Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          NFFOrXrdiyV9jrUBSLZjiz6HeEPKooKla6fswuEFIRo=
Subject key identifier:   07:98:40:3C:33:F1:5A:CE:2E:1E:D8:BC:B2:F8:D2:E7:37:C0:AA:D4
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       69C7EE398552396718F5F439166DC8AB05B3C048
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:30:03 +0000
ROA not before:           Mon 20 May 2024 00:25:03 +0000
ROA not after:            Mon 19 May 2025 00:30:03 +0000
asID:                     26593
IP address blocks:        200.108.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c7:ee:39:85:52:39:67:18:f5:f4:39:16:6d:c8:ab:05:b3:c0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:25:03 2024 GMT
            Not After : May 19 00:30:03 2025 GMT
        Subject: CN=0798403C33F15ACE2E1ED8BCB2F8D2E737C0AAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:76:af:96:e2:2e:45:69:d1:f9:22:0f:2d:
                    6a:bb:dc:7b:31:8a:04:2e:c6:72:c9:49:5b:4e:29:
                    d7:57:44:ec:b3:5e:10:21:7a:72:70:ec:80:26:5a:
                    4f:1c:2f:25:03:70:d5:9c:16:15:ae:f8:5e:59:fb:
                    19:07:4d:27:f4:63:4c:4b:17:f1:92:e9:45:49:59:
                    6a:c9:fe:7b:11:c9:d3:24:a3:3e:ba:bd:be:78:49:
                    5d:98:f5:f1:a6:2b:d1:1b:18:ec:56:eb:f2:77:fd:
                    fd:64:b3:85:ec:a7:6c:bb:1c:e1:d4:e1:86:e5:b1:
                    29:a4:3d:05:6b:26:99:b1:73:bb:51:ec:e2:61:5a:
                    4e:0b:9c:32:78:52:f5:6f:79:e6:8b:a5:f4:bf:7c:
                    c7:9a:37:a4:bb:35:00:b8:f0:97:98:51:19:87:1c:
                    c8:50:f8:eb:07:2a:f5:80:40:c9:d9:fc:c8:2d:6e:
                    eb:5d:96:f6:fc:9f:4a:6c:d4:c4:fe:83:f3:41:a5:
                    f9:34:43:b8:ac:28:93:3a:86:38:d8:44:71:38:e1:
                    1e:af:1f:e2:07:b4:d4:c3:94:76:86:3f:e6:9d:3f:
                    f4:67:39:43:a1:56:4c:c5:5a:51:8d:b2:b1:2e:65:
                    9b:9c:02:73:b3:f2:39:0b:07:6f:3c:a9:51:bf:4e:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:98:40:3C:33:F1:5A:CE:2E:1E:D8:BC:B2:F8:D2:E7:37:C0:AA:D4
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:7b:cc:40:05:c5:4d:71:2f:de:c6:3d:1d:82:6f:77:05:
         07:52:83:ab:06:42:49:a6:cf:90:2d:9a:ca:4c:ad:62:2c:35:
         be:53:87:7b:7e:51:a7:e7:9a:fc:19:a1:db:6a:24:d6:a4:3f:
         d7:d8:32:2c:8a:2a:19:df:04:16:b4:42:40:46:ee:c0:ef:5c:
         7e:d7:8f:88:cd:85:50:7a:73:47:61:4f:a9:14:16:f0:9d:53:
         fb:dc:7d:6f:64:76:93:7a:23:f6:45:2b:0e:40:3d:01:b9:8b:
         24:de:0d:a2:f5:e7:bb:8b:d2:44:ed:be:f6:a4:a9:10:4b:81:
         c4:de:cd:54:4b:74:41:ad:54:02:1b:f2:52:f0:fd:d4:a1:c6:
         8b:5b:78:07:db:62:77:30:ca:3a:19:f6:6b:53:5e:83:c7:89:
         d4:df:be:7e:5a:03:f0:7a:e8:ab:fa:be:be:06:8a:85:a1:b5:
         80:b1:cb:bb:73:58:61:b3:3b:f2:1d:07:5b:7c:b5:d7:94:8b:
         8a:30:b6:00:bd:5f:d6:07:99:5a:d0:f0:7e:b9:bc:a7:91:b6:
         65:4b:4d:32:2f:f8:44:7d:8f:67:1c:f6:f6:2a:93:74:53:51:
         f8:a8:3f:ed:81:11:73:d8:42:2b:d2:5b:eb:a8:6c:29:27:3a:
         bc:52:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org