Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38302e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          bn36HSKWHdMWdzYh52OWZz1DyYeL7IqGBYnFZxiqJ14=
Subject key identifier:   A2:B8:B5:58:2F:EC:09:AF:E6:EC:DA:C0:89:74:F3:76:3A:2B:D1:58
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       28397126374F6CCB0853B296E1EE721854E76C3D
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:33 +0000
ROA not before:           Mon 21 Apr 2025 01:10:33 +0000
ROA not after:            Mon 20 Apr 2026 01:15:33 +0000
asID:                     26593
IP address blocks:        200.108.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:39:71:26:37:4f:6c:cb:08:53:b2:96:e1:ee:72:18:54:e7:6c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:33 2025 GMT
            Not After : Apr 20 01:15:33 2026 GMT
        Subject: CN=A2B8B5582FEC09AFE6ECDAC08974F3763A2BD158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:78:fc:c3:88:d5:15:4e:46:f4:f4:7b:54:52:
                    3c:84:c2:15:a0:b9:de:12:64:3f:62:63:a4:7c:c8:
                    00:6b:c6:f7:63:28:8f:81:84:05:48:6a:97:9c:63:
                    9a:5c:8b:85:40:d0:7c:8a:c5:a1:3e:8a:81:b4:0d:
                    de:76:51:6c:73:d4:4d:b3:b3:8a:b7:f7:be:1f:6a:
                    3d:ce:9b:0f:58:24:bc:10:f9:90:53:ca:16:e5:3f:
                    91:11:0f:4f:34:e1:f3:79:25:9f:ba:37:f3:ec:9f:
                    2c:10:8a:33:72:dc:c1:6b:cd:56:7e:3c:0b:2a:29:
                    aa:6f:a0:c8:e9:50:5a:f0:62:63:18:9d:a6:47:b0:
                    6f:68:e1:d4:f5:a9:ac:42:e3:1e:eb:97:d9:b8:d7:
                    85:d9:7b:b2:20:7f:ee:11:ef:b7:5f:a9:77:cb:e2:
                    94:75:7f:35:3b:f9:e7:09:c5:5a:51:49:1e:5f:ba:
                    8c:36:02:e6:48:11:8e:2c:d7:9f:54:c9:1d:c3:54:
                    cd:94:0b:02:51:42:e5:a1:ef:f4:c3:a3:39:04:4a:
                    d8:7a:07:2d:4d:e6:dd:9e:b5:e9:e3:3b:82:04:1d:
                    24:19:02:a6:ad:74:cb:86:f0:4b:6c:02:d4:63:35:
                    b5:29:e7:5c:2f:a8:50:8d:25:2a:66:54:7c:dc:9f:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B8:B5:58:2F:EC:09:AF:E6:EC:DA:C0:89:74:F3:76:3A:2B:D1:58
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:2f:54:2f:d7:35:4c:7b:cc:72:ce:46:77:e2:fb:41:47:
         01:8e:71:04:b1:3c:a8:cf:30:3e:42:f6:9b:cc:d5:a0:b7:62:
         99:17:bc:21:bc:27:0d:08:98:02:25:9e:ae:fb:c3:1b:5f:0b:
         d9:1b:3a:f1:f1:ae:c9:ef:af:68:31:a0:cb:4e:b9:0d:21:28:
         2a:ff:7a:d2:39:ae:e2:e5:ab:ff:d6:7d:2c:a3:24:bd:2f:74:
         25:b7:b4:a7:c7:0d:a7:2a:0d:f2:48:e3:e1:92:4e:84:2e:12:
         09:f6:3c:64:ae:42:0b:f6:6b:9b:bf:f1:ea:0a:37:56:4a:66:
         4b:40:c0:fa:ed:fe:de:bd:e0:7c:b1:ae:cd:6e:8c:b6:94:b7:
         3a:f6:13:be:9e:75:2e:71:e7:30:2e:21:96:6e:22:81:3e:20:
         2a:95:09:48:79:c5:42:21:54:d6:f7:44:99:49:78:6c:22:ce:
         f1:27:77:fb:88:63:9e:bc:34:3b:b4:e9:63:09:30:12:c6:bf:
         64:fe:23:b6:15:fd:a1:a8:dc:52:68:d8:d0:ad:09:dc:86:c9:
         c7:a2:2b:4f:d2:9a:cd:db:46:3c:6c:88:80:a5:fe:70:e8:46:
         9e:f5:b7:1b:7b:1f:1d:dd:20:88:4f:78:34:e2:c8:cc:02:ef:
         6e:a5:db:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net