec:63:52:34:71:d7:cd:13:f7:7e:8d:1e:23:8d:
         86:0b:5a:21:5c:43:89:b1:6f:4a:05:bd:67:f3:22:7b:9b:9e:
         df:d3:1a:f2:83:8b:4c:38:e1:b5:b1:00:0d:6c:73:47:e1:cf:
         31:b0:3a:cf:d2:b5:f5:6d:9e:41:55:86:aa:ff:5d:eb:ab:b0:
         4e:ed:d6:01:0d:31:97:37:38:8d:ca:13:a0:13:f2:7b:4a:fa:
         4d:5d:12:3b:33:6f:4a:1f:8a:c6:68:46:2d:e5:06:5c:c9:08:
         0a:5f:4d:41:36:cf:a9:b2:f9:b9:21:9f:b9:f4:df:af:a4:80:
         59:e5:13:69:e6:2d:c6:b6:99:28:eb:56:f4:56:3a:cf:8d:c5:
         5d:8d:ca:62:54:d0:f8:e3:ac:fa:3e:e2:a6:0f:84:b4:b8:07:
         d0:5a:ef:38:2a:19:1d:54:a5:5a:8d:eb:af:46:41:62:02:d7:
         b3:0f:f8:b5:2e:66:54:1b:48:68:aa:31:f6:b8:b5:1c:c5:be:
         d1:8f:68:76:fa:67:7d:d2:78:18:07:cb:2f:d5:24:d6:cd:65:
         f9:c9:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:54:40 2026 by rpki-client