Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          yqjA7QO5b5WaoXD4vS1roLZpAQHogDJj2I9sSbk785Q=
Subject key identifier:   FF:C2:93:80:94:BB:74:18:0E:42:EC:61:AC:FA:9B:01:ED:C5:0D:F0
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       5E142C9FE656A969F2AE98FAE29BED7FB3807FA4
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:31 +0000
ROA not before:           Mon 21 Apr 2025 01:10:31 +0000
ROA not after:            Mon 20 Apr 2026 01:15:31 +0000
asID:                     26593
IP address blocks:        200.108.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:14:2c:9f:e6:56:a9:69:f2:ae:98:fa:e2:9b:ed:7f:b3:80:7f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:31 2025 GMT
            Not After : Apr 20 01:15:31 2026 GMT
        Subject: CN=FFC2938094BB74180E42EC61ACFA9B01EDC50DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:cf:2a:4d:9d:1f:11:ed:53:0b:fd:c2:3a:
                    36:15:d2:a3:ad:af:19:85:eb:32:45:08:8d:2d:78:
                    0b:aa:6a:59:9a:6d:30:44:e5:4a:b2:18:fd:f4:77:
                    0d:f9:a7:02:cd:a7:93:1d:cb:6c:b3:fb:01:89:bc:
                    ce:6c:67:6c:c1:4d:ea:50:2e:0c:41:ac:09:da:68:
                    8d:bf:bb:b3:51:73:32:cd:ad:d4:36:a2:2d:4c:39:
                    22:1d:01:ab:6c:1f:74:54:eb:63:4a:d8:6c:75:ef:
                    1f:c1:88:fa:3e:cd:95:d0:e6:83:8c:62:16:78:be:
                    75:16:36:93:3e:46:78:01:14:99:3d:79:12:e2:9e:
                    1f:76:f5:9d:a8:9f:bc:7e:2a:6c:66:5a:fa:fc:b7:
                    fc:86:a3:7e:d4:0b:5b:f7:14:9b:d8:5b:42:d1:94:
                    7a:19:1f:72:64:f8:41:5a:3a:88:53:18:ca:af:e3:
                    4c:e0:c0:46:f8:6c:c9:fd:08:be:fe:71:ec:cc:9b:
                    fb:6c:ab:05:40:a3:30:d9:4c:1d:22:70:10:a4:c4:
                    7f:b5:30:24:9d:f7:5d:98:92:4b:89:2a:f3:b4:b3:
                    ca:a8:7d:c7:ae:81:2d:da:02:86:1f:d3:2d:b6:52:
                    99:6a:36:4d:5f:d9:b4:18:cc:07:67:b0:f3:6f:31:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C2:93:80:94:BB:74:18:0E:42:EC:61:AC:FA:9B:01:ED:C5:0D:F0
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:91:4b:fa:43:17:0d:3e:dc:17:2c:60:74:80:1b:4f:d3:
         e7:53:bf:b6:02:91:e8:6d:e0:e1:be:18:0c:2e:73:5d:7e:e7:
         99:78:ce:a4:38:59:4d:46:17:58:09:63:a5:fb:1a:60:d4:60:
         50:69:b2:45:e4:a8:dd:82:73:25:1d:cb:13:ae:3d:64:4f:f3:
         2f:32:49:a5:99:f3:53:d2:ba:0b:ac:2f:32:30:e3:bc:08:94:
         2a:92:bd:1c:ff:fb:d4:1b:11:46:a5:4d:b0:69:b1:35:f5:51:
         bf:9d:77:39:58:59:8c:30:87:cf:52:0c:31:03:41:3f:18:91:
         9d:21:20:6f:1a:d8:80:77:58:e0:24:db:e9:52:16:04:b5:34:
         48:7a:92:df:8d:3a:f2:dc:b4:33:89:95:44:6b:1e:2c:34:d6:
         ea:20:07:3c:19:32:12:0e:0a:78:7e:50:bd:4d:5b:83:7c:09:
         3d:11:f6:a3:ba:6d:2c:4f:94:66:b5:94:30:f6:9c:1f:9e:44:
         bc:a3:e7:9b:07:1c:cb:6e:1a:bf:04:8d:56:b3:ce:ad:51:a3:
         81:cb:89:fe:ae:86:06:83:53:eb:9e:c2:3a:0b:05:34:72:ee:
         72:1b:00:c1:53:1f:53:e8:1f:a0:c0:c6:b0:a6:27:4e:04:76:
         36:63:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net