Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37302e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37302e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          zbfckvMZ2xaOCxzkO4Ff+mjLMfZ6k/MJ6aZ5/G0xB1U=
Subject key identifier:   59:76:B2:FC:76:3B:5C:57:45:4F:59:0C:B1:29:ED:4F:30:B9:67:7E
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       70041524CEE141E73910B60E9B89BBC1BEF474D9
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37302e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:30:00 +0000
ROA not before:           Mon 20 May 2024 00:25:00 +0000
ROA not after:            Mon 19 May 2025 00:30:00 +0000
asID:                     26593
IP address blocks:        200.108.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:04:15:24:ce:e1:41:e7:39:10:b6:0e:9b:89:bb:c1:be:f4:74:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:25:00 2024 GMT
            Not After : May 19 00:30:00 2025 GMT
        Subject: CN=5976B2FC763B5C57454F590CB129ED4F30B9677E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:b5:09:45:ee:2b:86:90:c6:54:fe:f9:cb:
                    2b:93:50:91:44:9c:6e:34:9d:a0:ba:4c:ff:be:87:
                    01:41:d4:b5:f9:4a:01:74:d3:27:91:fd:09:d8:bf:
                    ba:38:c5:2d:6b:d4:60:49:28:84:d1:18:fd:3c:32:
                    5e:f2:5c:2e:3c:c1:56:9f:23:47:a3:be:42:8c:7f:
                    a9:4b:57:42:1c:95:1f:3c:0c:45:32:e6:f3:af:c5:
                    24:34:bc:fb:09:e6:8a:93:09:ed:67:77:88:d5:86:
                    6f:33:57:87:ab:4c:15:7f:14:fc:d8:52:ce:3e:94:
                    71:dc:e9:dd:ec:c9:36:0f:b0:7d:cf:3d:a6:c8:3a:
                    77:e4:96:f1:58:6d:14:79:53:15:2a:56:3f:16:6b:
                    e1:c0:5c:5d:ea:66:e9:7e:77:04:d9:1a:28:fe:c9:
                    bf:d5:33:e2:22:7f:d9:18:45:a0:bb:20:d6:ba:aa:
                    f8:e2:cf:62:54:3b:80:e5:fa:94:08:b4:a0:55:3f:
                    5a:98:6a:2a:32:d3:c5:04:fb:6d:22:34:22:d5:a1:
                    fe:ab:6f:e7:62:e1:f0:b3:c5:ad:91:ba:76:2e:a3:
                    5c:51:37:b4:8e:fd:98:5a:cc:13:75:15:06:1f:7f:
                    bb:e7:7c:a5:0d:d0:96:db:db:5d:2b:0b:6f:5f:d3:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:76:B2:FC:76:3B:5C:57:45:4F:59:0C:B1:29:ED:4F:30:B9:67:7E
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37302e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:22:96:f0:a8:4d:42:a6:08:57:dd:81:0f:29:5d:11:2f:97:
         b4:9e:cc:b0:25:e4:03:16:b6:c0:66:7e:cc:fa:32:cf:80:50:
         78:07:13:1b:c5:11:28:e4:3f:b2:3d:73:80:6a:ea:ac:41:0f:
         4d:b1:e6:4e:0e:f4:29:2d:9d:53:88:14:56:79:c6:13:82:df:
         c0:dd:61:ae:34:12:89:65:0e:54:89:fd:43:e1:cc:2d:ff:18:
         7f:41:c1:e0:e2:b4:36:b1:6a:b0:b9:80:27:21:ec:2f:50:17:
         be:c7:ff:f8:c5:8c:b1:f3:2d:55:ff:c9:49:ad:82:4c:e0:63:
         de:8a:84:70:b7:4a:5f:70:8a:10:d9:48:43:26:7a:fe:16:d8:
         9c:46:d2:3a:3a:ca:1e:00:62:22:1d:98:b5:f8:0e:e4:02:55:
         fb:11:cf:4e:0b:e9:38:6d:69:08:44:19:69:3e:87:5a:52:47:
         23:da:aa:97:c9:e1:99:44:ba:17:f3:d0:13:a9:bc:9e:a1:70:
         a3:00:af:6c:bd:c8:13:95:cf:1b:f1:fe:bb:87:5f:88:e5:50:
         ca:b1:19:2d:35:32:2f:1c:bf:ef:a1:18:8e:ad:bc:7a:05:64:
         fd:33:a2:7f:51:3c:e0:a0:f8:8d:39:8c:5e:91:e4:ae:01:e8:
         76:f2:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org