Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39302e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39302e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          pL52pXyNw0tZdXhEti3/AK387uTwlL4t57w75Weq6c4=
Subject key identifier:   04:4D:B2:EE:D5:FD:EA:03:6B:16:A6:E8:79:42:49:8B:52:1A:CB:6A
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       1543A80B136282CE367D3D856EEB60B3EFA92C07
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39302e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:40:00 +0000
ROA not before:           Mon 20 May 2024 00:35:00 +0000
ROA not after:            Mon 19 May 2025 00:40:00 +0000
asID:                     26593
IP address blocks:        200.108.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:43:a8:0b:13:62:82:ce:36:7d:3d:85:6e:eb:60:b3:ef:a9:2c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:35:00 2024 GMT
            Not After : May 19 00:40:00 2025 GMT
        Subject: CN=044DB2EED5FDEA036B16A6E87942498B521ACB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0e:86:1e:b9:c6:26:86:fa:52:19:94:ef:6b:
                    18:30:d4:a1:01:eb:61:2a:ff:46:a2:9a:0d:1d:98:
                    b7:1c:a2:93:d1:44:18:16:a7:74:29:f3:3d:54:f7:
                    e6:47:b6:7e:98:5e:8b:e4:fa:44:cf:79:3c:4e:de:
                    e9:c4:d2:ae:3e:24:55:47:f1:e3:0a:0e:ea:7e:30:
                    4e:1a:f9:7e:8d:52:fd:68:fd:d4:f2:d2:bf:81:37:
                    04:e5:c1:26:fa:51:17:9e:1b:15:49:f1:e8:59:b5:
                    ab:53:7c:2a:ab:15:e6:f3:d6:0f:3e:b0:8b:91:0d:
                    88:07:6a:ac:18:80:6c:24:8e:66:ba:ac:ea:81:d0:
                    75:c9:2b:b5:08:cf:d3:6c:ff:07:c4:71:0c:c7:8d:
                    a6:fa:b5:7b:03:ca:8d:75:f9:df:0f:37:dd:e8:c0:
                    46:3e:79:82:6a:f3:22:e1:00:e4:5d:a4:62:0e:b1:
                    ad:2d:b0:a1:23:5f:47:9f:f0:ff:f4:68:bf:e1:b1:
                    bb:5a:0c:60:72:c0:cc:02:b5:7a:40:5a:c3:2c:f8:
                    f9:e7:f8:b2:00:3c:30:9b:f6:e5:e4:6d:97:58:9d:
                    57:dc:08:2c:28:ae:6b:45:75:a4:f2:3c:df:5d:39:
                    13:30:0c:a5:4b:c4:f3:ed:17:28:aa:b1:df:c6:0f:
                    9c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:B2:EE:D5:FD:EA:03:6B:16:A6:E8:79:42:49:8B:52:1A:CB:6A
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39302e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:71:e2:28:c7:e8:f3:3c:a6:f3:13:57:3f:01:cc:cf:0e:
         43:07:69:fb:e9:43:5e:65:d7:c3:2f:9f:3c:12:ed:cc:5b:37:
         db:dd:7a:53:7f:7e:53:3e:c9:90:c7:7b:57:cc:8e:d3:53:8a:
         e1:d9:ed:0b:54:9e:f5:34:53:3b:0d:71:d8:65:18:f1:43:86:
         5e:28:9d:01:1b:bb:61:05:0d:f8:2f:40:46:a0:8a:84:d3:b1:
         c6:89:0c:a4:79:a2:8f:23:c1:89:af:7b:1d:b7:67:1e:a6:43:
         e7:88:d2:8e:88:90:a2:08:78:0f:25:be:1f:9b:26:2b:3c:b0:
         86:76:88:a2:6a:39:59:03:1d:d0:c0:4e:c1:aa:0a:4a:ef:56:
         e1:bf:93:d1:99:3f:fd:af:e1:bb:cc:a4:e7:2d:81:a8:f8:98:
         01:06:21:b2:28:f2:1f:76:6f:37:e1:ca:06:7f:49:13:7d:f4:
         2e:b4:9b:85:5e:b4:c4:7b:49:a1:e0:a8:0a:c0:6c:1c:ea:74:
         f4:4e:0d:37:79:26:44:1b:ca:02:c8:4e:a8:ed:2e:6f:66:fc:
         3e:b8:5c:f6:8c:ee:c0:be:48:90:ca:0f:4d:db:5e:c2:a3:1b:
         d2:40:db:f1:b9:fc:02:33:2d:78:64:75:3b:03:50:9b:89:92:
         3b:a2:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org