Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38312e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38312e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          4yIc26oqgz6P5RC0mpQR8zFR/BVgIsWDvPl1mwLrcQA=
Subject key identifier:   C8:B1:A5:A4:DE:93:C5:7C:71:1D:4E:C6:2D:33:86:CD:78:F4:FE:FC
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       0FFD8D22CE73D580CA0A0E7D6C9529ECD69A8AAA
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38312e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:27 +0000
ROA not before:           Mon 21 Apr 2025 01:10:27 +0000
ROA not after:            Mon 20 Apr 2026 01:15:27 +0000
asID:                     26593
IP address blocks:        200.108.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:8d:22:ce:73:d5:80:ca:0a:0e:7d:6c:95:29:ec:d6:9a:8a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:27 2025 GMT
            Not After : Apr 20 01:15:27 2026 GMT
        Subject: CN=C8B1A5A4DE93C57C711D4EC62D3386CD78F4FEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:64:af:bc:c3:bc:37:88:ef:67:61:6d:b9:
                    bf:2a:e0:8a:b0:ad:f3:c6:18:f1:94:7d:ec:d2:54:
                    41:6b:5b:78:77:5d:2f:67:b0:7f:f4:18:53:4f:6e:
                    fc:67:02:92:28:99:c2:8f:02:71:38:41:5a:6b:2e:
                    68:80:e2:78:99:cb:02:c1:a8:c9:6b:02:27:49:77:
                    9e:f1:78:11:82:b9:93:24:5d:bc:9e:85:11:e3:25:
                    72:06:a6:6c:8d:5b:2c:b4:50:59:6a:7b:34:b9:d9:
                    36:62:ad:4f:f8:3c:03:d4:dc:8a:6b:c2:c6:16:c3:
                    e3:c2:fc:41:0c:8b:71:cb:78:d7:a3:44:c7:93:0c:
                    98:d0:e8:9c:f5:1c:a4:b3:c4:7d:8d:ac:5c:12:75:
                    f0:ff:e8:a5:12:5b:7b:d7:1e:7e:e3:9a:be:00:a3:
                    12:43:ea:d7:f0:52:30:55:44:b6:4c:21:f1:98:cd:
                    aa:18:ca:fe:55:3c:4b:e5:a9:c2:56:35:ce:6d:93:
                    46:a4:b7:20:41:51:95:47:a4:14:a5:97:fc:dd:41:
                    03:d6:48:c3:f9:2b:90:97:fc:e8:d0:61:7b:7a:16:
                    7f:02:e0:95:b6:90:f6:24:a6:60:1b:37:85:45:7b:
                    19:78:3d:69:ac:0b:95:d8:0c:e7:78:cc:65:71:23:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:A5:A4:DE:93:C5:7C:71:1D:4E:C6:2D:33:86:CD:78:F4:FE:FC
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38312e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:02:4d:5b:25:ad:3a:e9:57:1f:09:8a:78:3f:7a:fa:08:
         23:13:bc:c9:c1:07:69:c7:c3:b9:cd:19:ea:fc:33:9e:8c:d8:
         95:87:97:22:21:7d:5e:ec:aa:df:22:dc:6b:bb:75:ad:86:2d:
         8d:c4:ce:b0:fb:b4:27:e3:09:a7:39:57:3d:74:6a:74:fa:79:
         bd:1d:24:84:dc:9d:cd:0f:8c:eb:57:57:9f:59:39:6b:f8:55:
         be:82:93:ea:98:d1:76:32:09:1b:53:d0:96:78:f5:c1:98:56:
         30:eb:b4:74:cd:05:41:08:32:42:4a:8d:70:87:37:91:ef:5a:
         4d:fb:79:02:53:5d:6e:30:b7:7e:09:1e:c4:0f:b8:0b:c9:46:
         83:04:b1:2f:ce:30:0f:39:eb:a8:1e:19:8c:a9:d3:d8:65:78:
         2a:8a:91:1f:2b:7e:19:d6:13:65:be:2f:5f:a3:e7:fe:b4:12:
         bd:2e:76:a7:6d:ad:31:24:bc:09:67:11:e9:8a:94:84:de:86:
         fa:e8:13:23:fd:99:17:e1:a6:19:f0:34:28:0c:ad:25:22:ee:
         d7:6d:84:71:65:3a:ca:eb:4e:c9:d2:76:bd:88:ca:84:29:73:
         8a:09:60:14:4f:2a:09:a6:29:0c:ff:19:ed:dd:4c:73:91:86:
         ef:7a:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net