Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38352e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38352e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          VbugzAeJtIKq+/9Lx1YqxJsC9UcrpAvK/reWXIbRu/s=
Subject key identifier:   14:E2:23:AA:A8:5C:BB:F7:DC:55:17:9C:FA:0E:50:E5:4C:79:4C:14
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       7569F0E71340ED074A8F30CD914D5BA7B16F09A9
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38352e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:23 +0000
ROA not before:           Mon 21 Apr 2025 01:10:23 +0000
ROA not after:            Mon 20 Apr 2026 01:15:23 +0000
asID:                     26593
IP address blocks:        200.108.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:69:f0:e7:13:40:ed:07:4a:8f:30:cd:91:4d:5b:a7:b1:6f:09:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:23 2025 GMT
            Not After : Apr 20 01:15:23 2026 GMT
        Subject: CN=14E223AAA85CBBF7DC55179CFA0E50E54C794C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:93:3a:39:37:04:45:55:52:81:59:6a:42:
                    d5:22:16:1c:7b:3a:fd:ac:de:0d:8c:69:5b:74:56:
                    99:fd:a7:0f:21:74:a3:00:57:2f:e4:8c:ca:bb:57:
                    75:13:2d:d7:a5:47:95:bc:a0:f6:b7:ff:c4:f1:52:
                    f5:74:87:eb:f3:36:75:f9:79:77:e4:ab:37:95:f0:
                    f7:28:3e:92:c6:40:ff:b0:16:56:8d:59:e7:d4:e3:
                    89:9b:89:33:e9:40:a2:f3:d2:74:0b:68:02:06:1f:
                    a9:be:5e:75:e2:f9:22:16:39:40:78:88:b6:c0:4c:
                    6b:71:5a:e7:a5:65:a4:ea:0a:2d:91:a7:de:16:f0:
                    43:3b:9c:63:7a:ff:d2:7f:b9:dc:be:d4:7c:27:0b:
                    ae:0e:02:d8:8b:10:26:bd:3b:98:9e:15:1b:5d:ca:
                    be:97:ff:d1:cf:16:44:13:15:18:34:f6:d1:99:4b:
                    7d:e7:25:a6:22:87:a8:c9:13:e0:b7:b0:1c:5c:f4:
                    6f:0d:4a:04:e1:b0:17:7c:82:59:41:eb:3e:f9:aa:
                    0f:91:95:5f:b5:65:1a:06:16:65:f7:c0:fc:76:d5:
                    b7:5b:2e:3c:12:e7:26:71:53:82:c9:89:eb:9f:aa:
                    97:88:85:f2:3c:e1:a0:1a:7e:89:f0:97:7e:a6:2f:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:23:AA:A8:5C:BB:F7:DC:55:17:9C:FA:0E:50:E5:4C:79:4C:14
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38352e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:78:8d:73:73:75:2e:cb:65:fa:68:4e:2e:05:9d:78:1d:
         55:27:7e:e0:c6:1d:c6:74:07:38:02:a4:f6:bd:b1:3d:66:06:
         7d:fa:be:34:d6:3c:f2:01:0a:d9:8e:60:58:82:a6:84:36:3a:
         3a:90:35:5a:5f:f0:51:0f:65:cd:90:71:0c:81:60:44:f0:20:
         bb:d7:b6:dd:97:9e:23:11:66:6b:93:64:34:dd:eb:06:80:a8:
         1e:3b:c7:47:d6:26:cb:dd:0e:20:91:44:65:d3:08:92:cc:82:
         23:8a:5b:95:55:f0:c4:3f:08:91:2c:39:56:33:56:de:e3:37:
         4f:6d:3a:34:90:ac:05:7b:77:3d:71:93:0a:ac:73:89:df:06:
         6e:1b:3e:c2:6a:3e:bd:88:ce:16:06:87:7a:9a:9a:49:09:75:
         ec:0a:57:71:91:f7:f7:d8:17:cf:a2:7a:a9:9f:c8:2c:0f:9e:
         8c:79:63:80:0e:41:96:0b:c3:cf:92:a4:d4:35:88:c0:5c:5a:
         53:0c:70:28:3c:b1:9f:99:26:c8:8b:82:d3:aa:11:f0:e5:dc:
         02:62:d7:84:ab:f2:fe:7d:b4:5b:7c:ad:2c:e0:ce:86:6f:7a:
         59:cd:c7:dd:af:d7:c7:62:54:36:61:49:79:84:97:e2:54:e3:
         5b:00:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net