Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38372e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38372e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          qBxj1EHuHxqGGikMd/7YWrHiEzckfNSrhX+WWvuH6ng=
Subject key identifier:   37:D5:C6:9B:75:CB:A3:F5:0A:45:38:4D:D9:F8:99:86:4A:40:35:53
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       4718874B629D8FD9CD4ABACC1610DE3B4A8D0FF7
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38372e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:40:01 +0000
ROA not before:           Mon 20 May 2024 00:35:01 +0000
ROA not after:            Mon 19 May 2025 00:40:01 +0000
asID:                     26593
IP address blocks:        200.108.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:18:87:4b:62:9d:8f:d9:cd:4a:ba:cc:16:10:de:3b:4a:8d:0f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:35:01 2024 GMT
            Not After : May 19 00:40:01 2025 GMT
        Subject: CN=37D5C69B75CBA3F50A45384DD9F899864A403553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:46:30:b4:89:4c:d3:7f:51:5e:03:38:76:
                    3f:6c:42:6d:e6:25:c9:11:56:fe:2e:d1:35:1d:d1:
                    e5:a5:db:18:d6:1a:a4:6c:a2:7c:3d:dc:ff:d6:74:
                    51:ed:95:7a:02:ad:ca:74:99:fb:49:6a:7d:cb:0e:
                    56:14:e2:a9:e2:07:d9:15:93:d6:23:54:27:19:ca:
                    7b:a7:d9:28:2a:dc:4c:b4:3f:c7:f3:8d:0a:88:88:
                    10:a8:f6:87:11:8c:f4:38:7b:21:3e:25:19:88:8d:
                    06:38:5a:3a:d3:1f:da:33:32:f4:b0:5f:df:e5:78:
                    11:93:e8:bf:8b:27:d3:f3:0e:8b:f3:5e:4a:78:a9:
                    3b:75:4f:33:05:97:73:38:71:1e:57:04:ea:89:ed:
                    cb:c2:29:eb:67:b0:03:e5:0a:95:32:11:35:f5:92:
                    73:38:0d:70:4c:4a:e3:24:b9:5e:4b:cc:3b:f9:2d:
                    ed:11:da:90:ee:21:68:e2:05:43:11:1c:df:9e:53:
                    5e:be:a5:95:80:f3:bb:49:98:c9:e7:06:5d:d4:4f:
                    3b:dd:94:1a:75:96:62:96:30:08:86:51:cf:f1:b8:
                    39:ad:52:08:d3:22:89:ee:d6:bd:b4:6f:a9:94:f4:
                    13:63:0b:32:78:43:34:d6:e7:a1:91:d0:1c:bc:a1:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D5:C6:9B:75:CB:A3:F5:0A:45:38:4D:D9:F8:99:86:4A:40:35:53
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38372e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:dc:5f:e6:34:50:40:53:03:01:bd:bb:0d:c9:11:6f:3f:49:
         30:be:81:86:04:72:ca:ce:e7:fe:65:f1:4f:3c:22:e3:7c:2a:
         da:90:b6:44:75:75:37:4e:43:b4:99:66:8b:b3:e7:c1:13:66:
         1b:d0:45:ac:b4:48:85:61:43:81:0a:48:68:de:d8:50:5d:ea:
         d5:da:0d:f3:c5:18:b2:9f:40:d4:ca:1a:14:97:44:7d:ca:1a:
         ca:ed:2f:e5:b0:21:8b:f7:e7:e1:39:fb:37:fb:0a:df:73:0a:
         38:a6:04:af:a5:a1:b4:f3:03:6a:9e:fc:73:9a:14:53:6f:a2:
         97:f8:34:13:78:13:dc:b0:99:31:f9:60:af:87:bd:13:41:12:
         72:81:60:35:8e:00:ee:68:bb:83:4b:d3:20:87:a0:42:7b:5b:
         e2:a2:f9:c7:89:0e:b8:a3:ce:78:b5:47:5e:93:5d:e6:2b:f1:
         f0:2e:b2:2e:3e:3c:80:2e:bb:3e:6e:ff:c3:51:60:27:47:ff:
         76:5d:fd:6d:81:d4:8f:1d:f5:df:d2:58:c4:6d:5f:71:2d:13:
         c9:a9:f3:c1:b7:5c:58:04:db:ae:c8:c7:b8:e8:74:03:0c:f2:
         3c:61:20:f3:45:bb:8e:7f:9e:33:bf:b9:0a:3f:97:93:ae:49:
         5e:6d:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org