Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38302e302f32322d3232203d3e2037393038.roa
File:                     3230302e34372e38302e302f32322d3232203d3e2037393038.roa (raw, json)
Hash identifier:          yJauaXVIXzkQIyR1oKuLbQ6Rof6bmISCvQvo+A/olHs=
Subject key identifier:   34:E3:72:12:5D:6B:97:5E:AB:82:32:8A:E0:AB:C0:5A:AB:75:70:C3
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       2BD078476CEF72174662A8C0BF6171B580BBB2B9
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38302e302f32322d3232203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:04 +0000
ROA not before:           Wed 29 Apr 2026 13:55:04 +0000
ROA not after:            Wed 28 Apr 2027 14:00:04 +0000
asID:                     7908
IP address blocks:        200.47.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d0:78:47:6c:ef:72:17:46:62:a8:c0:bf:61:71:b5:80:bb:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:04 2026 GMT
            Not After : Apr 28 14:00:04 2027 GMT
        Subject: CN=34E372125D6B975EAB82328AE0ABC05AAB7570C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:95:79:25:58:a2:22:c6:8c:f3:3f:8d:3a:
                    0d:e3:91:81:31:94:e7:43:50:6e:d6:12:89:a9:29:
                    94:11:20:45:f7:8b:81:42:2e:4a:1e:00:94:52:55:
                    be:7a:ff:a9:5b:d0:33:64:eb:33:7a:6f:9e:de:01:
                    54:72:df:38:79:34:95:f9:1c:a2:3d:b0:88:f2:39:
                    2d:60:a3:c3:0e:d5:67:84:00:37:fe:e3:e5:c0:0b:
                    69:17:11:2c:03:b6:08:0b:ac:61:e0:16:6f:64:5a:
                    b2:ed:76:71:69:5f:9a:c4:6c:cc:21:da:64:54:82:
                    31:fe:00:69:27:0b:ca:a4:e0:7d:40:3a:6f:8d:20:
                    72:49:9f:ff:ab:cb:c7:8d:e1:4b:74:b8:f3:76:c7:
                    f2:2f:ab:6d:0f:81:48:47:ce:95:a7:c9:d2:41:d6:
                    97:a2:9d:34:55:52:d9:69:23:2b:05:d0:a8:4f:2e:
                    8a:32:7d:94:5a:34:e5:42:11:cb:da:db:ee:8c:3e:
                    74:af:19:3b:82:cc:85:e9:f9:47:43:6a:35:68:e6:
                    30:94:5c:83:9e:b6:22:c7:06:66:c4:7b:b5:9f:76:
                    25:ea:a2:b1:30:88:35:0d:06:0e:8d:6a:4a:7e:63:
                    ad:c4:ce:6d:d7:0c:a9:c8:ed:8f:14:1a:9e:ec:68:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E3:72:12:5D:6B:97:5E:AB:82:32:8A:E0:AB:C0:5A:AB:75:70:C3
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38302e302f32322d3232203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:78:13:f3:ca:0d:14:fd:53:a2:49:0b:a1:98:dd:9b:98:1d:
         0b:a6:fc:11:a1:2b:92:f6:5a:97:99:5d:85:13:e6:96:32:24:
         f5:04:a5:e0:63:1e:15:f2:7d:53:35:cf:55:38:00:27:75:97:
         7d:fc:a0:7c:6f:80:71:73:54:89:62:b7:35:b0:06:51:2b:d7:
         94:ea:de:e0:90:c8:00:0a:e5:b0:49:cb:e5:05:7a:b4:d5:aa:
         5d:1a:90:9c:5d:85:3c:51:2d:34:3e:bd:8b:67:66:53:d1:04:
         de:23:bd:7f:72:48:4b:93:29:4e:3a:f9:3a:75:9f:49:b2:72:
         06:b7:c0:96:e5:38:e3:a2:bd:e1:ef:32:69:f0:6f:3b:9a:f5:
         02:1a:c6:8b:86:cb:c3:88:30:4e:ad:98:ca:3f:dc:aa:32:d1:
         a1:8d:b2:39:c4:c9:1f:03:3f:f9:63:8f:ee:b1:41:f2:d3:a6:
         54:7a:c7:25:37:68:90:ad:55:0d:f2:7f:ab:b1:f5:1c:47:0d:
         b1:43:4a:1b:0a:fb:07:4e:75:0d:a3:1c:cc:c7:c6:93:25:ff:
         3d:b8:27:53:a9:f2:c0:cc:ec:4c:f8:cf:1a:82:33:3c:fc:b6:
         b3:e5:32:52:a6:27:47:9a:78:64:7b:88:e3:28:f6:95:ca:f5:
         31:5a:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:45 2026 by rpki-client