Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37332e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37332e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          +GL9gXsS5CTj1VvU9+ZVZT5NhCacWqwy4NfjbnO65lM=
Subject key identifier:   AC:19:1C:4B:98:72:68:BE:14:0F:23:D4:BF:FF:07:C5:64:79:F3:38
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       7E822AE837ADC62D1585A37237388D2264C4416A
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37332e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:30 +0000
ROA not before:           Mon 21 Apr 2025 01:10:30 +0000
ROA not after:            Mon 20 Apr 2026 01:15:30 +0000
asID:                     26593
IP address blocks:        200.108.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:2a:e8:37:ad:c6:2d:15:85:a3:72:37:38:8d:22:64:c4:41:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:30 2025 GMT
            Not After : Apr 20 01:15:30 2026 GMT
        Subject: CN=AC191C4B987268BE140F23D4BFFF07C56479F338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:c0:24:8c:06:39:de:fc:16:eb:cc:7a:27:
                    a8:6e:34:52:fc:38:c6:59:f8:cf:b6:6b:44:eb:af:
                    a6:af:ee:6d:eb:78:e6:78:65:ec:06:ec:fe:fb:a8:
                    c5:30:d3:87:34:43:79:77:fb:7b:bf:89:3d:4e:e7:
                    9e:f5:ae:1d:15:8e:2e:06:eb:e0:31:1c:7b:60:c0:
                    a8:fd:57:b1:24:c0:96:da:ef:20:c0:f9:06:f9:46:
                    47:1c:ba:7e:1a:0e:90:eb:05:b9:a6:a8:39:46:d9:
                    99:dc:f2:2b:b1:7c:36:39:3b:39:7f:6d:1c:44:57:
                    67:36:34:ab:ba:ae:84:fc:12:d2:e6:58:c4:e7:ec:
                    35:c7:5f:f6:8c:36:ce:7e:ca:93:d7:ea:b1:78:1d:
                    8b:32:13:0c:d7:5d:b2:f7:39:55:a6:ce:ba:39:24:
                    f3:81:99:d8:c0:45:ec:07:ce:6b:1a:a3:d0:82:ec:
                    58:dc:ba:78:b6:0b:a8:98:08:d6:06:4a:4b:be:36:
                    35:f0:1b:d4:bc:eb:89:69:62:24:36:e1:d2:7a:33:
                    bc:be:bb:dd:98:67:95:1d:f0:d2:6f:f4:1a:71:bf:
                    c1:f2:f8:75:39:cf:e3:a9:11:71:b3:ca:c8:fa:e9:
                    d0:4f:a2:bd:ba:0a:a4:42:cc:a8:58:62:75:d5:fb:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:1C:4B:98:72:68:BE:14:0F:23:D4:BF:FF:07:C5:64:79:F3:38
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37332e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:d8:3c:02:93:de:08:28:72:9d:5f:d3:97:35:bf:3a:c5:
         43:85:0e:8d:0d:9f:19:d2:de:4d:e7:6b:6f:7f:b6:0e:54:bb:
         92:3e:7f:a4:56:78:62:d1:87:7a:07:0d:85:d9:37:c0:e2:ce:
         f3:c3:b6:66:10:08:23:34:50:7d:bd:04:9b:4b:93:f2:7e:17:
         a4:1b:af:54:65:91:a1:53:dc:ed:e4:d5:3a:4d:49:54:2c:ff:
         81:81:a3:b2:18:1d:6e:50:4f:ad:f2:9f:69:a5:8b:b6:5b:a6:
         46:c4:bf:bd:60:de:81:9f:c1:4b:d1:68:e7:00:a7:d8:c3:fe:
         ed:7c:ab:ee:75:4f:20:2d:9e:70:c8:92:ec:c0:de:71:2d:37:
         b4:31:86:f5:85:ad:80:aa:6d:77:f4:a3:c9:06:75:5c:67:27:
         f9:3c:b8:69:f0:c8:ad:02:ce:b5:76:11:c8:f8:19:09:6c:34:
         33:08:7c:f0:54:0b:00:18:a5:d0:1e:bf:8d:f6:33:f3:ff:8f:
         51:ed:76:fb:26:2b:4d:ef:40:7f:31:4d:61:9e:fb:f6:6b:aa:
         f6:84:1f:a5:a4:a7:4b:aa:75:51:53:94:48:ef:c5:04:46:d9:
         40:8b:77:9c:73:54:e5:ae:a9:8f:14:d4:83:76:c1:42:59:c6:
         35:3d:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net