Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39302e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39302e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          C6VLwXoUn0IeETpe1rEwGZHkgYwL5SE5zKki2874/1Y=
Subject key identifier:   8D:40:45:3B:26:E5:E5:04:28:6B:48:81:81:AB:6F:FF:5A:F9:A4:07
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       0FA556C9CCF01BFD8A050A638EAD69149245E361
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39302e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:26 +0000
ROA not before:           Mon 21 Apr 2025 01:10:26 +0000
ROA not after:            Mon 20 Apr 2026 01:15:26 +0000
asID:                     26593
IP address blocks:        200.108.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a5:56:c9:cc:f0:1b:fd:8a:05:0a:63:8e:ad:69:14:92:45:e3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:26 2025 GMT
            Not After : Apr 20 01:15:26 2026 GMT
        Subject: CN=8D40453B26E5E504286B488181AB6FFF5AF9A407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:7f:a9:15:ef:07:8c:33:0e:42:97:23:b9:
                    33:1a:73:fc:53:63:35:ed:df:bc:f4:a5:1e:bd:c5:
                    71:ac:f9:7e:99:75:b3:96:ab:a5:e5:3a:f4:a0:b1:
                    53:52:70:2c:ba:8e:94:79:84:9f:b6:25:cf:e2:5a:
                    13:e1:06:b0:04:c1:f5:12:4b:ce:6b:c1:9f:0d:d0:
                    45:34:73:7a:d2:f9:b8:f4:d7:44:6f:16:5a:55:ed:
                    f1:9a:33:fe:69:9f:e9:51:d7:5f:9d:4b:15:42:b9:
                    17:1d:71:88:fa:b5:41:08:a5:af:3e:e7:45:9c:2e:
                    d2:a1:0b:13:cd:65:3b:6b:bc:4d:ea:87:35:d1:7e:
                    84:e2:b5:c3:2c:a3:95:18:f5:67:06:c0:a5:e1:3e:
                    07:fe:23:39:cb:0c:43:8e:17:e2:de:c1:48:53:2c:
                    7f:0a:b2:e6:72:cd:68:50:3b:71:76:47:68:b4:e7:
                    32:bd:e7:01:4e:96:59:d3:55:84:91:b6:7a:f4:ba:
                    b1:8e:71:7d:14:02:4c:a8:a9:60:3d:c5:a3:f0:50:
                    b0:60:93:4c:73:07:45:2b:b0:32:b0:10:8f:d5:b5:
                    4d:15:fc:b8:21:ee:01:b6:fd:da:c7:53:cc:50:31:
                    4d:8a:64:6f:b5:05:c1:42:27:9a:7e:f6:ae:57:00:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:40:45:3B:26:E5:E5:04:28:6B:48:81:81:AB:6F:FF:5A:F9:A4:07
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39302e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a2:74:32:51:90:59:58:8d:f6:77:a0:99:b4:d2:5d:99:66:
         41:77:1f:77:b1:65:43:2d:ba:76:e0:1c:87:68:4e:08:ec:2a:
         8d:c4:f6:41:c6:56:12:e7:5f:6a:6b:97:df:48:83:0f:52:a8:
         f8:64:94:ce:9f:dc:c0:bd:91:ac:8b:c6:e6:0d:5c:8b:14:9c:
         5c:f4:d8:f0:16:2d:e6:a8:15:65:49:7d:3c:c3:8c:15:fe:7d:
         4f:64:4c:c4:16:82:3c:90:47:ae:b6:a3:3b:c0:ef:86:28:93:
         fd:62:c7:0d:34:7b:97:7a:35:d2:d5:f9:0a:1e:8e:1c:43:c0:
         52:01:af:b3:6a:fb:ba:36:8f:92:0d:33:6e:bd:50:ae:df:f5:
         c1:0d:36:42:c5:b6:34:4a:70:1d:aa:7a:74:42:58:c2:03:a3:
         76:b8:4d:de:93:9c:76:58:80:01:0a:5e:9b:55:4b:dc:d8:ff:
         dc:20:c2:be:6c:9f:0e:39:d1:ee:18:d6:69:7b:16:6d:25:90:
         33:5e:ba:47:6c:7b:5e:fa:00:6c:d3:35:b5:80:6f:b7:08:66:
         6e:21:51:1a:16:37:4a:48:5a:80:2e:9b:7a:eb:49:4c:e4:1d:
         af:2a:ba:72:65:85:aa:10:ef:66:dc:33:7c:09:a7:4a:d7:95:
         ff:11:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net