Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39322e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e39322e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          +Z5N1knbkxwnK8UL3HfCULGAu/2M0egViBis/lfBp4w=
Subject key identifier:   22:03:48:D6:7F:10:13:1D:5D:56:67:8B:70:93:43:66:87:44:48:28
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       1ED7F1A998EBE1B8086753D66DBA310A3E2D67DA
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39322e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:18 +0000
ROA not before:           Wed 29 Apr 2026 13:55:18 +0000
ROA not after:            Wed 28 Apr 2027 14:00:18 +0000
asID:                     7908
IP address blocks:        200.47.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d7:f1:a9:98:eb:e1:b8:08:67:53:d6:6d:ba:31:0a:3e:2d:67:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:18 2026 GMT
            Not After : Apr 28 14:00:18 2027 GMT
        Subject: CN=220348D67F10131D5D56678B7093436687444828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:9d:c2:78:f2:52:61:39:4c:3e:ba:8d:86:
                    c6:91:73:ff:30:88:d1:b9:27:8f:e6:7c:dc:43:81:
                    67:54:37:22:9f:2e:be:67:60:b8:f4:3c:03:47:92:
                    21:d3:cf:20:52:81:a8:f8:aa:b5:d2:82:7b:4e:0a:
                    9b:a3:ef:ec:0b:53:a1:84:4b:32:5e:53:c4:4d:c9:
                    ec:92:69:6b:17:9a:cc:7e:2b:b8:da:00:15:df:2b:
                    e2:ef:70:30:5b:ac:53:d1:d4:f3:2f:f7:3a:34:9a:
                    ad:9c:fb:81:e8:75:68:b9:a8:de:55:f0:05:5a:07:
                    a7:7d:dd:ee:ee:3b:e2:11:ef:ab:36:c5:03:f6:b4:
                    df:57:29:75:7b:50:13:6f:4b:db:1c:a2:55:79:63:
                    ae:08:41:51:69:25:34:51:81:0d:5e:5a:59:42:ab:
                    19:8d:82:a4:fb:41:59:27:b1:ee:b6:cb:04:a6:d4:
                    86:d0:dd:b8:18:12:e9:2a:9f:38:d5:83:4a:b0:cd:
                    ed:2f:86:c3:61:c7:5d:6e:31:2d:80:2a:2f:fb:47:
                    01:1a:96:d4:9f:01:d6:7a:25:df:bf:ca:6e:36:04:
                    91:cc:f1:c3:45:fb:6a:e6:6f:32:13:26:1d:7a:d5:
                    4e:2e:d3:38:49:f7:8d:ee:4c:1d:a1:ea:d2:9a:f7:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:03:48:D6:7F:10:13:1D:5D:56:67:8B:70:93:43:66:87:44:48:28
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39322e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:99:27:6b:ba:48:90:d1:4d:a4:a2:f7:44:bc:9a:c9:4c:fd:
         56:e1:13:d3:59:6b:99:e8:3d:10:f8:11:5b:d7:6f:5d:03:c4:
         a4:f2:79:9a:5e:2b:43:ab:3f:d7:04:90:43:24:68:20:7c:6c:
         8b:ff:f8:83:5f:93:39:f2:21:99:b7:d4:da:be:1d:79:94:72:
         d7:32:bd:5c:b5:e8:3a:7d:24:84:20:40:e3:e4:6b:eb:b1:67:
         2d:73:84:f2:c4:fb:b0:9e:3d:b0:50:54:f4:66:e4:78:34:35:
         ed:19:b9:1d:99:88:fd:0a:ea:16:f3:23:7a:47:bc:35:b4:f5:
         20:e2:53:c5:c3:e4:2a:ee:9d:2b:e6:64:03:4f:1c:2d:a8:35:
         f6:4e:b8:49:4b:6b:43:b3:13:8a:5a:96:25:ff:b0:6f:db:78:
         b1:71:e2:08:30:42:1e:5e:ac:a5:cc:c1:dc:c9:de:72:0b:1d:
         dd:7b:76:57:e5:39:80:d5:da:b6:6e:59:dc:27:11:b5:5b:af:
         54:25:22:71:e3:ea:aa:27:f8:30:a5:8a:11:e0:cc:bf:43:b3:
         6a:2f:ec:1d:9c:00:55:f3:8d:9e:66:1f:c5:79:1a:c1:9f:c3:
         26:d3:a0:73:af:9e:9d:13:c9:4b:55:4c:fb:f2:34:fd:f1:f3:
         9b:a0:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:46 2026 by rpki-client