Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e36342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          1euzmGnNQl5KGOmOu4G/zautlMmrOF+tQ2FUM6WAf6s=
Subject key identifier:   CD:5B:3B:17:E4:5E:5B:6C:52:5D:DE:1E:BB:A2:D4:DE:D9:19:C0:4F
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       2411F2494EA1C494F527EEB9A22B1CC3B19D6ED7
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:30:01 +0000
ROA not before:           Mon 20 May 2024 00:25:01 +0000
ROA not after:            Mon 19 May 2025 00:30:01 +0000
asID:                     26593
IP address blocks:        200.108.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:11:f2:49:4e:a1:c4:94:f5:27:ee:b9:a2:2b:1c:c3:b1:9d:6e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:25:01 2024 GMT
            Not After : May 19 00:30:01 2025 GMT
        Subject: CN=CD5B3B17E45E5B6C525DDE1EBBA2D4DED919C04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a7:02:ce:a6:09:78:6d:0b:cf:78:75:aa:77:
                    f4:c9:03:4a:2a:3a:4b:94:bf:a6:db:47:f8:1c:70:
                    72:b1:5a:a3:60:5f:c6:80:72:97:f0:e7:be:56:06:
                    d8:08:e0:d3:58:3b:fd:ee:b1:9f:9c:2e:db:cc:af:
                    04:e4:63:6c:cb:ef:c4:47:bf:dd:28:59:e1:33:8b:
                    55:c0:51:f4:e0:85:06:eb:21:2f:55:8f:5d:82:06:
                    8d:4d:d1:85:8b:56:0d:9c:f2:ab:8c:27:9e:68:1a:
                    43:c7:43:d2:61:21:ad:52:74:f3:27:b9:59:bc:6c:
                    56:4c:7e:e6:c4:44:d4:6c:19:fb:d6:8d:62:51:36:
                    bb:cb:f0:16:43:60:05:48:cc:19:15:dc:44:bf:0f:
                    a5:ec:c4:a1:af:2a:a6:9a:7e:54:b9:4e:f7:cd:80:
                    62:78:7e:26:dd:4b:00:b8:93:c9:69:ed:2e:16:e0:
                    c0:00:3b:3c:c1:59:fc:c5:96:d6:8d:20:6c:cc:76:
                    d5:17:1e:27:ea:ee:ef:23:8e:3a:ba:ea:87:d1:2d:
                    ab:1c:89:3e:e2:27:ba:d3:05:f1:d3:5f:8b:7c:09:
                    9f:3f:89:92:3b:4f:0c:01:1e:2d:31:00:96:7e:af:
                    55:2a:f9:02:30:88:87:72:72:25:5c:5a:ef:60:b0:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5B:3B:17:E4:5E:5B:6C:52:5D:DE:1E:BB:A2:D4:DE:D9:19:C0:4F
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:d1:e1:7a:2b:ac:8c:31:0e:32:7e:68:22:ac:96:e4:97:
         6c:1c:28:14:7e:b3:4a:f8:41:45:76:75:d1:b0:20:ef:b0:8c:
         13:bc:9d:ba:4b:29:df:ab:e4:69:92:16:7f:7c:f1:52:eb:2a:
         bb:15:23:ad:cb:29:40:50:e1:98:f6:d9:1d:64:11:0e:96:fe:
         01:05:39:f2:0c:93:5b:f4:c4:d3:33:ae:90:12:3c:00:91:a1:
         56:ef:2f:90:68:fd:52:d8:1d:a9:d5:22:6a:c2:d8:4e:f2:e4:
         80:b6:b4:60:4b:89:cd:37:f5:5a:92:5e:8e:48:39:83:5e:30:
         82:54:2b:7b:a0:6c:76:c8:72:a3:73:44:ee:ba:9c:64:07:00:
         5f:ea:d5:28:0b:f3:d4:e3:66:0c:f3:f9:1e:84:d1:44:58:1d:
         db:d1:7b:7e:6f:51:37:87:10:0b:6c:89:a7:7d:1f:f6:b0:e6:
         0e:85:4b:f1:5e:96:8b:9c:68:e2:54:16:40:65:cf:46:66:0c:
         b5:95:bb:5b:88:00:73:97:60:3a:78:92:cd:75:be:57:e6:0c:
         7a:bf:7d:5f:12:bc:a4:86:ec:3f:17:a0:b4:c1:ae:cd:b1:16:
         77:c2:ae:24:9b:19:46:70:8c:a0:8b:4a:38:a1:8d:06:ba:e1:
         ed:a4:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org