Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39332e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e39332e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          zEbGesNwu0Bfq4e+48opQ5HcZk920/d0aS8MiU/9UyE=
Subject key identifier:   07:33:C0:F6:44:FF:F6:62:3B:53:61:8A:FE:F9:6C:1C:60:B0:D2:0C
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       0E5AC0B472E56511C66769B75DEA97907537707F
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39332e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:00 +0000
ROA not before:           Wed 29 Apr 2026 13:55:00 +0000
ROA not after:            Wed 28 Apr 2027 14:00:00 +0000
asID:                     7908
IP address blocks:        200.47.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5a:c0:b4:72:e5:65:11:c6:67:69:b7:5d:ea:97:90:75:37:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:00 2026 GMT
            Not After : Apr 28 14:00:00 2027 GMT
        Subject: CN=0733C0F644FFF6623B53618AFEF96C1C60B0D20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:4f:a8:ec:fe:51:2b:74:9a:93:2d:33:ea:
                    82:7c:48:c0:6e:5f:8f:d3:72:07:7e:4f:e6:f5:2f:
                    c5:d0:98:b8:c0:2b:25:e3:c6:f2:27:60:f6:12:52:
                    5b:a3:61:57:88:3a:20:ef:d2:a7:f8:79:30:b5:ec:
                    62:f0:83:29:ff:9b:63:35:02:8c:bf:41:60:1e:8d:
                    56:c0:60:67:38:5c:e7:4e:7b:74:4e:0e:e5:ea:df:
                    62:73:3a:97:68:39:dd:8c:56:1c:81:3f:9b:ea:fc:
                    78:37:c3:24:71:84:86:b5:fc:24:63:fb:82:91:bf:
                    52:a8:86:7d:a9:dd:37:e6:53:ad:5b:df:95:95:3b:
                    7a:b6:8d:34:89:22:8a:50:e1:61:d7:25:31:ea:d3:
                    eb:71:7f:19:1f:41:01:6e:06:77:91:24:7c:ab:cd:
                    f5:90:eb:25:9e:bb:e0:37:93:03:87:56:f3:f3:40:
                    ec:53:a3:d5:de:8f:90:ba:64:42:7b:d8:25:ff:62:
                    e8:99:6c:1d:cf:32:b0:d4:8e:e8:59:d1:bd:80:71:
                    0a:67:6f:ea:50:5b:da:a0:17:f2:57:4e:76:83:ac:
                    a4:1e:82:5b:2d:53:1b:54:2a:fe:25:85:f9:ca:ef:
                    c5:3f:fe:20:34:63:6f:3e:2b:8d:2d:16:b2:2d:8f:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:C0:F6:44:FF:F6:62:3B:53:61:8A:FE:F9:6C:1C:60:B0:D2:0C
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39332e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:1e:02:4d:5c:8a:5c:91:7d:3e:b2:1c:66:7c:d1:f2:10:
         98:f9:7d:03:6d:be:1d:b4:58:c8:8a:d7:bf:3e:0a:e7:c3:80:
         31:29:b4:49:da:2e:51:92:c1:5c:ba:fd:1c:26:c2:69:6e:0b:
         d8:aa:b3:b5:2e:f4:89:a3:26:31:78:64:b3:fc:1d:02:e6:2d:
         6b:7f:7b:de:f3:f7:bf:4b:9a:ae:b9:f9:d2:59:3e:ae:d9:5e:
         10:0b:f7:7c:c8:ab:da:eb:58:63:02:85:0e:75:d6:fc:83:d5:
         62:23:4a:f9:ca:bb:cf:ee:97:82:6e:e4:dd:2b:e3:c8:2b:73:
         94:89:10:08:68:d9:c8:b4:06:3c:71:c0:5b:e5:9c:be:26:83:
         e9:8a:77:e6:22:56:1f:5c:a3:5b:6e:6e:40:d6:a3:3a:18:dc:
         f0:b4:d1:cb:61:be:e4:05:cb:3e:1a:2b:2c:aa:e2:be:f4:4b:
         39:20:55:de:7a:d9:b2:d8:f6:01:a1:8e:6d:e4:7d:f5:8a:98:
         6e:58:49:a3:78:e8:f3:48:24:5f:0d:c5:69:23:74:f1:8f:6e:
         bb:03:90:cf:2c:78:17:6f:59:fc:2a:2c:01:9a:3a:90:16:0a:
         13:65:c8:e2:9e:8f:12:a5:e5:e8:ad:de:86:75:0c:4a:65:ea:
         8b:81:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:18:27 2026 by rpki-client