Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          0FatpkF7idd1IqBtzV2keOsjw6pphnmCxCr6loiPU30=
Subject key identifier:   73:D2:1C:5A:50:24:28:18:0B:6C:B1:EF:5E:17:DE:73:9D:9E:62:4C
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       51896CD198B19194A0F447FDFF639729873B7882
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:40:01 +0000
ROA not before:           Mon 20 May 2024 00:35:01 +0000
ROA not after:            Mon 19 May 2025 00:40:01 +0000
asID:                     26593
IP address blocks:        200.108.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:89:6c:d1:98:b1:91:94:a0:f4:47:fd:ff:63:97:29:87:3b:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:35:01 2024 GMT
            Not After : May 19 00:40:01 2025 GMT
        Subject: CN=73D21C5A502428180B6CB1EF5E17DE739D9E624C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:3d:ea:f6:9c:b8:22:13:0c:74:97:fc:6e:
                    b5:59:1a:9c:50:a9:c7:ee:c3:f0:7c:7a:d2:57:16:
                    8b:93:4b:bd:10:3c:8e:d8:73:0b:f5:df:ef:9c:df:
                    ab:4f:94:f4:e2:c0:5a:e2:1e:23:91:ad:08:bc:91:
                    db:b8:e4:4e:af:cb:63:0b:1e:8e:4e:3f:3e:28:38:
                    42:f6:d9:d6:7f:68:fc:b9:65:93:16:fb:bd:ae:9c:
                    0c:18:3c:1c:c7:b3:f6:78:b1:b0:ff:88:f6:b1:29:
                    62:0a:5e:90:85:b4:8b:bc:cf:07:14:9d:5d:31:3b:
                    9b:ee:e3:1b:50:01:76:53:25:58:73:b8:74:59:25:
                    c3:e3:66:d7:4e:75:65:6c:7d:03:53:1d:e1:b3:b6:
                    92:73:2a:87:1c:27:87:fb:21:d4:4c:4a:7b:93:2e:
                    b8:1f:04:58:70:b4:fd:35:6d:9a:0c:7e:7b:fd:35:
                    c7:44:c8:1d:1f:f4:25:20:a0:33:a1:52:2d:38:33:
                    c5:e0:3e:d8:d9:44:d1:32:52:f7:5d:0d:c2:0b:b2:
                    ca:e0:a3:07:85:16:bd:59:03:6d:e3:59:0c:f7:84:
                    6a:a0:44:63:20:d8:a0:0f:d4:08:d3:3e:fb:1d:94:
                    28:ee:5e:46:54:20:b4:e1:94:1d:ea:6b:95:5f:fc:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:1C:5A:50:24:28:18:0B:6C:B1:EF:5E:17:DE:73:9D:9E:62:4C
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:ba:05:bf:59:58:c1:b9:24:67:88:fe:cf:3b:22:dc:2b:
         5c:7d:4f:7b:7d:d1:71:71:79:c2:c1:52:25:bc:d5:eb:8a:65:
         c5:e3:4d:64:02:8d:b0:1c:0b:ee:01:5d:55:b9:92:a4:3f:d2:
         ad:0d:84:db:0c:56:d2:6f:79:1d:8c:d8:0a:bb:dd:be:a8:87:
         17:6e:30:80:0a:69:17:ac:f1:73:b6:09:80:93:00:98:bc:f2:
         fa:da:7b:04:fe:7b:5d:1f:dd:93:7b:72:03:f2:85:19:8f:2a:
         7c:7a:22:41:d6:0f:33:9c:a1:56:5e:17:12:9c:63:11:b5:56:
         65:89:b6:e6:5a:8a:ac:9f:69:84:25:46:9b:2d:4d:4b:3f:e0:
         73:c2:72:fa:b7:16:04:63:e4:8a:ca:82:1b:76:74:a6:12:b0:
         48:0e:5c:af:5f:d4:93:a7:ea:d2:8c:5a:70:5e:88:82:ba:c8:
         97:ca:00:86:d8:40:0e:11:23:0f:fd:c0:20:65:47:52:1f:23:
         69:87:31:55:56:b6:4f:4e:7e:bb:2a:dc:2e:25:c3:47:8d:a8:
         64:c6:98:fd:f8:a7:15:fa:bc:e7:ed:22:1b:14:c9:16:3f:64:
         9b:de:f1:59:4c:31:f0:a2:96:15:55:2b:ac:f3:64:37:e2:23:
         60:83:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org