Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39312e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39312e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          ug9EBeXjCXFQiYIzc/AihtZDiD+KkRaSWqV6nV/7Vwg=
Subject key identifier:   B9:55:CE:D0:D9:8D:D9:DD:EE:7E:42:4C:68:12:D7:CD:84:02:B4:F3
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       06E4C3FA7C1CF3EADB5E99F84D8E78B856DECB66
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39312e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:25 +0000
ROA not before:           Mon 21 Apr 2025 01:10:25 +0000
ROA not after:            Mon 20 Apr 2026 01:15:25 +0000
asID:                     26593
IP address blocks:        200.108.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e4:c3:fa:7c:1c:f3:ea:db:5e:99:f8:4d:8e:78:b8:56:de:cb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:25 2025 GMT
            Not After : Apr 20 01:15:25 2026 GMT
        Subject: CN=B955CED0D98DD9DDEE7E424C6812D7CD8402B4F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:94:b9:77:90:07:ce:2c:27:09:70:8c:f6:
                    cf:3b:8f:70:52:d9:5b:27:3b:bd:48:24:5d:41:ee:
                    91:61:7b:aa:cf:b3:8f:19:cf:97:82:09:28:ae:f6:
                    2b:3f:39:00:23:7a:4a:c1:35:5a:38:5f:01:8e:26:
                    04:08:c9:28:ff:9e:87:54:b6:3a:c8:8a:01:63:9f:
                    2c:bd:8f:54:39:e4:4b:bf:12:d5:fb:46:19:48:0d:
                    e6:4f:e3:b4:aa:97:f6:1f:95:55:f2:05:19:93:e5:
                    98:a4:f3:58:94:f5:ef:43:7f:b0:83:18:55:b9:1c:
                    13:e8:5f:c9:bf:ff:6a:3d:bc:ba:08:02:30:2f:3d:
                    c2:03:1e:db:b5:62:81:1b:8f:13:87:62:84:1b:d4:
                    0f:32:ca:ed:e1:a1:f2:6c:ad:8b:52:91:db:fd:99:
                    30:7c:31:cb:6f:10:cb:8e:b7:aa:0a:0f:b9:f7:92:
                    29:db:6a:32:36:db:55:b7:6c:fd:fc:b9:6d:a0:33:
                    f3:38:b8:d1:11:2f:53:5e:ec:b3:99:47:bb:fe:d3:
                    86:4f:e8:e1:69:0f:61:d4:ff:8e:77:12:39:32:9d:
                    d3:90:2c:b6:3b:4b:fc:2c:14:f7:0d:1b:91:cd:d5:
                    21:eb:7f:aa:31:03:45:bf:bc:a8:24:d1:94:6b:07:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:55:CE:D0:D9:8D:D9:DD:EE:7E:42:4C:68:12:D7:CD:84:02:B4:F3
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39312e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:ad:c1:85:eb:e9:97:62:32:db:d9:50:b0:1b:30:44:67:
         34:3e:24:22:30:e6:7a:76:61:be:c9:c9:24:ca:2f:5e:66:a6:
         f3:9c:0d:33:73:3e:d7:60:b1:3c:08:0e:88:fc:c9:93:87:37:
         9d:39:0c:1a:81:65:79:70:86:8a:cd:7d:a1:61:61:27:1d:26:
         2e:28:d9:0c:e1:16:3b:bc:89:f8:1f:1d:92:f8:be:24:09:d3:
         dc:6c:33:a5:fa:c0:af:5f:00:92:e9:0e:db:6e:1f:7c:27:d4:
         70:07:c0:27:b8:71:78:e9:ff:d9:aa:dd:a6:0b:f6:2d:99:65:
         22:b9:3c:96:cf:ba:6f:69:7c:5d:33:94:4c:e8:32:3a:50:30:
         3d:62:bc:0a:26:c7:0a:8a:05:d8:15:91:db:57:5f:f9:55:89:
         ac:9d:92:6b:a2:9a:1f:60:cc:8f:95:1f:3d:f8:4c:18:12:bc:
         f5:5e:c4:2c:70:db:fd:04:30:e4:91:89:b6:ac:51:26:24:26:
         3e:85:97:fb:87:ae:75:05:ec:a2:62:13:d4:b4:b3:75:85:55:
         cf:91:5b:55:00:22:9c:28:5d:e2:59:a8:53:5f:41:3e:06:9c:
         e1:03:a8:f6:bb:59:63:44:0f:8a:00:c1:2c:2e:41:6a:24:60:
         7e:93:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net