Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38362e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38362e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          7JNUPmV7bXdeYoniHYh4lCEit/T3xiFJubVtHfpgIoI=
Subject key identifier:   D7:99:F1:07:9B:75:F4:FF:62:9C:77:7F:22:25:05:D3:3E:86:CB:A3
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       723617A4668860BC9B13D7884F6117052DE386CA
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38362e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:35:02 +0000
ROA not before:           Mon 20 May 2024 00:30:02 +0000
ROA not after:            Mon 19 May 2025 00:35:02 +0000
asID:                     26593
IP address blocks:        200.108.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:36:17:a4:66:88:60:bc:9b:13:d7:88:4f:61:17:05:2d:e3:86:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:30:02 2024 GMT
            Not After : May 19 00:35:02 2025 GMT
        Subject: CN=D799F1079B75F4FF629C777F222505D33E86CBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:45:6b:36:c8:31:8c:bb:ca:fd:aa:71:93:
                    33:c4:89:a5:f2:fa:8d:e3:19:b9:88:41:79:74:e7:
                    cb:02:b8:75:a1:6c:46:f0:8c:80:02:5a:c9:fc:75:
                    90:da:3f:8b:dc:40:3d:de:35:f4:23:33:32:1d:11:
                    d5:83:e9:77:cc:a3:4f:be:f6:04:48:69:95:a2:f0:
                    74:fc:16:2a:b5:2c:20:f4:0d:02:b2:df:a4:7e:1d:
                    02:68:12:20:30:0b:ba:3b:92:a3:54:3b:a0:f5:95:
                    21:0f:8e:d2:c9:4a:16:e1:a1:22:ed:30:cc:97:f8:
                    52:77:4c:77:42:0c:65:d9:2e:48:e5:c1:bf:57:75:
                    b2:6e:be:17:a7:8e:85:3d:b3:90:03:2f:d4:b4:4e:
                    a6:08:af:d3:ca:3a:06:73:e4:df:7a:84:4f:8b:0f:
                    8b:5e:b3:ba:c0:02:29:4f:35:75:0e:77:78:c2:76:
                    48:6e:7d:f3:45:08:ed:1f:42:27:ed:8d:21:e9:d1:
                    4a:89:c3:68:69:2b:de:6d:65:71:bf:de:a9:35:0d:
                    79:aa:50:ad:8b:39:53:40:c1:8b:34:e4:41:1e:f1:
                    e7:5f:00:57:5e:d9:08:e3:ed:2f:e0:f7:63:12:61:
                    cf:ed:87:59:23:db:c8:20:35:f3:0a:b1:7a:2e:be:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:99:F1:07:9B:75:F4:FF:62:9C:77:7F:22:25:05:D3:3E:86:CB:A3
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38362e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:92:b3:cf:5e:14:f6:c3:fe:2d:e0:2c:4d:87:1a:4c:f8:d3:
         51:14:cc:05:df:69:68:63:f4:fe:7e:cc:55:d5:f3:07:e1:7e:
         c8:05:ee:92:8e:e5:ad:45:6c:82:7b:51:5c:15:57:93:ee:bd:
         6c:c4:55:9f:92:b7:5c:5f:88:5c:c3:26:17:1d:5a:61:d9:a3:
         d1:9a:28:15:c4:ca:59:48:a0:90:00:62:fe:6c:8e:06:76:c3:
         b3:2b:93:19:36:a8:12:80:96:61:a3:92:31:74:b6:cb:3d:31:
         6a:00:cd:c9:20:3d:a6:1e:cd:a4:27:80:9f:9f:fd:4f:4e:5c:
         61:ee:67:aa:c6:f3:86:7a:9d:f1:8d:b7:11:fc:67:0a:59:3a:
         8b:6c:6f:ec:cc:54:81:c2:2e:43:53:b8:fb:e3:f6:48:e5:08:
         b4:0e:85:d4:4f:fe:47:bb:e6:6f:d0:53:55:57:e2:9c:0b:3d:
         79:db:a6:9d:83:c7:81:95:4a:b0:22:7c:bf:e8:84:95:73:20:
         7e:fc:b3:03:84:ba:d3:b1:ad:3e:af:2d:fd:92:fe:d3:59:cc:
         74:1c:a1:94:f5:ae:68:94:af:c4:25:24:f3:87:10:08:bd:f4:
         8f:cb:4d:47:50:b8:7f:f7:b3:45:b7:ad:f1:db:a9:a1:49:be:
         51:7f:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:21 2025 by rpki-client