Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37382e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37382e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          K+USF09s9IClbKdxWsEnwYg6LX6oPofquHw/jB9itdA=
Subject key identifier:   2C:EC:2C:BD:F1:14:8A:F6:FD:FB:C2:C3:43:02:E5:A9:65:78:D2:98
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       6462A0330D2CA236560AAA731D744AEC89DA0AC4
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37382e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:32 +0000
ROA not before:           Mon 21 Apr 2025 01:10:32 +0000
ROA not after:            Mon 20 Apr 2026 01:15:32 +0000
asID:                     26593
IP address blocks:        200.108.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:62:a0:33:0d:2c:a2:36:56:0a:aa:73:1d:74:4a:ec:89:da:0a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:32 2025 GMT
            Not After : Apr 20 01:15:32 2026 GMT
        Subject: CN=2CEC2CBDF1148AF6FDFBC2C34302E5A96578D298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:87:71:db:76:15:aa:e2:78:27:95:49:1e:
                    17:a2:4e:1f:23:13:68:42:89:b9:24:b4:fa:9d:13:
                    a4:98:10:4d:c1:36:14:c3:2b:26:3c:81:6f:bb:92:
                    43:cc:fb:98:4e:a4:ed:09:1a:5c:2c:16:15:35:f1:
                    d5:d5:2e:0d:ba:21:65:e2:63:2d:50:97:11:de:d0:
                    df:81:98:ef:13:37:32:6a:00:10:25:70:f6:40:bf:
                    b4:a4:2a:5e:4f:57:17:f1:93:f3:ee:e9:b6:17:a9:
                    34:eb:51:d1:e9:4f:2d:8f:ae:d0:8e:3f:07:8e:cf:
                    6e:29:12:4e:6c:88:d6:3a:88:24:20:1a:79:c8:98:
                    33:e1:bd:e3:82:f9:4a:12:30:e7:ff:6e:63:8f:00:
                    50:75:2e:fc:c6:88:5f:14:fd:37:93:b9:84:ad:2c:
                    6f:7f:09:01:94:25:9b:72:24:2b:58:ae:eb:e4:b7:
                    4b:60:b7:3b:a4:e8:16:dd:45:7c:0a:5e:44:5e:84:
                    46:04:a1:b7:a1:fb:fd:e6:85:e7:96:97:9f:14:65:
                    88:13:38:3f:ee:a7:a5:ee:e9:90:30:c6:8e:ab:2e:
                    0a:0a:88:b5:8e:86:f3:9b:10:19:e7:b6:14:94:d8:
                    51:99:f0:9a:f2:74:77:db:d0:4b:24:51:a9:b5:1f:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EC:2C:BD:F1:14:8A:F6:FD:FB:C2:C3:43:02:E5:A9:65:78:D2:98
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37382e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:57:75:7c:96:a7:a2:c6:5a:eb:e9:e0:59:e6:2b:c0:17:b5:
         31:6a:e9:31:c0:6d:a3:e6:a1:c1:46:79:df:49:d0:38:75:40:
         ef:af:70:33:b0:75:e7:c0:31:50:e8:68:41:e8:64:aa:ed:e3:
         1f:69:55:f7:43:49:68:2b:2b:40:1f:00:ba:db:4b:d1:dd:15:
         05:81:23:da:c5:49:e0:28:54:5d:2e:11:c0:af:fd:13:b1:ad:
         71:51:7c:87:c0:fb:cd:ba:0c:ad:76:0a:94:6f:67:ba:73:84:
         8c:b7:49:24:0b:9b:38:6a:e7:82:5d:97:bc:e0:34:2e:9b:a5:
         a9:52:76:1c:82:d5:23:3e:c2:af:ce:ab:b4:08:42:5d:96:0b:
         72:6e:0f:5d:47:56:c8:2a:88:53:cf:9c:cd:9f:75:b8:65:50:
         f5:f9:fc:56:fb:6d:e5:c3:78:15:5b:39:2d:74:1e:2d:03:6f:
         cd:1b:e3:45:ae:84:5d:8b:d9:0d:1b:a1:7e:ba:60:5a:4a:00:
         9c:48:1c:4f:a7:81:12:0d:1f:e2:73:22:73:4f:06:ed:fd:95:
         62:5a:54:31:26:67:66:b5:03:df:c6:9d:85:a4:52:90:1e:3b:
         11:fc:e4:53:9f:ab:58:76:25:b6:7e:e2:55:4e:d2:ab:ad:ef:
         de:ef:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net