Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36342e302f32342d3234203d3e2038303533.roa
File:                     3230302e38352e36342e302f32342d3234203d3e2038303533.roa (raw, json)
Hash identifier:          SGBM3GVmvYrznKevAeon+PIDuuMhsfEKEcpby8Zk0yg=
Subject key identifier:   A6:3F:4B:4C:48:33:6A:71:62:B1:FD:45:B7:05:A1:3E:CC:6F:73:90
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       78C4E5CDD6380386D04A5DDAD0FBDADE4F253E5A
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36342e302f32342d3234203d3e2038303533.roa
Signing time:             Thu 04 Jun 2026 18:15:00 +0000
ROA not before:           Thu 04 Jun 2026 18:10:00 +0000
ROA not after:            Thu 03 Jun 2027 18:15:00 +0000
asID:                     8053
IP address blocks:        200.85.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:e5:cd:d6:38:03:86:d0:4a:5d:da:d0:fb:da:de:4f:25:3e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Jun  4 18:10:00 2026 GMT
            Not After : Jun  3 18:15:00 2027 GMT
        Subject: CN=A63F4B4C48336A7162B1FD45B705A13ECC6F7390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:8a:08:d4:d7:10:c2:04:0f:ab:e7:58:38:
                    ad:bb:da:05:2b:81:27:21:89:c4:28:99:09:8c:ca:
                    78:50:59:a0:7e:62:69:05:79:e6:96:7d:91:aa:3f:
                    44:49:c6:cc:ad:fb:9f:e1:63:8b:e0:29:e2:40:c5:
                    df:67:65:41:db:e5:3b:7a:81:66:04:d9:56:c4:b1:
                    6a:b1:29:fd:9d:79:70:da:2f:df:79:a7:39:f4:25:
                    b2:8f:10:02:b9:90:9f:06:28:3d:e9:cc:f5:c8:8f:
                    70:f0:3f:be:90:d8:22:c3:8b:c5:ec:04:f0:bb:a1:
                    cf:9e:4d:7e:19:f3:57:db:91:d7:9e:a7:1b:13:d8:
                    1d:55:16:ab:f8:b2:8c:2c:79:6f:e4:b0:be:b4:eb:
                    79:cf:43:76:5c:6a:5c:62:3c:ea:a3:18:62:c7:3a:
                    3f:62:5c:24:e1:b3:de:3d:c9:c5:a0:34:a3:34:cd:
                    b0:a1:f8:66:0c:1f:91:72:39:99:d2:28:d9:5a:0f:
                    ad:af:86:0e:22:09:af:11:fb:4c:9c:88:ee:59:0c:
                    ea:7f:a1:f9:d9:46:58:07:96:99:e5:3b:8a:79:05:
                    51:77:16:74:49:43:6d:21:d7:6a:fc:83:9f:69:48:
                    c1:f6:75:47:06:37:87:fb:3f:9d:19:fe:67:36:15:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:4B:4C:48:33:6A:71:62:B1:FD:45:B7:05:A1:3E:CC:6F:73:90
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36342e302f32342d3234203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:92:39:cc:08:cd:f9:bb:07:00:ba:be:dc:0e:4e:c4:30:
         4e:ef:42:19:a7:97:e4:1a:d2:f4:4f:71:6d:cb:c2:86:36:bd:
         ea:f1:8e:0e:6a:79:31:ea:18:ae:8b:d7:1b:d7:17:b8:42:26:
         cf:61:e4:50:7f:a5:eb:02:31:28:3f:21:4f:9f:42:dc:ef:3a:
         08:36:15:cc:69:57:f8:f3:d7:d3:85:aa:e7:57:c0:2a:16:f4:
         b4:cc:23:c9:b5:cf:26:e6:86:19:0e:84:97:7c:94:ad:92:66:
         1c:45:9b:58:2e:a2:ac:da:6d:ce:34:79:b4:32:1d:d7:8d:0f:
         5f:f5:ff:e9:49:0b:4a:0a:d4:82:01:fb:13:7a:21:bf:cc:95:
         09:9d:a7:ad:a4:08:f9:0d:d1:ef:98:28:5a:7b:6f:09:2c:0d:
         b4:27:69:45:4f:43:0f:52:cb:72:9c:44:68:19:15:23:ba:39:
         83:ae:ff:ff:75:a4:8e:c7:97:6c:24:6b:30:8f:11:cf:0d:18:
         21:63:f7:df:48:9a:c2:6a:e0:6f:54:85:b8:15:78:58:70:e5:
         56:3b:80:e2:91:39:d3:f7:3b:80:9e:ae:c2:04:dd:0f:88:34:
         80:7a:a0:65:d0:e7:5a:a8:11:f2:af:e1:25:03:aa:4a:a8:1d:
         6d:e4:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:00:12 2026 by rpki-client