Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39312e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39312e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          R/rJR7Gnhc5sym6IfQwKcuovwz9mh1AIK8u4omtc7h4=
Subject key identifier:   53:75:94:83:CA:25:7D:0A:C2:58:32:42:57:2B:9C:EF:8F:D4:41:79
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       61FAAD8970FC4EA5A86776144F0F035A314C6E5A
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39312e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:40:01 +0000
ROA not before:           Mon 20 May 2024 00:35:01 +0000
ROA not after:            Mon 19 May 2025 00:40:01 +0000
asID:                     26593
IP address blocks:        200.108.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:ad:89:70:fc:4e:a5:a8:67:76:14:4f:0f:03:5a:31:4c:6e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:35:01 2024 GMT
            Not After : May 19 00:40:01 2025 GMT
        Subject: CN=53759483CA257D0AC2583242572B9CEF8FD44179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:2d:47:d8:1c:ee:84:76:6e:13:e6:ea:96:
                    01:c9:68:c9:d2:4e:47:61:dd:b1:06:89:83:87:fe:
                    c9:4a:a4:4b:b6:9b:a6:42:57:3a:6d:0d:a8:0e:f2:
                    2d:ca:a8:81:eb:74:1b:87:ca:26:0b:af:c1:b6:10:
                    44:e1:b4:88:90:f2:a3:bd:c5:b3:68:7f:56:23:eb:
                    d7:25:a7:f5:f6:dc:ee:8b:74:10:b5:69:db:33:6e:
                    be:45:9c:52:84:bd:1f:7c:a2:15:f8:e1:31:b5:a7:
                    99:d1:6b:b6:7e:c7:27:4b:35:31:51:a5:97:6e:79:
                    1f:6f:52:17:16:96:ba:8d:b0:36:d1:63:4f:f1:10:
                    67:b7:52:8d:11:cc:59:fa:24:72:97:17:80:37:87:
                    64:d4:ec:69:40:61:3b:8e:81:2a:55:31:a0:68:03:
                    df:a2:35:90:97:01:c5:66:d0:f4:b9:a4:12:28:44:
                    67:6b:55:27:f3:5e:07:98:0a:3a:f1:07:6b:a5:9e:
                    2b:26:37:37:a5:82:5c:ff:d8:32:6b:ab:98:83:f5:
                    44:4c:f1:3e:18:5f:51:3d:35:9d:e9:93:20:fc:61:
                    29:09:ca:20:22:2a:78:b7:86:cc:bf:ca:11:32:66:
                    2b:1a:d8:c5:71:eb:b8:cb:6c:8a:08:43:78:bd:eb:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:75:94:83:CA:25:7D:0A:C2:58:32:42:57:2B:9C:EF:8F:D4:41:79
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39312e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:2e:f9:fe:e4:52:48:cf:a6:e7:ff:4e:4b:cf:2b:10:35:25:
         bf:f7:43:9e:3b:bd:a3:97:72:ef:58:ba:2d:db:e7:6d:03:80:
         38:e3:04:71:11:da:cb:5a:23:d3:b7:1d:e6:2f:df:81:1d:89:
         03:90:98:8a:8f:c1:9f:ea:75:86:5a:63:1b:f4:1a:48:05:8b:
         69:6a:30:4c:a8:27:e2:cc:84:7c:fa:fa:d5:38:e6:38:7c:bf:
         12:8c:9c:07:9e:82:a2:5d:04:ae:63:45:1e:43:94:30:85:db:
         d9:3b:4d:78:8d:a3:a7:1b:ec:01:73:f9:e6:2e:46:1f:eb:4a:
         ed:87:8f:3e:d5:8a:6f:29:c0:12:cd:95:dd:30:e8:48:d5:fd:
         53:37:e0:c1:0b:4c:05:15:8b:31:32:36:26:40:be:34:9d:28:
         65:b0:08:a2:d4:8d:bf:02:96:45:d6:ef:cd:d7:02:db:7a:fc:
         eb:65:e4:48:a2:c1:73:61:ab:ff:1d:8d:df:b1:20:6a:31:30:
         3b:3c:57:77:4e:d2:48:cb:45:0b:46:90:45:83:7e:a7:a5:6b:
         7d:2a:48:7d:9a:48:10:3a:dc:fb:43:4e:ea:d1:2f:7e:61:df:
         5c:44:bf:3f:8b:62:a5:5a:1b:6a:21:78:d4:92:58:6a:43:b1:
         df:9a:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org