Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36352e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e36352e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          GFIfvaZ/JbhqgtYl6lDrz3JCJ5aZEHcUKi8+K2t3vCw=
Subject key identifier:   C9:99:5A:38:1B:A1:68:BC:D1:6E:BE:CA:28:D9:8B:A9:AE:23:7D:C4
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       610167EBC4FBEA400E442F8B72D2F7A11547A7D7
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36352e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:29 +0000
ROA not before:           Mon 21 Apr 2025 01:10:29 +0000
ROA not after:            Mon 20 Apr 2026 01:15:29 +0000
asID:                     26593
IP address blocks:        200.108.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:01:67:eb:c4:fb:ea:40:0e:44:2f:8b:72:d2:f7:a1:15:47:a7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:29 2025 GMT
            Not After : Apr 20 01:15:29 2026 GMT
        Subject: CN=C9995A381BA168BCD16EBECA28D98BA9AE237DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:22:d0:42:4d:03:ce:3c:e0:7b:81:c5:78:
                    57:ac:f8:96:98:56:5d:44:21:eb:48:c9:93:be:60:
                    47:18:53:4c:73:c6:7c:cd:cb:29:50:cf:03:0e:3e:
                    61:18:b9:8a:b5:3f:30:23:1a:ae:b8:00:1c:90:6b:
                    f1:eb:d7:3f:a0:5b:7d:62:22:d9:00:98:b8:bf:bc:
                    59:12:0e:d3:1a:9f:52:6e:8c:91:22:ac:2f:06:cf:
                    23:d1:71:9c:8d:51:9b:23:26:f4:e8:eb:4f:ba:10:
                    0d:45:45:87:64:d3:92:28:ec:2d:86:0b:d0:c2:c8:
                    93:f7:06:b3:e9:68:aa:ac:40:df:93:20:79:45:7d:
                    e6:c8:f3:2f:3d:e7:26:54:34:67:1e:4f:84:bb:af:
                    9d:52:47:cc:e8:d7:f7:f4:b6:9c:cf:14:3e:40:fb:
                    b4:73:bc:06:36:19:e7:dd:8c:bd:49:66:73:4e:42:
                    25:f3:66:4f:f3:0f:5d:66:af:f3:34:74:40:59:e7:
                    7b:15:60:58:47:8a:4a:29:c3:f8:cd:4d:c0:74:ea:
                    2c:e5:89:65:8e:70:6e:34:88:30:25:8a:8b:58:8b:
                    cc:79:d2:22:5f:6f:a2:7d:d3:38:da:ca:93:37:25:
                    00:65:5b:74:96:b0:10:63:fb:0a:c0:2d:29:80:ad:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:5A:38:1B:A1:68:BC:D1:6E:BE:CA:28:D9:8B:A9:AE:23:7D:C4
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36352e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:51:36:75:65:98:5b:4e:3c:01:0b:1c:f4:8c:ae:17:e6:e4:
         2e:63:8d:96:7c:81:25:59:78:d4:fb:d0:17:67:12:23:a4:d7:
         f6:6f:4d:dc:6b:1e:f1:3d:65:93:ac:02:b0:29:fc:25:18:16:
         15:d2:61:80:ba:06:5b:d9:2b:83:83:f9:c8:96:97:d7:08:35:
         a6:04:15:eb:36:c4:5a:b4:6f:76:8c:d4:39:33:03:6b:a4:f8:
         7f:26:b1:3e:9f:ee:2a:7e:e9:29:3e:38:7b:e0:3e:6a:59:6f:
         17:7e:f9:7d:ff:c4:40:02:bc:97:fa:6d:67:90:da:09:c9:db:
         74:26:57:e7:94:d1:17:b2:db:e3:23:b0:4c:52:6b:c1:71:bb:
         db:02:59:bf:95:07:22:80:40:5a:62:75:8f:05:e8:d9:2c:b3:
         fd:bf:2e:6a:a7:4d:d9:9a:34:02:65:f8:58:d5:84:e4:e4:23:
         fa:46:27:e0:e3:34:00:96:6b:37:b5:23:da:db:4e:ad:91:81:
         4e:bd:fa:a2:fd:ae:2b:31:8d:19:05:0c:bd:5d:3e:5a:e0:85:
         55:68:59:9f:36:b2:01:68:bd:f4:9c:76:1b:4d:d8:7a:29:45:
         62:65:aa:90:7e:9c:f0:cb:aa:e4:90:78:86:70:93:1e:13:23:
         f3:67:a8:2e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYQFn68T76kAORC+LctL3oRVHp9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxM0M5M0E2NkM3RTQ3QkI1Qjg2MDkwMDg3MzIyQkMy
RDY5ODFDQTAeFw0yNTA0MjEwMTEwMjlaFw0yNjA0MjAwMTE1MjlaMDMxMTAvBgNV
BAMTKEM5OTk1QTM4MUJBMTY4QkNEMTZFQkVDQTI4RDk4QkE5QUUyMzdEQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzSLQQk0Dzjzge4HFeFes+JaY
Vl1EIetIyZO+YEcYU0xzxnzNyylQzwMOPmEYuYq1PzAjGq64AByQa/Hr1z+gW31i
ItkAmLi/vFkSDtMan1JujJEirC8GzyPRcZyNUZsjJvTo60+6EA1FRYdk05Io7C2G
C9DCyJP3BrPpaKqsQN+TIHlFfebI8y895yZUNGceT4S7r51SR8zo1/f0tpzPFD5A
+7RzvAY2GefdjL1JZnNOQiXzZk/zD11mr/M0dEBZ53sVYFhHikopw/jNTcB06izl
iWWOcG40iDAliotYi8x50iJfb6J90zjaypM3JQBlW3SWsBBj+wrALSmArR53AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyZlaOBuhaLzRbr7KKNmLqa4jfcQwHwYDVR0j
BBgwFoAU7BPJOmbH5Hu1uGCQCHMivC1pgcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzAzRTM2RjY1RkVCREFGMDkxNTQ5ODFBRTMyNjdEN0Yx
OEIwOUE5MDEyM0ZGN0E1MzQ5RkUzM0JDRDY1QkFCLzAvRUMxM0M5M0E2NkM3RTQ3
QkI1Qjg2MDkwMDg3MzIyQkMyRDY5ODFDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzEzQzkzQTY2QzdFNDdCQjVC
ODYwOTAwODczMjJCQzJENjk4MUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcwM0UzNkY2NUZFQkRBRjA5MTU0OTgxQUUzMjY3RDdGMThCMDlBOTAx
MjNGRjdBNTM0OUZFMzNCQ0Q2NUJBQi8wLzMyMzAzMDJlMzEzMDM4MmUzNjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhsQTAN
BgkqhkiG9w0BAQsFAAOCAQEAElE2dWWYW048AQsc9IyuF+bkLmONlnyBJVl41PvQ
F2cSI6TX9m9N3Gse8T1lk6wCsCn8JRgWFdJhgLoGW9krg4P5yJaX1wg1pgQV6zbE
WrRvdozUOTMDa6T4fyaxPp/uKn7pKT44e+A+allvF375ff/EQAK8l/ptZ5DaCcnb
dCZX55TRF7Lb4yOwTFJrwXG72wJZv5UHIoBAWmJ1jwXo2Syz/b8uaqdN2Zo0AmX4
WNWE5OQj+kYn4OM0AJZrN7Uj2ttOrZGBTr36ov2uKzGNGQUMvV0+WuCFVWhZnzay
AWi99Jx2G03YeilFYmWqkH6c8Muq5JB4hnCTHhMj82eoLg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net