Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38382e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38382e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          LNK1X50o8g2C8Q7Gi4ioLpTkDgQVPt89gwib1ZsfYkU=
Subject key identifier:   51:5F:D1:0E:46:F7:18:C4:4A:C3:DE:4F:11:81:E4:32:0C:54:AB:5D
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       22F00221C91B49E17A40CE689068940321C899A3
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38382e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:40:00 +0000
ROA not before:           Mon 20 May 2024 00:35:00 +0000
ROA not after:            Mon 19 May 2025 00:40:00 +0000
asID:                     26593
IP address blocks:        200.108.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f0:02:21:c9:1b:49:e1:7a:40:ce:68:90:68:94:03:21:c8:99:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:35:00 2024 GMT
            Not After : May 19 00:40:00 2025 GMT
        Subject: CN=515FD10E46F718C44AC3DE4F1181E4320C54AB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:be:97:bf:59:01:58:30:82:f1:06:71:d3:
                    05:9e:b2:be:22:32:b7:12:c3:e9:0f:3c:65:03:3c:
                    6a:19:1a:3b:b1:b9:8f:bd:d1:9d:a3:bc:eb:cb:fe:
                    91:e1:6e:67:c1:59:f0:56:cb:98:3d:ae:3c:bf:5b:
                    1d:56:83:5a:d1:db:8c:8d:ff:b4:a6:b6:49:8b:b4:
                    b8:fb:f2:fa:81:d3:22:b7:a1:4a:4a:71:56:74:46:
                    1f:80:3a:2a:28:6f:f7:f9:47:69:7b:8f:c7:eb:3d:
                    40:8d:3f:c7:f0:27:75:a8:19:ed:eb:9e:7f:73:f2:
                    73:94:54:b8:18:a3:56:6e:06:81:3f:d4:a1:a3:30:
                    77:10:ee:4b:54:4d:4f:5e:af:01:1a:a9:f5:0a:72:
                    fe:85:7b:ac:19:bb:f4:8f:e5:33:68:0b:17:7c:18:
                    d0:9f:ab:ce:09:03:6f:20:7e:30:0a:1f:99:69:83:
                    6b:b0:a0:ad:c8:8b:15:11:3a:25:2b:c1:2f:13:cd:
                    aa:e0:1e:87:15:f6:cd:c2:ef:38:35:17:32:c6:0a:
                    a5:8f:c4:f5:2f:99:f6:e3:04:be:a3:71:6e:f3:cd:
                    68:01:00:53:34:71:7d:ea:58:f2:44:8b:74:2d:a4:
                    6a:cb:98:67:8e:7e:7b:d4:e9:08:30:fd:5b:ca:17:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:D1:0E:46:F7:18:C4:4A:C3:DE:4F:11:81:E4:32:0C:54:AB:5D
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38382e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:1d:db:91:73:32:fc:3b:3b:ab:fd:80:87:70:8b:dd:db:a1:
         a1:c9:cc:e4:52:8f:a4:65:95:44:87:b1:16:ca:93:1e:bd:65:
         17:dc:d8:bd:34:d9:cb:27:33:73:c5:3a:83:be:ac:d5:75:ca:
         aa:a4:40:c8:42:4b:35:17:3d:dc:a6:06:df:33:f5:b2:d9:eb:
         c1:82:90:5f:41:90:c9:7e:5c:e5:5f:aa:05:ac:77:ad:1c:17:
         38:29:2a:fb:28:4e:af:20:fa:e2:f1:24:a2:1e:93:f8:03:0e:
         2a:e3:a1:6e:e5:c7:85:b7:48:bd:3a:6b:e0:70:30:04:33:00:
         63:c6:c9:cd:65:47:7a:e0:77:36:e6:ac:d9:09:52:08:96:cd:
         90:61:8c:13:fe:2c:2b:85:44:67:79:40:9d:b5:bd:80:f5:93:
         da:ea:c9:7b:dc:53:d4:96:f5:6c:b1:76:c5:94:1a:2f:ce:dc:
         c3:29:5f:9d:80:ae:e8:2b:89:61:0d:e0:46:7b:1a:9c:e0:ec:
         f6:fe:b7:8a:7f:e5:51:d8:5c:48:e3:e4:f1:31:ed:36:75:7a:
         75:95:9c:40:a6:43:16:64:e5:73:43:33:51:b1:bc:b2:df:b5:
         1e:31:19:47:a5:6e:06:3a:f2:c3:ed:bb:77:51:bc:59:74:f2:
         a6:a9:3a:23
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIvACIckbSeF6QM5okGiUAyHImaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxM0M5M0E2NkM3RTQ3QkI1Qjg2MDkwMDg3MzIyQkMy
RDY5ODFDQTAeFw0yNDA1MjAwMDM1MDBaFw0yNTA1MTkwMDQwMDBaMDMxMTAvBgNV
BAMTKDUxNUZEMTBFNDZGNzE4QzQ0QUMzREU0RjExODFFNDMyMEM1NEFCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM4r6Xv1kBWDCC8QZx0wWesr4i
MrcSw+kPPGUDPGoZGjuxuY+90Z2jvOvL/pHhbmfBWfBWy5g9rjy/Wx1Wg1rR24yN
/7SmtkmLtLj78vqB0yK3oUpKcVZ0Rh+AOioob/f5R2l7j8frPUCNP8fwJ3WoGe3r
nn9z8nOUVLgYo1ZuBoE/1KGjMHcQ7ktUTU9erwEaqfUKcv6Fe6wZu/SP5TNoCxd8
GNCfq84JA28gfjAKH5lpg2uwoK3IixUROiUrwS8TzargHocV9s3C7zg1FzLGCqWP
xPUvmfbjBL6jcW7zzWgBAFM0cX3qWPJEi3QtpGrLmGeOfnvU6Qgw/VvKFxMjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUV/RDkb3GMRKw95PEYHkMgxUq10wHwYDVR0j
BBgwFoAU7BPJOmbH5Hu1uGCQCHMivC1pgcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzAzRTM2RjY1RkVCREFGMDkxNTQ5ODFBRTMyNjdEN0Yx
OEIwOUE5MDEyM0ZGN0E1MzQ5RkUzM0JDRDY1QkFCLzAvRUMxM0M5M0E2NkM3RTQ3
QkI1Qjg2MDkwMDg3MzIyQkMyRDY5ODFDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzEzQzkzQTY2QzdFNDdCQjVC
ODYwOTAwODczMjJCQzJENjk4MUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcwM0UzNkY2NUZFQkRBRjA5MTU0OTgxQUUzMjY3RDdGMThCMDlBOTAx
MjNGRjdBNTM0OUZFMzNCQ0Q2NUJBQi8wLzMyMzAzMDJlMzEzMDM4MmUzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhsWDAN
BgkqhkiG9w0BAQsFAAOCAQEAkh3bkXMy/Ds7q/2Ah3CL3duhocnM5FKPpGWVRIex
FsqTHr1lF9zYvTTZyyczc8U6g76s1XXKqqRAyEJLNRc93KYG3zP1stnrwYKQX0GQ
yX5c5V+qBax3rRwXOCkq+yhOryD64vEkoh6T+AMOKuOhbuXHhbdIvTpr4HAwBDMA
Y8bJzWVHeuB3Nuas2QlSCJbNkGGME/4sK4VEZ3lAnbW9gPWT2urJe9xT1Jb1bLF2
xZQaL87cwylfnYCu6CuJYQ3gRnsanODs9v63in/lUdhcSOPk8THtNnV6dZWcQKZD
FmTlc0MzUbG8st+1HjEZR6VuBjryw+27d1G8WXTypqk6Iw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org