Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39322e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39322e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          HzuumrDrHZsjc3PwUR9rXJDitEanbA/LgGZd/ny8Q0w=
Subject key identifier:   E5:98:68:7E:08:C0:FE:63:4A:55:51:BD:39:85:0A:C6:2B:D6:D4:6B
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       464415D6B25C6AC2B1DE40393C114019CF8808C4
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39322e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:29 +0000
ROA not before:           Mon 21 Apr 2025 01:10:29 +0000
ROA not after:            Mon 20 Apr 2026 01:15:29 +0000
asID:                     26593
IP address blocks:        200.108.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:44:15:d6:b2:5c:6a:c2:b1:de:40:39:3c:11:40:19:cf:88:08:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:29 2025 GMT
            Not After : Apr 20 01:15:29 2026 GMT
        Subject: CN=E598687E08C0FE634A5551BD39850AC62BD6D46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:04:01:4a:75:8b:fc:f2:80:37:6f:bd:65:
                    8d:7f:3c:14:13:5d:87:cd:f0:28:fd:97:23:3d:b6:
                    74:5b:67:ef:5b:9e:1f:e6:fd:a0:48:b1:16:4a:45:
                    ae:d3:9c:31:2c:67:c5:73:60:28:4d:99:5e:bf:c7:
                    b0:ef:28:35:4c:32:da:a9:62:ff:f3:30:c8:59:47:
                    41:4d:27:7c:89:a9:1b:c7:c0:fb:7f:f4:ba:d1:73:
                    23:c4:40:a2:73:ac:8f:54:97:24:27:46:16:e2:3b:
                    43:bf:e1:6c:75:9f:b4:bc:1b:3b:6c:e7:40:49:9d:
                    e4:3e:51:d0:72:ff:89:a8:10:36:a0:0a:d1:c2:c1:
                    c7:ff:ed:b2:d4:35:97:12:ed:28:d2:5b:47:c2:8d:
                    85:f4:13:29:dc:b9:c0:c7:b9:54:e1:b4:3f:9a:a2:
                    3a:3b:f7:19:a4:7c:6b:05:20:fb:e0:c9:e4:09:eb:
                    f5:7c:60:ec:37:d5:48:62:c5:3a:af:d6:01:9e:f6:
                    d5:d3:96:d6:31:ae:0d:87:c2:ed:96:f8:33:51:97:
                    a9:a7:f8:49:73:df:ab:b0:dd:17:2a:63:1c:56:be:
                    75:cd:c2:3f:6f:65:24:7d:ed:a4:ff:26:96:a1:fb:
                    b8:48:38:bb:4e:7b:d2:7a:24:b4:d1:71:8c:f5:50:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:98:68:7E:08:C0:FE:63:4A:55:51:BD:39:85:0A:C6:2B:D6:D4:6B
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39322e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:9b:5c:2e:91:6f:16:27:87:15:2d:81:11:3f:e3:5c:b7:ca:
         bc:6b:86:fd:de:31:a6:30:1d:0f:3f:86:3a:f1:e5:75:c1:a1:
         e3:ca:e7:96:64:74:85:18:5c:dc:1c:6e:51:b7:16:1e:da:50:
         3e:04:4a:60:08:ca:b0:89:41:73:e0:fe:3c:ac:33:7b:85:e7:
         7e:d8:37:a3:39:d0:39:54:b8:ae:cf:05:70:88:0b:e1:f2:02:
         1e:ed:50:26:26:e0:d9:a4:c0:e8:5e:90:93:f4:35:d7:82:5d:
         87:13:34:48:58:9b:b8:a2:6f:83:fb:1d:c4:69:3e:c4:01:61:
         e2:aa:a8:39:2a:81:ed:57:07:f1:77:7b:65:95:b7:e7:e1:1e:
         da:cf:cf:be:5b:99:2b:be:0c:fa:6f:1e:35:7d:70:d3:5f:b4:
         bd:f3:c9:cd:97:40:02:68:ca:1f:5e:e1:ed:04:64:05:4a:3e:
         4e:28:6d:03:d4:8e:64:ed:f9:65:61:02:e5:bd:e8:b7:8e:ab:
         5a:c6:3c:42:3e:86:e6:67:6a:15:e1:be:53:75:5f:eb:b4:8a:
         8c:ae:55:9f:f5:20:9b:81:d9:b7:0f:c3:58:c4:5d:ef:93:90:
         5b:3b:c1:77:5e:fa:4f:6f:a6:27:76:78:1f:c7:67:92:b9:ea:
         27:59:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net