Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e37342e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e37342e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          bG+kD5hkEoDq8dasugahTcwTpFSh2Fa4mfdTiBgi4tk=
Subject key identifier:   28:5A:91:93:50:74:13:29:7E:B3:77:45:14:1D:CE:9C:12:30:EB:A9
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       12CE1C8EBB0B308A5C231B69E4C1CE43BDB3E258
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e37342e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:13 +0000
ROA not before:           Wed 29 Apr 2026 13:55:13 +0000
ROA not after:            Wed 28 Apr 2027 14:00:13 +0000
asID:                     7908
IP address blocks:        200.47.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ce:1c:8e:bb:0b:30:8a:5c:23:1b:69:e4:c1:ce:43:bd:b3:e2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:13 2026 GMT
            Not After : Apr 28 14:00:13 2027 GMT
        Subject: CN=285A9193507413297EB37745141DCE9C1230EBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cc:5d:e4:93:d9:27:5d:98:86:34:4d:92:52:
                    b5:f0:28:e9:3f:84:a8:5d:20:d9:6c:d8:78:6e:d7:
                    02:32:43:57:dd:58:4e:db:d5:97:4e:e6:56:72:4e:
                    64:9a:b2:ea:f4:b5:40:72:ce:70:89:f1:57:6f:05:
                    46:69:a9:a2:a5:8a:81:5f:2a:3f:f8:e5:64:9d:94:
                    12:8c:c3:e2:02:31:58:c5:d9:1d:73:71:5e:73:85:
                    9b:5e:90:f4:c1:30:bd:f0:63:0f:2c:c2:e9:96:74:
                    ae:71:a8:30:8a:a8:51:fb:b6:21:9c:80:3d:39:87:
                    2b:6c:3e:12:a9:f8:7b:ee:55:8b:8e:a7:57:e0:99:
                    61:a6:65:06:eb:fb:86:c2:d6:9b:0a:58:4d:95:e1:
                    11:14:82:a7:fb:9a:fb:08:26:91:ca:5e:f7:85:45:
                    4a:f6:71:12:4b:cc:fe:f2:bf:73:3c:32:69:b9:bf:
                    d0:a1:a4:75:b5:53:42:e4:94:dc:cb:21:5c:b9:97:
                    7f:4d:fa:00:25:0a:00:de:7c:fd:31:8f:d6:f4:5c:
                    1b:e4:b2:0e:5f:81:51:dc:4e:28:f4:e0:3a:ed:07:
                    2a:32:f9:4a:2e:1f:a0:f3:55:f2:29:0a:b9:61:cc:
                    40:29:27:b3:ba:47:88:c8:bc:86:56:78:86:61:a1:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:91:93:50:74:13:29:7E:B3:77:45:14:1D:CE:9C:12:30:EB:A9
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e37342e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:28:bd:59:a7:21:d5:e8:b1:64:88:d3:7a:31:ea:6f:70:bd:
         49:32:f8:e6:a8:e9:74:62:44:60:9a:95:8a:ed:ac:5c:1c:3c:
         6b:e5:f0:8b:49:a3:c7:7a:ac:3a:65:98:df:7b:e7:e4:6b:9e:
         fc:04:be:b5:f7:41:e8:bc:0c:39:9e:4a:d0:a7:42:e9:42:f4:
         1b:bf:e0:52:35:bd:6f:08:ba:02:7c:a7:9e:e5:5d:52:d5:1a:
         44:6b:c9:1c:fd:b1:18:22:7f:65:2e:ac:ac:43:1e:03:12:8a:
         a0:67:20:a0:9e:6b:af:72:75:a6:16:c3:bc:e5:00:a0:d2:4e:
         92:7c:bf:77:45:c8:d0:35:de:63:6b:23:1b:70:83:1f:ec:a0:
         33:56:5a:f6:8a:99:1f:bf:68:81:5a:d0:ea:3c:0f:82:c0:a7:
         02:60:39:4b:e6:90:ed:95:e3:de:ab:2e:fe:f8:e7:5a:30:f8:
         b6:1b:6b:b1:e2:f4:c3:59:ee:32:15:cd:1e:e1:6f:68:30:3c:
         ad:24:90:72:1c:66:7c:46:d0:dc:bf:74:5b:ea:71:1f:e3:bb:
         85:a6:3b:3d:02:a5:c2:81:99:f9:24:c0:64:2d:ad:45:20:dd:
         b7:79:4e:56:f8:27:48:88:fd:b4:1c:8e:82:52:90:e0:80:1d:
         47:e5:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:19 2026 by rpki-client