Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35352e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e35352e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          engoKYgJJd0g1tIlv+vdWr+wx8ThrakNZBWBhEkap0o=
Subject key identifier:   31:D3:BB:D1:95:DC:08:68:8E:77:EE:89:EC:10:47:89:56:E5:E0:58
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       33240EA0B8E0569CF9F3B0C4381D545B7FA32BD6
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35352e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:02 +0000
ROA not before:           Wed 29 Apr 2026 13:55:02 +0000
ROA not after:            Wed 28 Apr 2027 14:00:02 +0000
asID:                     7908
IP address blocks:        200.47.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:24:0e:a0:b8:e0:56:9c:f9:f3:b0:c4:38:1d:54:5b:7f:a3:2b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:02 2026 GMT
            Not After : Apr 28 14:00:02 2027 GMT
        Subject: CN=31D3BBD195DC08688E77EE89EC10478956E5E058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:0f:ee:92:2d:31:03:7e:a0:0a:5c:f3:9b:
                    0c:ab:2c:9a:b9:24:8a:7f:7c:1e:e8:8d:26:c7:73:
                    ed:69:ff:9a:35:4e:29:d9:92:56:04:df:6c:36:21:
                    04:4d:90:6e:e1:e7:77:1e:e1:5b:0a:54:59:e3:fa:
                    c9:d2:18:7a:8d:12:ba:1f:fb:cc:d0:b5:2c:6c:13:
                    4b:16:3a:1b:08:53:87:22:37:30:f8:fa:03:99:5c:
                    df:02:f6:42:57:a8:ff:2e:e5:b3:6d:63:9b:2c:ac:
                    88:46:a8:af:26:f3:07:07:14:ba:bd:e1:17:20:91:
                    33:21:57:cb:82:d9:21:94:25:11:fe:4a:c0:aa:54:
                    76:61:67:a8:a8:2f:4c:58:6d:17:5c:45:81:39:6f:
                    a4:5e:31:76:da:22:20:37:28:23:03:1e:d6:29:3a:
                    34:6b:d5:46:10:37:fa:95:53:bf:76:57:01:90:ba:
                    ad:cd:fc:56:10:a9:10:9c:18:72:dc:ff:bd:5b:62:
                    f1:99:0b:8f:85:f6:cf:81:f6:5d:79:78:3e:9c:2a:
                    cb:66:a8:63:00:84:71:67:20:97:c3:b7:05:1a:df:
                    ff:9d:a2:ab:24:2c:00:3a:a0:1c:02:0d:ff:08:96:
                    3b:30:e5:29:2a:47:e6:9d:bf:86:5b:28:3b:3f:b3:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D3:BB:D1:95:DC:08:68:8E:77:EE:89:EC:10:47:89:56:E5:E0:58
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e35352e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:af:43:01:17:32:82:d0:75:44:af:e6:30:b6:76:3c:d6:
         17:e0:c8:d1:14:04:cc:dd:00:c3:2e:8a:9c:c4:ca:16:54:89:
         01:ed:19:4f:40:a8:01:6b:91:33:4f:0e:e5:a3:f2:7e:fa:01:
         42:4a:52:d1:c8:29:32:b5:06:0f:b4:a5:40:75:09:2d:0e:8e:
         ca:63:28:0a:39:f5:86:f8:2f:16:00:27:92:11:0f:f3:e9:2a:
         16:0d:ba:7e:e1:f1:4d:1e:2f:8a:e7:f6:2f:51:96:c6:6c:0b:
         64:bd:f8:de:42:56:0e:ad:f0:2a:bc:0f:25:15:11:c4:58:be:
         9c:bf:fc:e6:0c:bb:e1:b1:d5:02:67:63:92:dd:67:3b:a8:37:
         58:a6:6b:1f:9d:0f:49:8f:07:2b:24:85:0d:e5:5e:df:b8:d7:
         7b:c4:22:f5:01:33:6c:07:e2:5b:bc:86:d6:8c:de:2a:e9:ce:
         27:3d:a2:e6:a1:59:c3:09:9d:7c:8b:18:29:31:40:31:00:d3:
         80:d2:22:f5:82:d6:4f:3d:3b:86:c1:4c:4f:5a:67:eb:68:ec:
         29:68:14:eb:bb:56:d6:57:0e:1b:52:81:8a:66:86:6b:08:5e:
         c2:27:34:e5:bd:29:69:70:ca:90:69:aa:83:d2:0b:d4:46:67:
         4c:ce:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:49 2026 by rpki-client