Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38332e302f32342d3234203d3e20323635353135.roa
File:                     3230302e3130382e38332e302f32342d3234203d3e20323635353135.roa (raw, json)
Hash identifier:          k6BNmRS/YO0R4X9/z1HnvnkuUsTcO3v/Zx4PlEmwAiI=
Subject key identifier:   18:73:16:10:A5:42:25:63:50:28:3D:81:18:BE:16:51:FB:2C:9D:D6
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       5157C256AE0FE170462475D48080D171E8559CCF
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38332e302f32342d3234203d3e20323635353135.roa
Signing time:             Tue 05 Mar 2024 17:50:01 +0000
ROA not before:           Tue 05 Mar 2024 17:45:01 +0000
ROA not after:            Tue 04 Mar 2025 17:50:01 +0000
asID:                     265515
IP address blocks:        200.108.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:57:c2:56:ae:0f:e1:70:46:24:75:d4:80:80:d1:71:e8:55:9c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar  5 17:45:01 2024 GMT
            Not After : Mar  4 17:50:01 2025 GMT
        Subject: CN=18731610A542256350283D8118BE1651FB2C9DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:83:d2:ab:d5:f3:31:fd:71:ed:f6:31:8d:
                    83:14:5f:6d:fa:01:f8:56:7d:85:39:2a:ea:b7:f9:
                    e5:88:f6:03:93:c8:ea:73:b7:1b:52:7f:64:20:45:
                    0f:8b:36:25:11:6c:aa:9c:f9:cb:68:3a:c8:74:af:
                    0f:a4:93:2e:d8:31:5f:fb:9d:fc:6e:91:88:a1:a9:
                    3d:e8:76:f3:9d:be:a4:46:17:b5:4c:be:0f:6f:4d:
                    dd:c9:1b:bc:e6:39:f7:e4:26:2e:bd:de:8d:6b:75:
                    e4:59:e7:e8:32:98:da:c7:b1:f6:fc:e8:e2:a5:44:
                    79:b0:f3:5b:63:41:31:81:8b:fb:c7:fb:65:9f:2e:
                    b8:65:26:95:20:89:08:fe:cd:06:09:24:9d:c6:ed:
                    2c:76:58:22:a3:dd:c4:71:4e:19:b8:aa:93:35:e6:
                    10:d8:aa:95:65:27:9b:e0:ab:ef:f6:65:54:49:90:
                    e6:e0:6a:b5:e1:3b:b6:2e:48:31:f9:74:00:5a:02:
                    50:b0:fb:92:f4:fc:c6:7a:a3:63:40:cf:58:e2:b7:
                    8e:82:ac:d8:2b:d7:91:01:0e:4f:85:ef:9d:43:ee:
                    33:29:cc:48:ae:ca:e6:b5:8f:7a:45:60:44:66:29:
                    b5:40:af:5c:88:44:1b:1c:14:3e:b2:ee:99:67:fa:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:73:16:10:A5:42:25:63:50:28:3D:81:18:BE:16:51:FB:2C:9D:D6
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38332e302f32342d3234203d3e20323635353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:2b:5f:a3:80:19:5e:48:0b:13:4f:14:af:f9:69:b0:75:
         a7:bf:e8:1e:0a:66:f8:5e:41:a1:af:b0:18:7a:5f:4d:c6:d2:
         af:95:a2:00:49:24:f0:7e:65:38:87:e2:14:a2:5e:53:66:7c:
         47:2c:1d:20:49:93:32:6e:79:8e:03:21:6d:3c:3b:01:e1:a9:
         1f:d4:21:78:a4:de:4d:41:af:cc:02:f4:78:f0:60:8a:dc:ef:
         b6:f5:8e:3b:b4:13:8f:56:0e:f6:d3:a7:61:ee:3a:3d:de:3c:
         f6:bc:dd:20:52:84:8f:4d:cf:a8:f6:4e:75:78:28:b9:17:1d:
         5f:a5:49:b1:f7:fb:03:45:2b:42:26:20:6b:f8:24:68:8e:79:
         a2:d3:9e:43:e3:51:da:ab:cb:7f:71:19:93:5b:27:be:f8:1d:
         88:65:4a:c3:50:f5:32:5e:d3:9a:6c:71:40:73:64:0b:44:5c:
         df:34:97:92:d1:a0:37:22:81:71:72:2c:d6:64:61:da:c4:73:
         f4:79:d5:f5:84:00:6a:2d:20:41:8f:76:02:18:fe:76:a5:5c:
         ca:f2:e7:6b:ee:8f:08:68:e5:83:dd:a9:8d:2a:e2:e9:b5:cf:
         31:5d:93:b1:2c:aa:76:6a:71:0a:da:25:de:41:00:02:3d:ca:
         7a:f8:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:19 2024 by rpki-client on console-fra.rpki-client.org