Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39352e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39352e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          hxjDxGZtvOgUJwm70ngfkFFgGt3kCRiKw27OLL5xqHg=
Subject key identifier:   8E:AB:97:98:72:E5:2E:6C:8D:B7:7E:F7:21:2A:90:CC:33:A1:5A:93
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       57DFA37AD3E3123B3D9DBD0B0F76EAACFA0A6331
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39352e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:32 +0000
ROA not before:           Mon 21 Apr 2025 01:10:32 +0000
ROA not after:            Mon 20 Apr 2026 01:15:32 +0000
asID:                     26593
IP address blocks:        200.108.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:df:a3:7a:d3:e3:12:3b:3d:9d:bd:0b:0f:76:ea:ac:fa:0a:63:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:32 2025 GMT
            Not After : Apr 20 01:15:32 2026 GMT
        Subject: CN=8EAB979872E52E6C8DB77EF7212A90CC33A15A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:ec:73:bb:fa:a3:13:ce:80:7f:a4:1e:2c:
                    e9:1c:68:c4:bb:4b:07:02:5c:6e:2f:e1:d1:d4:ec:
                    4b:29:9a:8d:2f:b4:9c:b6:d0:3e:54:4e:8e:a3:0e:
                    9b:da:30:58:ac:23:45:c4:aa:a4:43:94:a4:41:b7:
                    84:70:ab:78:09:d9:98:87:31:58:09:fc:fe:e9:c9:
                    a9:4d:71:de:bb:1f:6e:a4:f9:48:49:c1:c9:c5:06:
                    46:32:d3:8a:54:f1:fb:16:15:c4:70:ac:38:81:18:
                    5c:19:18:7f:3b:77:7e:a6:40:7f:35:6f:4a:98:9b:
                    ed:3d:23:bb:c3:6a:cc:17:0d:ba:97:46:75:75:a3:
                    48:db:c4:07:c9:af:8c:27:61:d7:22:33:42:ba:e6:
                    28:d8:05:92:89:fb:f3:29:d2:eb:19:fc:8d:b8:2c:
                    97:a1:80:a2:83:6e:1a:93:7c:4b:ad:79:36:e6:c3:
                    1e:f6:1b:01:4e:3b:b1:cb:b8:ac:1e:56:63:4c:77:
                    0e:5e:3a:1c:49:2b:24:e0:32:83:eb:dc:6b:26:96:
                    eb:6d:4f:68:72:cd:78:8a:18:ec:ec:a2:27:f4:b5:
                    d4:2b:62:67:b1:b6:3c:8d:c4:8a:0f:67:83:6b:c9:
                    69:14:68:61:47:0e:9d:6b:5e:fc:2e:c2:e6:bc:64:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AB:97:98:72:E5:2E:6C:8D:B7:7E:F7:21:2A:90:CC:33:A1:5A:93
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39352e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f3:7c:52:bb:97:ea:ea:4c:e9:6d:ac:45:45:c8:89:22:cb:
         a2:7b:eb:39:d7:c9:70:b8:82:4d:35:ae:09:f1:c2:11:20:86:
         f6:8a:cf:f0:2b:a2:2e:30:03:5e:4e:04:ed:06:39:6d:f7:94:
         3f:de:24:88:66:0c:a2:37:f9:c5:a3:b6:ed:b9:38:b9:ef:53:
         07:ac:4d:6e:3b:72:65:78:20:2d:aa:4e:c5:d6:44:08:cf:79:
         07:44:28:c6:8e:9d:72:c1:6f:cf:5d:97:d3:1a:a1:3a:2b:b7:
         2e:38:3d:ab:98:8d:ab:6c:33:16:ed:3a:f2:22:ce:04:35:51:
         b7:84:9b:b5:f0:6e:aa:30:36:b6:2c:ef:21:70:0e:de:90:8e:
         61:65:3d:ed:d1:31:e2:fa:cb:79:ca:93:a6:ab:3d:d8:3b:71:
         7f:69:13:32:ed:92:82:80:cc:dd:1e:11:b7:7a:bc:27:d0:51:
         0c:57:d6:6f:66:1e:69:28:51:81:9f:af:4b:27:35:6d:e2:c3:
         74:27:05:26:2e:47:a3:fb:08:5a:fb:77:68:db:35:5d:af:ee:
         4e:f1:b4:b9:15:42:74:92:d5:95:b5:9e:c1:8a:94:9e:6f:6f:
         0f:ab:e9:00:9b:ff:59:85:93:5a:e5:28:39:19:b1:99:96:01:
         bc:d7:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net