Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36352e302f32342d3234203d3e203532333836.roa
File:                     3230302e38352e36352e302f32342d3234203d3e203532333836.roa (raw, json)
Hash identifier:          0nI3fAhheWFsgRfAm7QOnkQhJBneUZkXd1zbtCJas7c=
Subject key identifier:   8E:B9:A7:C4:5C:AD:43:84:DB:5A:67:45:EC:92:19:40:5B:A3:DA:79
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       774779427D4F0818D251C8D04B23F1139ADC8883
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36352e302f32342d3234203d3e203532333836.roa
Signing time:             Tue 31 Mar 2026 13:36:58 +0000
ROA not before:           Tue 31 Mar 2026 13:31:58 +0000
ROA not after:            Tue 30 Mar 2027 13:36:58 +0000
asID:                     52386
IP address blocks:        200.85.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 18:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:47:79:42:7d:4f:08:18:d2:51:c8:d0:4b:23:f1:13:9a:dc:88:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Mar 31 13:31:58 2026 GMT
            Not After : Mar 30 13:36:58 2027 GMT
        Subject: CN=8EB9A7C45CAD4384DB5A6745EC9219405BA3DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:84:86:2c:69:69:41:80:45:e5:6f:cf:06:
                    97:af:92:a4:39:59:a0:e1:cd:36:be:e5:33:49:72:
                    e3:0a:41:f4:30:a7:72:52:0e:db:2c:ca:08:ea:e9:
                    d2:8e:ef:d9:68:0e:ab:1c:e3:63:47:1c:0a:65:bc:
                    3b:f9:fd:38:9e:6b:e6:8a:03:c3:93:cd:21:d1:27:
                    c6:d7:8c:72:77:3f:62:96:2e:62:6b:e4:bf:ff:8e:
                    a7:8a:77:aa:90:9c:30:89:66:3c:4c:a2:22:db:eb:
                    e3:59:d8:e9:6c:63:4b:4f:c1:01:67:52:19:26:be:
                    b1:32:23:ca:04:a5:54:d0:ac:c8:fe:d1:38:93:66:
                    98:93:cf:dd:dc:2b:80:a7:4a:99:1f:57:8f:c1:2f:
                    dc:aa:b6:9a:3d:c4:26:3a:77:84:9a:c9:d3:f8:66:
                    99:87:1f:b9:e5:1d:fb:ff:69:e9:55:31:55:3c:c5:
                    68:4f:8a:0c:9a:7f:ac:7c:e2:eb:09:79:e1:5e:13:
                    f3:38:d6:fa:12:5c:47:c3:f9:ac:eb:ac:b6:eb:32:
                    33:22:0c:28:8b:30:3c:29:5a:b0:69:8e:73:2c:da:
                    07:05:96:5a:09:7d:c9:f7:1a:59:b8:e1:fa:61:fc:
                    19:91:3b:29:96:6f:a3:f2:4e:8b:aa:7a:98:fc:ec:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B9:A7:C4:5C:AD:43:84:DB:5A:67:45:EC:92:19:40:5B:A3:DA:79
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36352e302f32342d3234203d3e203532333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:61:37:fe:8a:fb:5c:a7:d1:2e:e9:11:53:49:c6:d1:6d:47:
         a7:2a:69:fb:b4:f6:5f:45:6d:ca:4a:97:51:e6:3a:bd:0c:2a:
         2d:b9:f4:35:05:a5:dc:34:45:e5:fc:5a:38:b8:5f:45:d7:19:
         71:3a:33:40:8d:5e:d1:e4:72:de:37:d0:1e:09:28:f4:d8:b7:
         3d:97:82:fe:6a:0f:60:3f:c0:a3:ae:75:cc:6c:b3:e6:94:56:
         21:99:34:13:e4:49:67:3b:f5:00:d4:28:55:7d:2c:76:84:f1:
         c7:ad:44:1b:14:60:a2:b5:37:d2:1c:6a:e3:e2:04:fc:ff:6c:
         e4:28:7a:d6:d8:b5:22:54:24:63:d8:41:d1:4c:01:91:01:8d:
         72:cf:4f:77:c1:99:80:31:f2:5e:0d:13:21:08:42:59:07:4d:
         f4:92:e7:67:83:35:90:96:70:f8:84:42:2b:e1:ca:48:d4:4f:
         13:2b:84:4c:c9:dd:7b:01:b3:7e:05:30:b8:00:f1:bd:ac:07:
         66:cd:83:a0:10:d0:42:48:18:89:cf:6b:de:7b:11:db:db:d4:
         a9:a9:e9:df:58:93:51:33:8b:0b:17:be:08:a3:bc:aa:f8:e8:
         b4:30:c0:5d:73:23:5f:67:f1:8c:20:cd:f1:f8:57:69:da:df:
         66:50:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 08:47:36 2026 by rpki-client