Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37382e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37382e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          +gyIs6BTSJgOySVjSpCZHEsSVFvJUIh3dbuRhYjvEIg=
Subject key identifier:   99:83:78:3B:D3:AE:10:B2:7D:CC:FD:B0:07:67:99:57:12:3A:D1:33
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       479A218478469404987A8CD2CAAE738D7D3C621A
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37382e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:35:02 +0000
ROA not before:           Mon 20 May 2024 00:30:02 +0000
ROA not after:            Mon 19 May 2025 00:35:02 +0000
asID:                     26593
IP address blocks:        200.108.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9a:21:84:78:46:94:04:98:7a:8c:d2:ca:ae:73:8d:7d:3c:62:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:30:02 2024 GMT
            Not After : May 19 00:35:02 2025 GMT
        Subject: CN=9983783BD3AE10B27DCCFDB007679957123AD133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:48:cc:25:f0:32:8e:69:f6:43:94:2b:9f:
                    40:bf:7e:8d:ba:42:ac:f9:09:a9:7e:bf:65:ea:20:
                    48:c0:3c:52:30:e8:f4:64:07:64:4c:68:f8:47:56:
                    f0:6c:e5:70:2c:a7:38:b3:bf:e2:dc:bc:aa:7c:08:
                    50:56:19:be:99:13:a9:87:46:b2:f6:e7:db:00:86:
                    92:77:78:2b:da:32:98:9f:37:bd:52:14:5d:f9:12:
                    23:79:57:0f:2b:17:af:74:a3:34:f0:72:09:1c:d1:
                    a1:c4:e2:aa:d3:2b:79:77:a5:0d:28:c3:1a:c1:2a:
                    fd:b4:0d:e6:ef:1e:f1:bc:ea:7b:4e:f3:3c:97:c7:
                    69:5d:a1:e0:d5:ab:79:b8:a9:fe:84:19:ba:26:e0:
                    86:60:1e:66:6c:27:72:7c:90:4e:95:d0:0d:5b:93:
                    6d:aa:85:ba:4f:3e:c7:61:e0:c9:78:0b:b1:7e:e8:
                    02:03:51:86:e9:9e:62:2a:4e:a3:dd:6c:64:9f:05:
                    e7:11:8b:ea:19:9e:9c:7e:ef:62:f3:36:27:33:42:
                    03:5e:ca:cd:07:9d:d8:97:12:61:34:1e:6a:6a:38:
                    64:5c:18:65:ed:2b:6b:82:f1:83:ba:50:a1:c9:52:
                    35:08:46:d3:a0:85:51:fc:93:f2:95:ce:b4:02:4b:
                    3c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:83:78:3B:D3:AE:10:B2:7D:CC:FD:B0:07:67:99:57:12:3A:D1:33
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37382e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f7:88:91:63:76:05:08:ec:3c:8e:00:75:7e:d5:f8:aa:02:
         2e:3e:78:5b:97:3b:ff:8c:15:7f:b8:e3:9b:27:6e:e5:5e:6c:
         1f:fb:a6:eb:02:07:ed:83:e3:48:2d:d2:e1:76:7d:2d:6d:bb:
         6c:05:7b:22:0d:11:c9:15:19:c0:b8:e7:ba:f0:bf:77:db:dd:
         fc:dd:c7:a6:cb:80:ab:46:19:59:a1:15:bd:56:e9:d4:06:97:
         28:8c:1c:e7:b8:91:2e:54:f4:5f:4d:e6:cc:70:3a:70:d3:c6:
         2d:2b:4a:00:56:24:00:81:86:3a:2f:a8:32:4e:73:24:0e:35:
         5a:b6:c9:20:e0:04:ff:7a:93:91:95:8f:34:65:d5:5d:e2:31:
         2e:6d:80:2a:e3:94:38:da:68:46:20:a3:08:20:bc:21:e4:ef:
         7a:0b:10:c4:2b:9c:2d:5f:f6:dc:08:0d:59:e7:ec:a1:04:7c:
         0a:5c:31:5e:09:db:d6:6b:de:c1:51:9c:b5:c2:eb:68:b1:b7:
         83:d3:54:97:01:c6:ca:de:be:a9:85:64:dc:1d:4b:10:36:4f:
         10:11:32:2e:e1:09:8b:27:80:5d:d4:a5:af:d5:5e:69:dc:94:
         b4:13:d7:0f:bd:43:cb:d1:e6:c6:54:d4:54:fa:87:fb:26:84:
         00:f2:b0:79
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUR5ohhHhGlASYeozSyq5zjX08YhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxM0M5M0E2NkM3RTQ3QkI1Qjg2MDkwMDg3MzIyQkMy
RDY5ODFDQTAeFw0yNDA1MjAwMDMwMDJaFw0yNTA1MTkwMDM1MDJaMDMxMTAvBgNV
BAMTKDk5ODM3ODNCRDNBRTEwQjI3RENDRkRCMDA3Njc5OTU3MTIzQUQxMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OUjMJfAyjmn2Q5Qrn0C/fo26
Qqz5Cal+v2XqIEjAPFIw6PRkB2RMaPhHVvBs5XAspzizv+LcvKp8CFBWGb6ZE6mH
RrL259sAhpJ3eCvaMpifN71SFF35EiN5Vw8rF690ozTwcgkc0aHE4qrTK3l3pQ0o
wxrBKv20DebvHvG86ntO8zyXx2ldoeDVq3m4qf6EGbom4IZgHmZsJ3J8kE6V0A1b
k22qhbpPPsdh4Ml4C7F+6AIDUYbpnmIqTqPdbGSfBecRi+oZnpx+72LzNiczQgNe
ys0HndiXEmE0HmpqOGRcGGXtK2uC8YO6UKHJUjUIRtOghVH8k/KVzrQCSzzrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmYN4O9OuELJ9zP2wB2eZVxI60TMwHwYDVR0j
BBgwFoAU7BPJOmbH5Hu1uGCQCHMivC1pgcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzAzRTM2RjY1RkVCREFGMDkxNTQ5ODFBRTMyNjdEN0Yx
OEIwOUE5MDEyM0ZGN0E1MzQ5RkUzM0JDRDY1QkFCLzAvRUMxM0M5M0E2NkM3RTQ3
QkI1Qjg2MDkwMDg3MzIyQkMyRDY5ODFDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzEzQzkzQTY2QzdFNDdCQjVC
ODYwOTAwODczMjJCQzJENjk4MUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcwM0UzNkY2NUZFQkRBRjA5MTU0OTgxQUUzMjY3RDdGMThCMDlBOTAx
MjNGRjdBNTM0OUZFMzNCQ0Q2NUJBQi8wLzMyMzAzMDJlMzEzMDM4MmUzNzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhsTjAN
BgkqhkiG9w0BAQsFAAOCAQEAlveIkWN2BQjsPI4AdX7V+KoCLj54W5c7/4wVf7jj
mydu5V5sH/um6wIH7YPjSC3S4XZ9LW27bAV7Ig0RyRUZwLjnuvC/d9vd/N3HpsuA
q0YZWaEVvVbp1AaXKIwc57iRLlT0X03mzHA6cNPGLStKAFYkAIGGOi+oMk5zJA41
WrbJIOAE/3qTkZWPNGXVXeIxLm2AKuOUONpoRiCjCCC8IeTvegsQxCucLV/23AgN
WefsoQR8ClwxXgnb1mvewVGctcLraLG3g9NUlwHGyt6+qYVk3B1LEDZPEBEyLuEJ
iyeAXdSlr9VeadyUtBPXD71Dy9HmxlTUVPqH+yaEAPKweQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org