Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39362e302f32342d3234203d3e2037393038.roa
File:                     3230302e34372e39362e302f32342d3234203d3e2037393038.roa (raw, json)
Hash identifier:          7Zw8zJLaEar/lLtohmcgtJ6d+YPG0n9twHOo+VBAy6c=
Subject key identifier:   EE:FE:E2:96:2C:EE:2C:33:3F:F9:0E:D5:10:47:29:9F:3C:34:B4:E8
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       6995D0E29907BE48A0CCDD69ABAC1E3E5A1A5E73
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39362e302f32342d3234203d3e2037393038.roa
Signing time:             Wed 29 Apr 2026 14:00:02 +0000
ROA not before:           Wed 29 Apr 2026 13:55:02 +0000
ROA not after:            Wed 28 Apr 2027 14:00:02 +0000
asID:                     7908
IP address blocks:        200.47.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:95:d0:e2:99:07:be:48:a0:cc:dd:69:ab:ac:1e:3e:5a:1a:5e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Apr 29 13:55:02 2026 GMT
            Not After : Apr 28 14:00:02 2027 GMT
        Subject: CN=EEFEE2962CEE2C333FF90ED51047299F3C34B4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:11:81:b4:89:e4:91:81:a5:67:70:7a:2e:
                    65:a4:68:e0:81:62:22:ff:e7:18:30:e2:60:51:66:
                    cd:52:cc:d0:6d:26:dd:31:5a:45:2b:0e:f8:f0:64:
                    05:1a:68:32:b4:d4:fc:12:5c:ed:8a:7f:0a:ef:45:
                    27:40:0b:26:26:59:9d:8b:b0:d0:75:e5:fb:c2:f0:
                    7f:ac:ca:54:04:77:38:cd:f0:f7:5f:d9:03:4c:a3:
                    6a:0c:40:30:52:08:ff:55:15:d8:98:14:e1:89:e6:
                    77:5d:d3:8c:c5:be:a1:80:ac:64:cf:e5:e5:bf:97:
                    4f:ff:ca:80:26:23:2f:38:33:d9:fd:9c:73:4a:3b:
                    02:7a:0f:fd:e7:51:af:a8:f4:a8:a3:c0:40:0d:d5:
                    99:e9:9e:9d:82:50:01:1e:35:ed:dd:a9:a6:61:9d:
                    97:51:16:c9:e6:e9:f9:ba:30:34:71:b6:21:56:bf:
                    72:13:e8:93:98:e7:9d:88:4c:e7:ac:0d:f1:3c:47:
                    09:cc:1a:9d:b5:6b:60:5a:85:d4:9a:75:c1:2e:aa:
                    9b:bb:34:9c:49:a5:60:86:70:0a:18:02:a5:36:c3:
                    26:63:d2:e5:55:d3:5e:86:81:f3:c6:45:5c:97:01:
                    a1:db:87:f1:aa:e7:00:ed:9d:74:da:9a:86:ac:65:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FE:E2:96:2C:EE:2C:33:3F:F9:0E:D5:10:47:29:9F:3C:34:B4:E8
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e39362e302f32342d3234203d3e2037393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:52:49:e8:da:ca:39:28:cf:03:7b:12:09:3e:9e:31:e7:b7:
         a8:02:57:3a:d6:49:01:45:16:7b:39:9d:85:50:e8:21:ec:71:
         97:3b:c7:b9:fd:b1:97:bb:6e:9a:f4:23:86:5d:eb:14:cb:04:
         5e:b9:59:66:ca:0d:b1:f6:15:72:13:35:f7:c6:71:ee:45:fd:
         1a:9a:ad:fa:48:85:e8:8f:b9:97:ee:39:f1:1c:ab:bf:fb:58:
         cc:76:3c:b1:eb:55:fe:a3:c4:38:00:ab:5b:89:cf:c5:1c:64:
         fc:de:f4:64:6a:c0:d7:5b:fb:9a:7f:c7:bc:ae:4b:3f:29:1e:
         df:fd:1e:cf:06:28:5e:68:bb:72:96:18:bf:84:c3:f0:9e:46:
         fd:b3:b8:e6:16:22:93:64:b2:82:59:d9:55:e5:bf:5c:6a:da:
         a7:7a:1c:c6:9b:9c:62:e3:81:59:7f:a8:90:0f:ce:69:72:3e:
         ae:90:85:cf:b4:fb:c5:39:fa:ec:b6:05:20:75:19:d1:45:5f:
         a6:31:f3:9d:06:0e:5c:6a:53:ea:54:1f:81:82:c0:a2:76:71:
         86:ba:d1:f6:5f:15:52:04:2f:b7:c6:4c:a6:11:85:b7:5d:00:
         4b:0e:1e:ca:93:11:01:29:e6:32:e0:1e:a2:51:19:83:45:44:
         5d:05:e7:c8
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUaZXQ4pkHvkigzN1pq6wePloaXnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNjA0MjkxMzU1MDJaFw0yNzA0MjgxNDAwMDJaMDMxMTAvBgNV
BAMTKEVFRkVFMjk2MkNFRTJDMzMzRkY5MEVENTEwNDcyOTlGM0MzNEI0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXixGBtInkkYGlZ3B6LmWkaOCB
YiL/5xgw4mBRZs1SzNBtJt0xWkUrDvjwZAUaaDK01PwSXO2KfwrvRSdACyYmWZ2L
sNB15fvC8H+sylQEdzjN8Pdf2QNMo2oMQDBSCP9VFdiYFOGJ5ndd04zFvqGArGTP
5eW/l0//yoAmIy84M9n9nHNKOwJ6D/3nUa+o9KijwEAN1Znpnp2CUAEeNe3dqaZh
nZdRFsnm6fm6MDRxtiFWv3IT6JOY552ITOesDfE8RwnMGp21a2BahdSadcEuqpu7
NJxJpWCGcAoYAqU2wyZj0uVV016GgfPGRVyXAaHbh/Gq5wDtnXTamoasZc/FAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU7v7ilizuLDM/+Q7VEEcpnzw0tOgwHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzkzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzkzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyC9gMA0GCSqG
SIb3DQEBCwUAA4IBAQB2Ukno2so5KM8DexIJPp4x57eoAlc61kkBRRZ7OZ2FUOgh
7HGXO8e5/bGXu26a9COGXesUywReuVlmyg2x9hVyEzX3xnHuRf0amq36SIXoj7mX
7jnxHKu/+1jMdjyx61X+o8Q4AKtbic/FHGT83vRkasDXW/uaf8e8rks/KR7f/R7P
BiheaLtylhi/hMPwnkb9s7jmFiKTZLKCWdlV5b9catqnehzGm5xi44FZf6iQD85p
cj6ukIXPtPvFOfrstgUgdRnRRV+mMfOdBg5calPqVB+BgsCidnGGutH2XxVSBC+3
xkymEYW3XQBLDh7KkxEBKeYy4B6iURmDRURdBefI
-----END CERTIFICATE-----
Generated at Wed May 13 16:42:52 2026 by rpki-client