Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e36342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          8dprQ0KXN0cL5Vq0L16aPycZatlap0KNxShjUImx364=
Subject key identifier:   3E:71:61:82:91:87:A5:70:09:64:01:C2:94:AD:4E:EC:27:05:E7:F4
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       574443E9D0416259145CA599A9E548F32576C3BF
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:28 +0000
ROA not before:           Mon 21 Apr 2025 01:10:28 +0000
ROA not after:            Mon 20 Apr 2026 01:15:28 +0000
asID:                     26593
IP address blocks:        200.108.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:44:43:e9:d0:41:62:59:14:5c:a5:99:a9:e5:48:f3:25:76:c3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:28 2025 GMT
            Not After : Apr 20 01:15:28 2026 GMT
        Subject: CN=3E7161829187A570096401C294AD4EEC2705E7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:20:3a:f2:0a:ee:fc:ff:28:20:61:9c:2a:
                    ef:1d:84:76:44:2b:be:69:39:0d:73:c1:b8:66:34:
                    4d:fb:88:38:d1:c4:a6:41:99:de:12:4b:76:cb:60:
                    f9:e0:fe:da:35:33:84:e6:62:0d:a3:0f:72:4f:27:
                    10:fa:bc:d9:5d:c5:3b:5b:f4:56:de:fd:8f:0c:eb:
                    73:ff:c6:36:e7:3a:f6:d2:97:66:54:77:43:83:5d:
                    53:fa:bc:c7:74:be:23:bf:da:57:19:33:86:f0:b4:
                    06:0e:8c:b5:b3:50:4d:19:e8:46:2d:eb:a8:52:de:
                    14:64:47:f8:c5:3d:16:48:d0:2c:20:28:38:5b:80:
                    30:3c:e4:30:fc:ff:b6:c2:c5:37:db:40:94:4c:a6:
                    06:e2:a1:c4:f9:c8:ab:6d:ff:a7:0b:83:59:47:38:
                    91:10:da:bd:dd:a0:24:e3:34:56:09:d7:09:1e:e4:
                    e2:d6:a4:71:19:30:6a:96:f4:64:fa:82:92:27:a4:
                    6e:9e:13:4e:7b:65:8e:60:b6:c3:ea:05:dd:9f:06:
                    56:58:23:f8:ad:6b:95:71:47:a1:f7:5e:00:1c:bf:
                    09:a2:5b:8b:af:02:6a:1b:f8:0e:0a:64:b0:15:16:
                    24:3e:b9:73:37:65:84:0f:6b:29:11:9f:67:76:d7:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:71:61:82:91:87:A5:70:09:64:01:C2:94:AD:4E:EC:27:05:E7:F4
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:51:79:a9:20:3b:d1:17:92:bc:59:3c:3a:a3:85:f1:96:
         56:a3:8f:80:05:b5:d5:5f:26:98:57:c9:e6:b2:a5:74:9c:3c:
         dd:2b:8b:77:d2:26:8e:eb:33:05:1b:12:76:0e:1e:b4:5c:83:
         9d:24:d7:91:cb:eb:f3:df:95:2b:fb:04:06:34:e1:39:a1:1c:
         f8:9b:eb:71:dc:59:fa:15:7c:ad:78:bd:d9:be:f5:78:63:2e:
         23:6a:ba:ed:fc:51:da:e9:d4:24:43:d1:38:5a:71:fc:9a:b6:
         37:5f:bf:58:00:fd:88:5a:65:99:73:55:72:b2:c2:11:a9:5e:
         10:77:65:15:fd:58:c2:71:2c:2c:cc:d0:a4:f9:91:37:3c:95:
         50:ba:1f:3f:39:7f:79:b3:d9:8d:83:72:8f:69:d7:a1:6c:17:
         a1:30:f7:7a:50:25:cd:65:e3:f7:8e:fa:4f:94:fd:41:65:5b:
         40:84:84:0e:e5:43:69:f4:fa:55:57:1c:7a:2e:e6:64:bb:8d:
         98:d7:58:33:e1:e4:70:90:d1:bd:f2:6a:11:fe:03:08:46:06:
         b5:ef:d2:a2:22:ee:9c:1e:72:61:1a:11:18:c6:54:5c:9c:a2:
         f6:07:2c:3b:8a:b9:07:c2:58:65:dc:e4:e6:55:f7:84:2f:b4:
         cb:1f:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net