Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37372e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37372e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          lGgTm2DmCw2+DrH/CV56Z6WrIqA9BKPOZVtJ11kC7Rg=
Subject key identifier:   53:3D:35:D8:EE:26:D8:03:7F:CF:70:FE:3C:19:39:B8:58:0A:B6:E5
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       7598458C86EBC772407130159E7513DD85262453
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37372e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:35:00 +0000
ROA not before:           Mon 20 May 2024 00:30:00 +0000
ROA not after:            Mon 19 May 2025 00:35:00 +0000
asID:                     26593
IP address blocks:        200.108.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:98:45:8c:86:eb:c7:72:40:71:30:15:9e:75:13:dd:85:26:24:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:30:00 2024 GMT
            Not After : May 19 00:35:00 2025 GMT
        Subject: CN=533D35D8EE26D8037FCF70FE3C1939B8580AB6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:a2:ae:e7:65:e4:0e:16:a7:71:71:8f:11:
                    65:43:30:ee:6e:8c:c2:74:6f:b7:5b:44:57:55:26:
                    88:c8:eb:fa:ea:98:74:d0:f6:d6:0a:86:b3:c6:bb:
                    dc:99:86:0d:1b:de:60:48:fd:d5:28:75:02:e7:34:
                    99:99:5c:9d:5e:e6:21:07:42:bf:68:61:2f:dd:bb:
                    10:78:60:58:cc:6b:3f:7d:0e:a0:ae:28:92:d2:8b:
                    3c:9d:23:28:1f:41:43:93:b5:b5:8c:0b:91:ae:f2:
                    a5:24:3c:35:33:f9:26:d0:06:05:c8:26:72:33:f4:
                    fa:5a:b3:70:27:5c:85:70:85:31:59:e7:73:5e:d6:
                    79:07:64:97:6e:e9:ea:7a:1d:a7:22:2c:15:59:18:
                    5d:49:db:74:88:ef:03:81:93:56:6e:93:38:04:f7:
                    24:59:85:ce:1b:51:c5:8f:af:c6:6e:67:69:27:91:
                    d8:12:f7:f5:ca:10:eb:7d:91:0f:2a:89:74:ca:2f:
                    f5:db:ae:5c:ed:17:e4:59:44:d6:aa:c1:76:ba:e3:
                    9d:a0:42:36:c4:5b:29:61:ca:dc:d3:ba:53:6f:a5:
                    dc:b6:85:2d:11:2c:9e:bd:33:fc:74:2c:70:d2:d3:
                    ca:75:67:2a:80:b3:54:0d:14:f8:18:90:c1:fc:c6:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:35:D8:EE:26:D8:03:7F:CF:70:FE:3C:19:39:B8:58:0A:B6:E5
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37372e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3d:41:a3:7e:be:8f:e8:ab:8a:fa:64:99:b6:cd:1c:d2:9c:
         16:26:0a:7f:04:bd:6d:ab:fb:2c:59:06:ac:25:6e:ef:56:9e:
         8b:7d:79:25:c7:3a:69:9f:ac:28:4c:9f:f1:00:52:d6:42:32:
         0d:2f:22:b2:4f:44:f3:2e:04:76:bd:a1:2a:bc:21:59:04:1d:
         a3:50:8f:91:de:ba:3e:70:61:52:20:b1:81:79:97:60:c9:19:
         8d:56:40:07:c5:65:2f:00:bf:9f:10:73:a2:52:0d:ab:a2:d2:
         c0:c7:b5:a4:b5:20:0c:57:0b:5a:03:b4:d4:d8:46:0c:42:b1:
         26:7a:13:11:10:0d:ff:8a:aa:53:21:3a:5e:91:45:a0:7e:c4:
         e5:83:70:8a:2a:cb:ac:10:da:dd:cd:f5:cb:d1:88:e5:ae:b2:
         a0:7c:07:cc:eb:d4:6b:9a:0d:18:40:c3:1e:4f:fb:b9:a0:1a:
         36:5f:39:9c:58:19:ca:ac:e3:29:e0:c0:37:a4:a4:fe:09:7a:
         5e:cf:8e:4c:64:1b:d4:c2:ec:7e:08:31:62:79:9f:e2:d8:6c:
         06:45:01:93:7b:b0:28:27:43:69:d3:8a:80:6e:ec:d2:0b:05:
         05:91:1b:c4:65:71:56:78:13:31:ec:6d:dc:ef:c2:d2:b5:c1:
         26:ab:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org