Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36382e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e36382e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          NOkQCbUsarO4sj22BITNccRmULJTcG6k8LpUsbb35mM=
Subject key identifier:   F6:E5:20:C4:3E:33:6F:9C:1D:99:84:63:72:D8:AC:98:1A:EF:61:1B
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       4580A22C4C2BC9E96328DFCC64AECD4C834AD7CC
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36382e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:30 +0000
ROA not before:           Mon 21 Apr 2025 01:10:30 +0000
ROA not after:            Mon 20 Apr 2026 01:15:30 +0000
asID:                     26593
IP address blocks:        200.108.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:80:a2:2c:4c:2b:c9:e9:63:28:df:cc:64:ae:cd:4c:83:4a:d7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:30 2025 GMT
            Not After : Apr 20 01:15:30 2026 GMT
        Subject: CN=F6E520C43E336F9C1D99846372D8AC981AEF611B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:93:b5:88:10:81:00:99:83:d6:16:3e:e4:
                    f8:5a:6e:87:90:04:b7:a7:77:5d:c8:df:49:c7:eb:
                    e0:29:4c:f8:b9:14:35:fb:fd:01:03:78:65:d3:c7:
                    e9:f0:57:2a:66:1a:9b:72:48:9b:ce:90:95:50:2a:
                    dc:23:fd:69:9a:0e:32:72:2b:1f:2a:69:d5:a9:23:
                    91:ca:1f:b2:8b:03:8f:3a:be:c4:72:32:d0:56:20:
                    b0:d4:26:16:28:ac:62:95:c3:7a:28:df:0f:38:44:
                    96:7f:67:f8:ab:c0:1a:cf:57:22:12:22:74:c2:12:
                    69:96:bd:b7:f5:a8:bf:ba:29:04:64:01:2a:a5:0d:
                    12:e9:7e:25:63:43:da:97:e6:b8:37:e2:5d:40:cb:
                    3b:30:24:72:0f:eb:5e:3c:df:d4:bf:06:5e:58:22:
                    4e:38:eb:d9:65:a5:a3:31:90:dd:1b:08:17:6b:0e:
                    49:48:6c:34:11:ac:fe:4c:f1:2b:5b:36:33:ce:f9:
                    f5:49:35:50:eb:38:7c:af:0d:04:06:9e:19:95:40:
                    6b:27:0e:6d:a2:2d:36:35:de:e6:f2:fa:33:e5:18:
                    a5:cf:b1:0b:ee:a2:62:4c:78:6b:20:37:16:27:67:
                    0d:67:b3:82:e7:e7:b5:8b:9b:4d:bd:44:ce:e6:e3:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E5:20:C4:3E:33:6F:9C:1D:99:84:63:72:D8:AC:98:1A:EF:61:1B
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36382e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:3e:f4:06:52:64:06:b8:17:61:c8:14:d0:2d:77:79:28:75:
         bf:6e:8d:fd:16:13:79:7c:0f:99:58:46:ac:23:67:9b:45:d4:
         39:b5:1d:50:c4:5a:0f:69:1f:c8:2e:07:95:90:01:77:a1:f6:
         5e:18:32:bb:a5:1d:c9:ac:94:32:59:53:9a:bd:a9:ce:95:21:
         68:51:87:e6:48:4b:1f:c0:98:40:4e:3b:f7:11:66:fb:83:13:
         8b:2c:32:7d:f0:85:f1:f7:6d:0f:2c:53:3d:25:77:b3:4c:f2:
         f3:4a:f2:ad:36:fb:b3:e4:87:ba:fe:97:af:3d:a6:56:3e:2b:
         15:f0:50:08:08:b0:63:56:04:44:e4:7c:a5:bc:5b:bf:89:43:
         cb:cc:7c:1e:2f:29:2a:e6:36:9e:45:22:08:d1:85:a3:15:04:
         ed:35:be:b3:51:88:8c:ac:0f:fb:b5:14:16:0d:c0:35:ea:fb:
         e4:e1:fb:40:9e:8b:14:4d:f6:1e:56:f0:ca:3f:2f:14:d5:2d:
         07:3f:74:15:68:7d:c0:31:44:dc:06:64:52:b5:45:f1:52:37:
         b5:47:f8:7a:f4:2b:29:cf:c2:b5:80:ea:58:e1:25:d4:22:af:
         e3:8b:c7:f3:d0:9a:b1:36:67:0c:58:91:25:00:4f:ec:9e:7b:
         7c:e6:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net