Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38372e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e38372e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          UgWgYXQClbDtAD/fI8i3lTpQQqaI4FJ9nIzSl0hEMY8=
Subject key identifier:   D8:8F:3A:CD:E2:1D:3E:86:D3:12:4C:5E:8F:83:9F:18:E6:19:39:04
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       50A52BBDF07933C64F486668EB427180152E0AFB
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38372e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:10 +0000
ROA not before:           Wed 29 Apr 2026 13:55:10 +0000
ROA not after:            Wed 28 Apr 2027 14:00:10 +0000
asID:                     7908
IP address blocks:        200.47.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a5:2b:bd:f0:79:33:c6:4f:48:66:68:eb:42:71:80:15:2e:0a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:10 2026 GMT
            Not After : Apr 28 14:00:10 2027 GMT
        Subject: CN=D88F3ACDE21D3E86D3124C5E8F839F18E6193904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:78:f6:68:92:37:cf:76:8e:db:65:f9:9c:
                    88:bd:3e:b5:2b:dc:ae:7a:6f:28:e3:35:6b:d7:86:
                    f4:08:28:ac:41:fc:7a:8b:ae:15:4b:83:d9:58:7e:
                    9a:46:0a:eb:5a:a2:d3:4c:b1:74:f1:05:c6:09:9a:
                    15:ce:63:03:c1:f0:5a:6d:91:6f:3f:3a:41:eb:8b:
                    94:f7:24:52:13:da:f0:52:0a:4a:12:b8:ec:59:c9:
                    d1:85:1a:a0:57:6c:14:6f:ab:41:e4:fe:79:0f:cd:
                    b8:49:36:47:6c:8e:33:2d:c0:d8:65:33:86:23:bd:
                    a8:40:a2:e0:68:1a:b7:4d:60:e3:2b:f3:d0:4a:95:
                    06:db:b7:c2:15:bf:b1:87:b5:5e:d4:76:f9:d8:5f:
                    d6:10:36:fa:47:34:95:66:71:60:3c:0c:80:1a:e1:
                    1b:d0:2e:6d:f2:fe:1f:d3:37:8a:eb:19:4c:05:a6:
                    85:dd:71:74:2a:44:7e:49:83:b6:68:89:43:ee:83:
                    e5:0c:26:a9:10:ad:31:49:0a:93:87:24:28:22:93:
                    b7:1a:3f:7c:3f:06:83:3d:21:3b:ed:ac:a6:4a:fa:
                    76:3a:fb:c3:47:68:6b:b0:13:7e:32:00:be:12:3c:
                    fd:1a:47:b8:fe:0d:cc:d8:88:32:2e:89:6e:50:d2:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8F:3A:CD:E2:1D:3E:86:D3:12:4C:5E:8F:83:9F:18:E6:19:39:04
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38372e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:84:40:36:02:5a:0b:2a:fc:21:f9:57:0b:6f:b4:16:e7:
         ae:8f:1c:6d:04:f9:7c:d0:bc:a7:34:25:05:0c:82:88:7e:8a:
         a3:76:cc:db:e4:8e:6b:8d:2a:49:41:6e:8c:14:9a:b8:48:55:
         4b:25:5b:89:9a:99:95:f8:fc:7d:13:0d:27:cd:de:b9:17:61:
         fe:0a:35:76:8c:44:68:03:30:48:ba:e9:3b:e4:5c:a2:15:12:
         31:55:58:3f:34:bd:41:12:59:70:a4:47:30:19:12:ef:07:6e:
         fb:ae:e9:4d:d7:79:0f:65:3b:b6:72:24:b0:c7:93:f7:6a:07:
         57:93:a0:c1:95:29:87:79:85:aa:19:80:10:1f:30:b2:d4:f7:
         8d:68:dc:7b:e3:7e:65:53:6d:d0:88:76:a1:03:f4:ee:3c:bd:
         2e:cb:b5:43:70:3d:bf:bb:b2:6b:50:ee:d0:b6:d7:43:80:ca:
         68:93:df:ee:5a:a9:b0:8d:40:32:aa:cb:34:77:c6:68:a8:b6:
         76:e8:20:27:f2:11:52:aa:dc:f3:75:72:6e:f5:ab:c9:3f:81:
         4a:48:fe:c9:88:fd:d4:a8:c6:31:fb:05:bf:7e:59:8a:d6:be:
         e8:7e:9d:f2:69:59:95:cf:f4:df:5c:4f:0a:e1:6f:4e:87:c0:
         f5:d3:cc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:54:39 2026 by rpki-client