Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e36342e302f32312d3231203d3e2037393038.roa
File:                     3230302e34372e36342e302f32312d3231203d3e2037393038.roa (raw, json)
Hash identifier:          tcGkxFV565VHv6p2n2zHdNu2bJ8svZOQrjfwgLk2Lx4=
Subject key identifier:   5E:41:20:73:2E:BC:D3:F7:FB:9A:F5:44:0F:45:7D:B8:42:B8:78:7B
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       5FD4B41974EED215A47AE4A3E5A716B8336E9A03
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e36342e302f32312d3231203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:17 +0000
ROA not before:           Wed 29 Apr 2026 13:55:17 +0000
ROA not after:            Wed 28 Apr 2027 14:00:17 +0000
asID:                     7908
IP address blocks:        200.47.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d4:b4:19:74:ee:d2:15:a4:7a:e4:a3:e5:a7:16:b8:33:6e:9a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:17 2026 GMT
            Not After : Apr 28 14:00:17 2027 GMT
        Subject: CN=5E4120732EBCD3F7FB9AF5440F457DB842B8787B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:25:80:37:6c:97:18:d4:e4:1b:b0:eb:eb:
                    85:cf:73:6c:11:59:5c:b5:7b:0f:1b:27:1c:29:70:
                    1a:cd:2b:7a:6c:bc:6e:61:08:15:74:22:ca:87:32:
                    ef:ac:5c:d0:a9:f2:79:97:70:ff:55:13:09:09:40:
                    9c:69:63:1a:20:1b:aa:60:27:e8:a7:91:74:79:65:
                    8e:86:d3:9d:e4:d2:56:aa:11:27:20:ab:b9:31:45:
                    79:8b:35:b4:84:63:c9:db:b0:30:74:e6:ab:22:e1:
                    54:05:97:d2:c8:7b:12:80:fa:d6:e3:0e:62:36:c9:
                    c1:e0:d5:c0:e4:27:c3:ea:f5:87:29:20:e4:d3:fd:
                    5b:94:07:5b:88:b9:68:ad:b5:3e:5d:43:00:50:47:
                    6a:8d:74:84:f1:f3:2b:5a:77:6d:7f:a4:75:18:dc:
                    fa:83:8d:7d:b4:39:3d:6d:96:75:05:3d:1f:e0:9e:
                    b0:91:37:11:ac:4a:3b:df:01:8f:bb:a0:a0:03:03:
                    4d:be:90:62:d5:0e:98:cd:0a:8e:95:b4:ed:71:2e:
                    92:33:5d:8d:15:54:51:c1:d9:e3:87:a1:0e:b2:62:
                    5e:2c:ce:77:98:0e:7e:c7:1d:94:c8:19:9f:d2:c6:
                    fa:e4:e2:a7:ee:df:43:71:8a:ec:1e:10:e5:6e:2b:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:41:20:73:2E:BC:D3:F7:FB:9A:F5:44:0F:45:7D:B8:42:B8:78:7B
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e36342e302f32312d3231203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c1:12:77:cb:86:2d:20:98:d3:7c:88:bb:6f:7a:16:61:49:f6:
         7d:bb:af:a3:37:6a:50:37:33:b3:f6:27:79:da:8e:2f:fa:cc:
         9a:6a:aa:95:85:12:b8:fb:70:b1:00:6f:0b:d8:3d:77:42:25:
         80:29:de:14:73:71:31:23:97:46:20:0d:1b:19:d0:20:ee:7a:
         b2:e3:b1:b4:2b:f1:6a:de:b1:86:06:ee:e4:63:47:25:06:db:
         92:66:5f:03:e7:1f:3f:c2:31:37:04:d7:f0:dd:cc:42:4b:5b:
         62:15:cd:5f:f3:31:b4:c9:3c:08:d6:b1:af:23:f2:92:68:15:
         a1:f2:18:35:ff:01:62:34:e2:1a:11:46:73:8b:91:7b:a9:a8:
         06:ec:bd:15:86:2c:a4:d8:3e:9c:d5:a9:0f:76:27:dc:c1:e2:
         61:b8:c4:62:70:20:5e:61:fc:13:0b:54:e6:68:eb:a0:1c:08:
         cd:4f:52:68:fa:bd:3f:79:e4:76:f5:8f:53:ba:1e:ed:a6:92:
         e5:e4:5a:4e:a0:be:00:b5:13:eb:84:99:a7:40:13:be:3f:25:
         28:58:e2:84:66:71:92:a1:4c:06:e0:7c:e7:0f:ea:f1:b0:16:
         16:7e:0e:c9:85:22:c1:7d:b5:0e:15:a0:17:80:d3:b8:19:9a:
         20:45:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:47:50 2026 by rpki-client