Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38352e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38352e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          ++FqA6JP84lmQVyC8eImfZkw3GBP1KxgynBwvc6siNc=
Subject key identifier:   75:E4:40:5C:E8:06:84:79:56:5D:DA:88:17:3B:D3:54:59:9C:13:94
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       25D683AF6F81B3C24FE63F2A992E0FE159D454A5
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38352e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:35:00 +0000
ROA not before:           Mon 20 May 2024 00:30:00 +0000
ROA not after:            Mon 19 May 2025 00:35:00 +0000
asID:                     26593
IP address blocks:        200.108.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d6:83:af:6f:81:b3:c2:4f:e6:3f:2a:99:2e:0f:e1:59:d4:54:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:30:00 2024 GMT
            Not After : May 19 00:35:00 2025 GMT
        Subject: CN=75E4405CE8068479565DDA88173BD354599C1394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:32:47:5f:13:74:b6:40:ae:4d:8d:d3:9d:
                    c2:89:07:3c:2c:97:56:0b:a6:a8:75:74:6f:7d:96:
                    8d:d8:a7:96:21:5c:3e:9a:8d:0a:1e:f8:91:c6:97:
                    74:48:38:cc:0e:95:20:13:0c:21:ed:18:74:a7:cb:
                    c2:cd:40:53:6a:21:fb:f0:8c:ca:92:b4:c6:17:ad:
                    cd:c7:21:7d:2a:87:21:eb:1b:27:db:49:07:d8:a2:
                    a2:66:e7:ba:42:80:96:4d:6a:af:0c:96:bc:88:26:
                    8e:fa:7f:02:cc:5f:e2:b4:fe:4a:cc:12:0f:8a:0c:
                    9e:04:a2:a0:d8:21:bc:5b:b3:aa:dc:fd:d9:88:9d:
                    b8:ba:0e:7e:78:06:08:cc:e7:e6:de:17:2f:08:17:
                    77:e6:0c:43:d4:10:45:44:1f:05:2d:5c:c3:e3:58:
                    a8:71:c4:5e:b0:31:11:b6:93:e2:2d:ca:42:25:34:
                    f2:e0:96:41:81:2b:c7:c8:62:0a:b7:30:14:7a:6c:
                    41:15:cd:b8:31:bc:f5:9f:22:8d:46:a6:df:f7:ee:
                    3c:ce:90:62:a4:19:86:22:6f:94:4a:6e:3f:59:7a:
                    88:3a:07:6a:27:a2:56:3c:7c:b4:52:8b:11:3d:14:
                    bd:d1:33:21:ad:ea:cd:25:16:d6:ce:6e:d6:aa:7a:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:40:5C:E8:06:84:79:56:5D:DA:88:17:3B:D3:54:59:9C:13:94
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38352e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:93:4a:9f:1b:1a:cb:6e:c0:8f:06:42:c5:7d:01:76:45:1b:
         18:aa:e5:db:54:2e:79:40:27:6d:23:49:4a:3e:c0:9e:78:8c:
         b6:64:ac:2c:35:16:3f:cc:1e:e6:52:b8:e0:b7:b4:89:49:3c:
         36:2b:0f:62:4f:33:8d:0b:72:7a:89:f3:e5:64:f2:3a:99:f4:
         7b:69:d5:a6:5c:31:c4:9e:a8:16:79:de:1f:fa:32:9f:ff:99:
         e0:a1:49:49:12:54:69:97:f3:fb:05:d3:f6:93:5f:85:04:d0:
         13:3b:67:f1:86:c2:0d:bc:70:1b:b5:8e:2a:8b:a9:de:20:f5:
         c3:78:c3:f1:1a:85:f8:89:1b:12:5f:a2:ed:8c:80:9d:68:b3:
         5f:ef:fb:87:a1:2f:1a:c6:7a:77:fe:13:2d:2f:d1:de:ac:2e:
         e4:d4:e1:02:ed:b7:33:11:ba:4c:7d:6c:2a:69:0e:31:60:36:
         1e:9c:f0:cb:80:ec:d6:ef:69:32:ba:61:42:61:4e:87:0a:9a:
         9e:b8:22:3e:78:32:9d:b0:56:66:b2:23:4d:0c:87:48:1f:33:
         a4:3b:53:bc:3b:e5:55:1b:fc:45:5f:d0:b1:a0:e9:8b:91:65:
         76:ad:d9:ca:3c:87:9d:ce:fe:19:9c:1b:88:03:38:9f:72:30:
         7f:6b:1a:71
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJdaDr2+Bs8JP5j8qmS4P4VnUVKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxM0M5M0E2NkM3RTQ3QkI1Qjg2MDkwMDg3MzIyQkMy
RDY5ODFDQTAeFw0yNDA1MjAwMDMwMDBaFw0yNTA1MTkwMDM1MDBaMDMxMTAvBgNV
BAMTKDc1RTQ0MDVDRTgwNjg0Nzk1NjVEREE4ODE3M0JEMzU0NTk5QzEzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBDJHXxN0tkCuTY3TncKJBzws
l1YLpqh1dG99lo3Yp5YhXD6ajQoe+JHGl3RIOMwOlSATDCHtGHSny8LNQFNqIfvw
jMqStMYXrc3HIX0qhyHrGyfbSQfYoqJm57pCgJZNaq8MlryIJo76fwLMX+K0/krM
Eg+KDJ4EoqDYIbxbs6rc/dmInbi6Dn54BgjM5+beFy8IF3fmDEPUEEVEHwUtXMPj
WKhxxF6wMRG2k+ItykIlNPLglkGBK8fIYgq3MBR6bEEVzbgxvPWfIo1Gpt/37jzO
kGKkGYYib5RKbj9Zeog6B2onolY8fLRSixE9FL3RMyGt6s0lFtbObtaqelIZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdeRAXOgGhHlWXdqIFzvTVFmcE5QwHwYDVR0j
BBgwFoAU7BPJOmbH5Hu1uGCQCHMivC1pgcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzAzRTM2RjY1RkVCREFGMDkxNTQ5ODFBRTMyNjdEN0Yx
OEIwOUE5MDEyM0ZGN0E1MzQ5RkUzM0JDRDY1QkFCLzAvRUMxM0M5M0E2NkM3RTQ3
QkI1Qjg2MDkwMDg3MzIyQkMyRDY5ODFDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzEzQzkzQTY2QzdFNDdCQjVC
ODYwOTAwODczMjJCQzJENjk4MUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcwM0UzNkY2NUZFQkRBRjA5MTU0OTgxQUUzMjY3RDdGMThCMDlBOTAx
MjNGRjdBNTM0OUZFMzNCQ0Q2NUJBQi8wLzMyMzAzMDJlMzEzMDM4MmUzODM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhsVTAN
BgkqhkiG9w0BAQsFAAOCAQEAN5NKnxsay27AjwZCxX0BdkUbGKrl21QueUAnbSNJ
Sj7AnniMtmSsLDUWP8we5lK44Le0iUk8NisPYk8zjQtyeonz5WTyOpn0e2nVplwx
xJ6oFnneH/oyn/+Z4KFJSRJUaZfz+wXT9pNfhQTQEztn8YbCDbxwG7WOKoup3iD1
w3jD8RqF+IkbEl+i7YyAnWizX+/7h6EvGsZ6d/4TLS/R3qwu5NThAu23MxG6TH1s
KmkOMWA2Hpzwy4Ds1u9pMrphQmFOhwqanrgiPngynbBWZrIjTQyHSB8zpDtTvDvl
VRv8RV/QsaDpi5Fldq3ZyjyHnc7+GZwbiAM4n3Iwf2sacQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:54 2024 by rpki-client on console-fra.rpki-client.org