Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          y+hCkrDLdMG0VnqPRBAceDNuBb/9NFDZn4/va82Wrg8=
Subject key identifier:   03:5B:39:29:62:18:9B:A4:91:9E:8F:69:66:47:66:12:3E:91:B9:FF
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       5E8845CD5E31A68E98AFE517D5FA9D29E7D5BB88
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:35:00 +0000
ROA not before:           Mon 20 May 2024 00:30:00 +0000
ROA not after:            Mon 19 May 2025 00:35:00 +0000
asID:                     26593
IP address blocks:        200.108.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:88:45:cd:5e:31:a6:8e:98:af:e5:17:d5:fa:9d:29:e7:d5:bb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:30:00 2024 GMT
            Not After : May 19 00:35:00 2025 GMT
        Subject: CN=035B392962189BA4919E8F69664766123E91B9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:06:bf:4b:10:41:75:00:fb:6a:c4:61:9d:
                    c4:01:bc:b2:b8:38:c2:4d:63:1d:27:a1:fd:12:aa:
                    c0:b6:70:4b:9f:ce:86:43:fb:e0:d9:9b:cb:5d:2f:
                    12:27:bc:3a:d6:90:9f:cc:e0:af:9e:a2:9d:e4:af:
                    4f:0c:0a:e8:50:51:38:ea:c0:cc:61:e0:2a:0c:b5:
                    48:e7:e7:b3:f2:8e:eb:b3:71:73:db:85:b9:d3:34:
                    75:d9:29:cf:79:7b:ab:0d:e3:91:49:fd:98:1a:13:
                    93:f0:00:1d:b2:e9:e8:7c:c5:3c:fe:90:00:46:88:
                    c8:97:73:88:fc:9d:b8:3b:67:a9:87:d4:f7:cc:e7:
                    81:b9:b5:f8:f1:26:1f:5c:53:b6:e5:ad:f8:55:d6:
                    5b:88:94:6b:c6:c7:42:58:81:2c:08:97:86:c2:d2:
                    dd:21:bb:1b:5b:9f:2d:5e:50:85:1c:2d:fe:9f:e0:
                    39:1f:6f:83:ed:12:c4:c2:cb:42:1b:8e:f7:10:3e:
                    24:0b:4e:06:ff:b1:70:3c:f9:64:85:7e:88:5e:02:
                    54:2f:4d:57:68:dc:8f:37:29:ea:0e:75:ad:37:8f:
                    71:ac:36:75:15:93:fd:ab:dc:86:24:9c:b7:d0:ad:
                    db:a3:ae:55:e0:1a:3e:91:3e:a4:65:0d:46:ee:d1:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:39:29:62:18:9B:A4:91:9E:8F:69:66:47:66:12:3E:91:B9:FF
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:b2:5f:75:9f:42:6a:05:c7:02:2d:9c:00:11:8f:6d:a0:
         5f:84:0c:ab:56:23:04:d2:d7:0a:af:07:38:bf:43:52:01:14:
         89:64:db:26:96:8f:cd:91:26:42:67:74:de:64:0a:ac:48:81:
         d8:dd:64:e6:16:cc:78:49:71:97:e8:d1:29:30:97:c0:71:61:
         99:fd:88:f4:22:bd:25:55:c7:63:b3:82:32:9d:f6:a2:cd:3c:
         f9:b1:92:34:fa:21:57:e3:a6:a6:5c:79:6c:0a:b7:e1:bd:67:
         94:c6:91:4c:83:4a:e8:29:07:01:11:c6:f6:d7:85:e6:7c:c1:
         ce:fd:5c:97:ca:3b:58:36:73:da:69:3c:15:93:8e:85:a6:ea:
         a1:b4:d6:26:87:5c:b0:41:59:18:7b:a8:e6:4f:ef:60:58:fb:
         52:a3:21:9f:f0:a1:18:16:c3:d9:e5:60:6f:99:1f:85:a6:4e:
         2d:63:97:af:5c:94:5b:4a:ac:a4:9f:df:5e:a0:b8:a3:1e:73:
         ca:cd:31:7f:cb:cb:d0:b3:01:4d:10:47:57:fa:36:85:96:d8:
         17:c1:86:de:04:42:13:1c:79:52:54:21:83:7a:b8:58:be:1e:
         32:bd:43:9e:2e:8c:86:30:09:24:d8:9b:51:40:08:8c:3d:36:
         c3:15:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org