Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38322e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38322e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          XY95T9UHY89GH4NbAH58GKnDwZQObUGNepQrWM2V4fA=
Subject key identifier:   9E:05:87:CD:64:6E:51:00:A1:E5:1A:99:6E:58:5C:E7:AB:E1:68:3C
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       78113F973739FE17579A06B9793E3EDE2A312BE0
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38322e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:35:02 +0000
ROA not before:           Mon 20 May 2024 00:30:02 +0000
ROA not after:            Mon 19 May 2025 00:35:02 +0000
asID:                     26593
IP address blocks:        200.108.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:11:3f:97:37:39:fe:17:57:9a:06:b9:79:3e:3e:de:2a:31:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:30:02 2024 GMT
            Not After : May 19 00:35:02 2025 GMT
        Subject: CN=9E0587CD646E5100A1E51A996E585CE7ABE1683C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:96:67:0d:9a:a9:b7:8d:04:ba:0c:97:6e:
                    c6:4e:6f:a9:23:26:ca:a5:1f:f1:ea:12:6c:30:7b:
                    a2:02:4c:f4:6f:2f:08:e4:45:1c:1d:48:56:6b:bb:
                    06:24:62:9b:ea:dc:6d:50:46:e3:98:42:94:31:cd:
                    e3:71:45:92:de:ef:98:7e:5a:8e:21:b5:66:d1:10:
                    78:b2:d1:6c:63:e5:69:32:fb:73:f4:da:47:cc:67:
                    3d:16:90:28:81:42:44:5a:85:69:71:df:1f:73:0e:
                    f8:1e:12:b0:bd:5f:f7:8b:5e:d1:df:13:bc:14:92:
                    c0:58:1c:d7:d7:b8:f5:de:33:32:3f:ed:06:dc:59:
                    03:52:b2:30:99:23:ac:f3:3b:cb:00:73:9d:74:bf:
                    55:eb:9e:e2:5f:34:7c:5f:a3:c2:3d:ca:ce:5e:de:
                    c8:da:c9:c1:9b:1b:f0:97:aa:35:ef:4d:5c:12:5d:
                    98:d4:7a:a5:f3:3f:39:54:1d:26:48:e5:eb:82:88:
                    1e:8f:06:eb:4d:80:6f:8d:0f:cf:37:aa:e8:01:49:
                    93:8d:f3:a1:60:f1:3a:9c:5d:5e:4c:33:41:c9:c9:
                    87:9c:b5:63:ea:3b:5a:37:e4:10:4f:01:47:e4:a0:
                    ff:c8:71:cb:7e:c9:de:8e:a1:a2:c3:0f:cc:24:70:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:87:CD:64:6E:51:00:A1:E5:1A:99:6E:58:5C:E7:AB:E1:68:3C
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38322e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:30:81:0b:10:e5:4a:da:39:51:67:69:1b:0b:b1:c9:6e:2e:
         1a:4a:70:a0:0d:e6:10:12:db:d3:84:ef:85:0b:c8:96:3c:e8:
         f1:cf:ae:0b:c8:12:c5:ad:87:70:ca:f4:6a:82:c7:b5:a6:a2:
         f5:07:28:6a:03:2f:99:f8:64:a8:e8:3a:09:5d:ae:08:35:6b:
         cf:1d:b4:b6:ec:a8:8b:61:c2:9b:f1:74:44:95:b1:4a:f0:1a:
         96:a0:29:1b:23:8c:93:c5:67:86:68:69:67:ea:7b:ef:45:b8:
         2f:df:77:a8:e3:d7:a3:24:bd:53:31:e1:3f:37:fc:9a:11:e9:
         99:30:1d:b1:17:70:b0:b8:9e:16:27:fc:74:cb:9e:e5:0f:56:
         f7:17:86:d5:7e:11:a6:03:40:3d:2d:84:c6:c5:74:d3:d2:4e:
         19:0f:97:71:28:9d:4d:05:32:98:da:7b:85:1f:d8:d7:94:84:
         1a:80:bc:87:c0:59:e8:19:e9:23:ad:7f:53:a8:f7:ab:75:65:
         65:47:ae:72:0b:aa:ec:17:34:2b:b6:bb:10:f1:6e:1a:e5:c8:
         45:8e:5c:08:c6:8b:5c:a3:4a:0b:04:1d:86:39:54:82:d1:c1:
         1b:bd:b4:a0:9c:bc:dd:ea:10:9e:8e:5f:7c:76:cc:d8:95:8b:
         6f:52:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org