Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37322e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          GPdqVM5LF5fhJZ+Qkn/SPzuYV8cPsJ3HAaG3EAy7OBA=
Subject key identifier:   6F:0A:69:EF:4D:F3:5B:34:89:66:AF:90:03:99:67:70:10:E2:A2:BC
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       51D42AA26D3C8A924B32969E2673F3D9DDCB1216
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:30:03 +0000
ROA not before:           Mon 20 May 2024 00:25:03 +0000
ROA not after:            Mon 19 May 2025 00:30:03 +0000
asID:                     26593
IP address blocks:        200.108.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d4:2a:a2:6d:3c:8a:92:4b:32:96:9e:26:73:f3:d9:dd:cb:12:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:25:03 2024 GMT
            Not After : May 19 00:30:03 2025 GMT
        Subject: CN=6F0A69EF4DF35B348966AF900399677010E2A2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:8f:53:58:9d:c5:0c:2c:7b:58:34:c4:e5:
                    ec:fb:1c:c7:c8:58:82:13:ae:4f:95:b0:19:35:b7:
                    36:5e:b5:87:fe:82:7d:18:a5:8d:09:87:b4:ce:d0:
                    fd:96:30:92:d3:68:c1:43:60:5a:9f:e2:e1:0a:1d:
                    e0:9d:04:77:1c:0f:0d:5d:a2:60:9a:98:3a:3a:1c:
                    45:cf:bb:cb:6f:a1:15:18:27:76:00:ad:69:2e:ad:
                    30:ec:d0:ec:40:99:fc:dd:db:8c:58:31:be:f8:25:
                    6b:b0:9f:ca:3f:71:28:8c:ac:13:eb:c0:84:30:25:
                    6e:d0:fb:0a:45:48:42:78:07:19:99:ff:b2:aa:dd:
                    80:55:53:2b:16:aa:de:de:72:4d:95:2a:88:7d:f7:
                    f9:be:2d:2e:ff:8e:44:1b:48:9f:31:80:5a:c6:d6:
                    7f:8c:52:c9:72:bf:a6:d6:b6:1c:c7:08:54:ef:c3:
                    86:84:a0:bd:4e:af:f0:4b:db:28:f8:b9:2a:b3:64:
                    71:72:30:82:7f:8f:d1:a9:40:4e:c4:89:3c:44:25:
                    22:70:27:92:3f:21:cf:4a:df:d1:80:a2:02:ca:fd:
                    5b:d1:99:ac:69:c2:c5:6e:16:e3:2d:c0:4f:40:c3:
                    c6:ed:cf:27:43:ee:7c:a2:be:2a:7c:8a:95:89:6e:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:69:EF:4D:F3:5B:34:89:66:AF:90:03:99:67:70:10:E2:A2:BC
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:56:0e:87:fb:5a:fc:d2:c5:18:86:8b:86:8d:0b:7f:59:ed:
         a1:78:83:3f:3a:ba:99:a2:68:18:46:bb:f3:be:c0:cf:34:7d:
         55:e6:4c:75:c8:7d:45:f9:d3:5a:c3:e7:64:db:75:be:8c:b4:
         8f:99:70:75:f0:eb:8d:5d:4b:57:63:13:c5:8a:ab:c9:c1:7e:
         0e:69:02:80:22:bc:66:be:81:c2:0a:be:cd:30:4f:5f:73:55:
         76:1b:6d:a8:18:de:79:9e:ce:76:99:b1:0a:88:13:7e:20:84:
         65:1b:1f:84:db:cd:40:12:e2:c8:5f:dd:37:0f:d3:88:3a:6a:
         dc:96:60:68:ae:60:35:63:02:22:3a:9c:bf:6a:d5:1f:9b:87:
         0f:ce:99:98:d4:e7:ef:c1:51:dd:d4:21:bb:56:9a:9f:0f:2e:
         a2:cb:1e:5e:a6:43:a4:3d:55:0b:45:42:a7:fb:23:78:ff:ba:
         ef:1d:0d:75:91:8f:2f:40:31:c5:cd:18:6a:21:da:04:41:5e:
         5d:46:de:45:bb:c5:cd:8a:18:a3:81:7f:28:27:ae:91:a0:c0:
         31:10:b5:4d:cc:b2:38:76:b6:ab:77:eb:ba:d2:41:41:6d:9d:
         ba:fa:20:ef:10:2a:4e:97:21:0a:f5:31:8a:f9:8e:87:50:51:
         b2:aa:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org