Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38332e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38332e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          87hvaDc58FOqKuH0lUUEICHS3Ftdxeyb+w18KIiuj5E=
Subject key identifier:   F4:73:CB:3C:A7:17:5E:75:A6:39:2B:FA:4F:98:16:74:52:84:B8:CE
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       2CF60513262ACDA9BD84CD86E74E4FE014AA5392
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38332e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 07 Sep 2026 00:25:00 +0000
ROA not before:           Mon 07 Sep 2026 00:20:00 +0000
ROA not after:            Mon 06 Sep 2027 00:25:00 +0000
asID:                     26593
IP address blocks:        200.108.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 02:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f6:05:13:26:2a:cd:a9:bd:84:cd:86:e7:4e:4f:e0:14:aa:53:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Sep  7 00:20:00 2026 GMT
            Not After : Sep  6 00:25:00 2027 GMT
        Subject: CN=F473CB3CA7175E75A6392BFA4F9816745284B8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:32:af:8c:2d:b8:38:78:0c:8d:02:33:53:
                    63:86:22:14:12:11:56:c8:8c:78:71:0f:9a:13:70:
                    a1:26:45:3f:2a:ff:90:df:9a:19:74:41:1e:f9:23:
                    50:e0:19:80:b3:d1:a7:43:31:2a:1e:b9:38:f9:fd:
                    bc:9d:64:5d:cb:94:1d:a8:46:7b:5f:5b:e1:1d:6b:
                    a3:61:1d:5d:a5:46:02:ad:95:bd:92:f8:e1:54:63:
                    25:15:a4:30:2e:da:3f:81:d0:b6:76:f4:54:39:30:
                    c5:9e:27:57:f2:d3:7b:57:88:4e:bf:20:9f:2c:ef:
                    33:b0:65:c3:8d:f0:4e:4f:a7:3c:f9:8e:d2:bc:b1:
                    f1:4f:d4:05:65:95:b5:fc:48:a1:4c:62:ff:33:fb:
                    3b:e5:87:79:ab:84:e7:bc:96:92:cc:3f:30:af:b1:
                    19:53:e4:61:b3:df:54:11:4f:ee:ea:3e:55:5d:43:
                    65:5d:7a:33:97:40:3b:e1:e7:bd:e2:19:3e:58:4f:
                    8a:40:97:59:31:e5:c6:64:cf:f7:2b:5e:34:6a:37:
                    62:ff:18:c8:15:8d:b1:85:45:b8:b4:bb:1a:48:75:
                    26:4e:5c:37:4d:78:32:bd:a6:2d:f3:3e:b3:e2:90:
                    b9:1c:c6:85:ec:a3:37:dc:a7:ac:b7:65:5f:ae:6e:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:73:CB:3C:A7:17:5E:75:A6:39:2B:FA:4F:98:16:74:52:84:B8:CE
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38332e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:7e:b9:01:b1:23:43:30:64:e9:a5:ed:40:a5:a8:5e:c4:43:
         e0:49:96:04:72:c7:ae:22:df:fc:b9:29:c1:89:e6:ef:d6:45:
         1f:c2:0f:19:8d:21:18:c4:42:3f:61:00:81:fc:85:37:10:fb:
         29:5b:35:a7:e2:37:45:94:5f:9a:d5:fd:2b:05:9c:6c:7e:9e:
         25:bc:dd:f0:98:34:bb:1c:67:de:c6:49:d6:a0:84:c7:de:cc:
         d1:31:1e:de:7b:50:13:ec:8c:a0:52:73:03:38:55:f7:83:ae:
         0e:e2:f3:76:e6:23:62:2b:75:63:98:f0:e7:ac:05:d7:c9:0a:
         17:0e:dc:3a:55:1f:b0:fa:69:aa:61:af:3d:a7:87:40:06:3a:
         66:ee:8d:b2:e5:9c:4c:f2:dd:e4:f1:fa:ff:e1:9d:d6:b1:7b:
         3a:63:e4:a6:49:7e:da:18:b7:80:1f:3b:74:d8:18:a1:e6:9d:
         11:f1:33:60:4d:3f:24:05:6a:ac:56:50:23:36:bb:09:71:dc:
         0c:51:ae:02:e6:b8:c6:19:f9:09:14:89:b8:9f:5a:32:e0:f5:
         fb:1a:b2:2f:99:7b:6e:ae:e0:01:37:88:39:68:85:e4:39:a0:
         33:29:35:f7:bf:4b:25:be:d9:be:a6:75:12:e6:d5:29:a2:b8:
         ba:2b:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:05:31 2026 by rpki-client