Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37322e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          axducYY9lmQBFLtxyYOAVnGcJtsRTr4Kl0Occw5GPGQ=
Subject key identifier:   6A:44:2B:9E:83:F9:27:2C:C1:A3:46:CD:C7:71:46:D0:CA:CB:AF:39
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       17A7C5B6A8F7ED5ACC02ADB4CAFC6AE339216657
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:28 +0000
ROA not before:           Mon 21 Apr 2025 01:10:28 +0000
ROA not after:            Mon 20 Apr 2026 01:15:28 +0000
asID:                     26593
IP address blocks:        200.108.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a7:c5:b6:a8:f7:ed:5a:cc:02:ad:b4:ca:fc:6a:e3:39:21:66:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:28 2025 GMT
            Not After : Apr 20 01:15:28 2026 GMT
        Subject: CN=6A442B9E83F9272CC1A346CDC77146D0CACBAF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:05:7d:9e:05:48:b7:01:02:16:61:ba:50:c2:
                    32:a3:f7:44:4b:73:6e:10:0c:89:be:fa:63:0d:86:
                    2d:0b:47:42:07:20:a8:7f:8c:ee:a4:77:06:be:22:
                    fd:89:33:fe:fb:2f:ea:83:a0:81:d4:c6:dd:f5:31:
                    81:74:20:5f:0d:6f:78:59:af:3f:f8:af:07:e9:59:
                    90:89:ab:d2:10:10:9b:ec:fd:80:cd:ff:a0:e5:cd:
                    40:74:a3:bb:15:c2:bb:6d:ab:ec:ff:c3:8f:7b:7e:
                    ac:77:5c:c2:aa:a1:9f:e1:be:b3:43:12:3a:54:19:
                    f0:24:84:cf:0d:3f:2e:dd:cf:5d:ba:e3:5b:2f:47:
                    a1:29:db:b1:ad:ac:1a:80:63:42:a2:58:53:e1:93:
                    47:f7:c1:f6:ca:e5:59:28:bf:ae:f0:25:83:73:56:
                    14:dc:33:2d:8a:7a:93:9f:1c:32:e9:31:90:be:3d:
                    a4:fd:34:16:64:c5:70:fb:d7:25:34:66:83:f5:4c:
                    32:2e:4c:2f:44:aa:8d:f1:6a:1c:b9:d2:5c:d9:59:
                    70:c3:c7:35:9a:8e:ab:40:e7:04:b0:eb:71:75:d4:
                    a3:02:91:ca:cd:cb:58:67:b6:7d:01:ca:4d:82:72:
                    e3:b5:4a:76:a6:c1:bd:71:9c:df:e1:ef:a1:e6:09:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:44:2B:9E:83:F9:27:2C:C1:A3:46:CD:C7:71:46:D0:CA:CB:AF:39
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:79:04:fb:d2:a5:9d:26:55:fc:2f:08:04:f9:12:d3:6e:
         b4:3e:76:bf:39:3f:3a:57:56:2d:da:64:d0:14:1f:8a:f9:50:
         31:71:2e:da:91:1d:40:f5:07:13:4c:e9:70:a4:53:74:a0:43:
         bb:5c:00:f9:ac:53:27:84:52:a6:50:f3:fd:30:c4:c1:88:30:
         fb:22:35:9b:33:4b:af:27:58:3c:f3:80:1c:e4:d7:e3:2e:09:
         d4:17:03:d5:8e:e3:38:c0:1c:e0:5f:92:18:b1:f2:a5:8a:09:
         af:23:36:a2:cb:09:81:30:73:92:e6:2b:04:22:3f:d9:11:b5:
         68:22:0c:25:6c:9e:23:f3:25:e7:95:55:cd:a1:ac:a3:12:f5:
         42:ef:f4:76:2e:a3:b5:89:e8:4b:af:37:4a:26:e4:58:7a:35:
         51:82:45:62:af:e2:57:ab:b1:a8:c7:6f:98:77:d2:22:4d:a8:
         fe:46:eb:43:fc:6b:53:2e:d6:fe:8a:87:3e:f2:77:30:47:06:
         60:2e:e2:df:88:c1:87:b3:56:83:b6:e8:a7:b2:28:53:26:38:
         ac:67:a8:0f:d2:91:1f:05:4d:93:e7:ad:56:d8:e2:25:6c:b4:
         54:4e:28:4c:aa:ef:35:a8:f5:58:f4:a0:1c:62:04:7e:1d:ee:
         0b:12:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net