Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38302e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          8TSxrf1qA2FuWYQscIDYrvTVwIeSHpmynhaPolkgKyc=
Subject key identifier:   ED:39:14:D2:3D:AC:C8:92:3C:B2:2E:65:04:A0:5C:4B:62:41:ED:D5
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       524D8F34129719B194AA408A9E819369F433B7AA
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:35:03 +0000
ROA not before:           Mon 20 May 2024 00:30:03 +0000
ROA not after:            Mon 19 May 2025 00:35:03 +0000
asID:                     26593
IP address blocks:        200.108.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4d:8f:34:12:97:19:b1:94:aa:40:8a:9e:81:93:69:f4:33:b7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:30:03 2024 GMT
            Not After : May 19 00:35:03 2025 GMT
        Subject: CN=ED3914D23DACC8923CB22E6504A05C4B6241EDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:36:52:d5:f2:d0:b3:42:a1:f0:24:9e:b6:
                    be:20:0b:2d:66:c0:25:b4:19:81:15:57:53:ab:f8:
                    70:30:ed:54:dd:f2:c0:8c:81:2d:a6:9c:8e:d7:ac:
                    86:8e:da:0b:4d:01:89:0e:a9:73:99:97:25:f7:7b:
                    35:86:30:fa:e2:8b:70:ae:55:1b:2d:e8:8b:ba:77:
                    3a:fd:99:79:2a:14:a6:c2:6b:9b:5a:d7:0c:38:67:
                    dd:d5:c9:a4:7f:e0:ad:1f:1b:b4:42:c2:35:eb:1d:
                    0c:ab:33:32:b1:11:a0:21:99:9f:4f:ec:22:75:a8:
                    eb:6f:b6:27:4e:1f:8c:b0:ad:e4:4f:61:8d:9a:44:
                    fe:92:c5:8f:32:69:b2:37:37:c0:4c:2b:a2:5f:d7:
                    92:70:34:7e:ba:6c:03:a7:b8:14:9d:10:8a:0d:11:
                    47:b0:a8:95:04:9c:80:a4:87:0e:95:ba:30:58:02:
                    81:08:9a:bb:08:e1:b6:90:5a:3e:e4:ca:a3:eb:b2:
                    53:f3:61:12:73:43:ce:b7:f6:f1:c4:59:69:a0:4b:
                    09:da:6b:a2:34:f7:01:d8:32:ef:89:22:51:fc:cb:
                    e4:06:b5:26:63:ec:46:81:4e:e0:85:e4:1e:ab:80:
                    ff:55:33:22:f9:bb:65:cb:b1:6e:de:8d:13:1e:c3:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:39:14:D2:3D:AC:C8:92:3C:B2:2E:65:04:A0:5C:4B:62:41:ED:D5
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:78:28:1e:d1:79:06:90:7a:5d:47:18:b9:15:5d:e4:77:19:
         5a:3e:85:0a:52:bf:68:c7:b2:a4:f4:f8:4d:a3:33:67:e3:6f:
         f5:47:8b:31:1a:ac:50:fa:af:9f:14:1c:cc:0c:05:d4:54:a9:
         17:1a:80:46:77:e2:14:31:6e:d8:67:20:77:b8:18:ac:e6:6f:
         ed:0e:c4:f6:ed:d4:83:6d:f0:f3:87:ae:94:85:00:63:d3:e8:
         87:29:f2:39:31:47:02:a1:81:d2:a2:1e:2d:b9:29:77:04:f7:
         55:65:03:7d:dc:c0:96:10:1d:5e:3b:7c:c8:d2:a3:28:c3:a2:
         20:81:43:61:11:39:de:f7:c3:e0:ec:5c:31:12:77:ca:8b:69:
         32:ce:87:68:4d:77:f3:2e:10:33:28:75:56:24:e0:7c:7c:03:
         b0:43:ce:c7:09:14:6d:37:2a:3f:95:9a:a4:a7:86:8f:d1:8a:
         f0:29:62:01:23:69:c1:b4:4f:bf:56:a9:d8:11:60:85:43:d0:
         92:e0:2d:d3:16:e1:e5:8d:0e:ac:5b:db:70:7d:53:18:f1:06:
         77:0d:bc:04:c9:af:3c:d6:c6:f6:03:29:2f:8d:82:38:b6:12:
         cc:ff:c7:03:2e:7f:c4:a0:0f:f4:26:57:6f:86:07:be:f6:72:
         41:21:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org