Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37332e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37332e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          jB2aMIN9M+3kDsLcIa2m6jd3LSoWf2EreKwX9OhoSjw=
Subject key identifier:   86:47:08:E4:5B:CC:5B:BE:B4:EB:63:47:B7:84:5D:7B:70:E1:18:64
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       36AA5BFAF7C857F9CA5C8FC0E077BF08796E37EA
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37332e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:30:02 +0000
ROA not before:           Mon 20 May 2024 00:25:02 +0000
ROA not after:            Mon 19 May 2025 00:30:02 +0000
asID:                     26593
IP address blocks:        200.108.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:aa:5b:fa:f7:c8:57:f9:ca:5c:8f:c0:e0:77:bf:08:79:6e:37:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:25:02 2024 GMT
            Not After : May 19 00:30:02 2025 GMT
        Subject: CN=864708E45BCC5BBEB4EB6347B7845D7B70E11864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:af:f5:cb:1a:8b:b4:9f:c6:97:97:53:1b:
                    21:82:a3:81:4a:72:62:16:f4:ca:1c:2d:82:87:4b:
                    1f:09:e1:29:02:2e:13:3b:a1:3c:da:cc:26:8f:9c:
                    a4:14:2f:25:93:7b:56:e6:d7:33:2b:a7:5b:75:2e:
                    58:a5:0a:de:8e:7b:95:c4:7d:b0:0a:a8:30:79:0d:
                    6c:9b:76:1c:e3:ce:23:2e:f2:8a:85:be:bc:91:60:
                    35:fa:f6:63:84:c5:b1:28:bb:a6:5d:5c:7d:39:67:
                    d5:72:f4:77:66:6d:6e:c8:57:16:a7:f4:34:09:4d:
                    cf:46:65:9b:28:fb:c1:a0:7b:26:87:c5:c2:a0:f5:
                    33:c9:3d:85:8d:cb:84:1d:77:0f:97:31:dc:39:1e:
                    89:54:36:41:78:f7:db:4f:de:f7:91:ea:b2:fd:ab:
                    f0:37:08:47:e2:46:59:e7:4d:51:d7:0c:9e:1e:a9:
                    6e:48:c6:f6:46:39:3c:84:fe:05:28:10:67:38:e9:
                    88:3c:43:6a:a2:0d:6d:20:1e:06:26:a6:a8:f0:be:
                    dc:28:2f:e0:f0:96:ff:62:95:93:49:85:d8:14:7a:
                    7b:6d:e5:3e:8b:22:ff:10:1c:e2:8f:69:51:b4:b8:
                    29:56:28:05:4d:9a:48:56:10:9b:43:d3:5e:82:c9:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:08:E4:5B:CC:5B:BE:B4:EB:63:47:B7:84:5D:7B:70:E1:18:64
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37332e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:c5:dd:05:c7:2a:18:94:48:bd:20:b9:18:51:eb:40:5a:
         79:a9:5d:ce:5b:e3:a3:f6:bf:f4:33:d1:b2:13:fc:69:33:b8:
         73:34:58:b2:27:dd:34:5e:66:51:5d:c2:d3:b4:f0:0a:1f:68:
         c4:63:33:41:b1:5d:86:37:55:ad:43:9c:7b:de:79:f5:e2:ae:
         0b:76:97:05:f8:ff:8a:3c:71:39:45:6c:2c:b6:72:2c:47:ad:
         85:0f:87:0e:96:d3:33:6f:8b:19:ea:3b:03:d4:77:b4:65:0e:
         65:7d:db:11:1b:fb:fb:f3:e8:61:0d:a2:c2:df:d7:4c:c4:f1:
         fb:8c:ce:ed:32:d9:68:21:a0:ae:10:bd:83:12:e7:98:fa:14:
         b8:44:0c:21:33:64:7e:75:b1:5e:88:84:ac:10:da:97:08:65:
         fa:56:20:62:91:11:60:f6:c4:2f:21:16:e9:cf:ac:47:9d:ea:
         e9:67:46:60:17:7b:e4:08:17:5e:b3:6e:8d:04:79:16:d7:c7:
         da:e1:39:e1:a6:6c:dc:30:cc:62:14:e2:5e:f2:a0:5a:44:26:
         1c:60:56:13:0c:b0:64:40:85:f3:25:f0:5e:8e:89:11:0b:1b:
         6d:8a:d4:a3:b0:98:91:8e:9c:f1:8d:a1:76:2f:17:d2:2c:c1:
         1d:2c:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org