Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39352e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39352e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          q8fSkCzL3SbDCe70FSaqrfsQozyTefjfZgerUV1XXMs=
Subject key identifier:   AD:A9:23:3A:24:96:8A:EC:D0:50:83:F9:94:B8:A6:5D:3F:75:BE:A9
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       2249B4AE1C391D0F8D3BDF0CE1534D0D13E4BF51
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39352e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 20 May 2024 00:40:01 +0000
ROA not before:           Mon 20 May 2024 00:35:01 +0000
ROA not after:            Mon 19 May 2025 00:40:01 +0000
asID:                     26593
IP address blocks:        200.108.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:49:b4:ae:1c:39:1d:0f:8d:3b:df:0c:e1:53:4d:0d:13:e4:bf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: May 20 00:35:01 2024 GMT
            Not After : May 19 00:40:01 2025 GMT
        Subject: CN=ADA9233A24968AECD05083F994B8A65D3F75BEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:57:eb:11:94:bf:2a:8a:59:d0:a1:93:8b:
                    0b:f4:2d:f0:93:d4:95:83:71:f0:2f:f2:ea:89:7e:
                    3c:af:79:5f:b4:45:2a:dd:60:0a:2a:eb:c6:7c:9d:
                    f3:07:db:d6:3e:43:5f:08:9e:66:67:cb:b7:d8:19:
                    9f:18:8d:35:ae:e3:c0:53:60:b5:d0:b9:0c:27:63:
                    3e:0c:b5:f1:ef:eb:15:63:9b:83:53:9b:fc:3b:31:
                    ce:23:21:98:25:d0:fb:48:cf:ed:ec:0a:0b:d5:fd:
                    ff:10:99:db:00:1b:1f:71:f5:bc:d1:9d:e2:f6:87:
                    71:38:0c:06:fe:1b:16:24:5b:7b:c8:19:f7:f0:53:
                    b8:29:6d:d4:c9:fb:ba:89:53:1d:a1:5d:78:5e:64:
                    97:a6:35:44:17:98:36:58:ca:14:1b:b6:6c:49:a3:
                    df:d0:59:4b:34:6e:28:1e:c6:f0:2b:aa:08:7a:f2:
                    08:bf:6c:c9:f3:c3:3c:8e:f3:5f:47:99:be:0f:d7:
                    70:42:7f:4f:e5:fd:a4:6b:d4:91:6d:04:08:80:d6:
                    78:f2:3c:ff:dc:97:71:2b:b4:00:e1:d3:e8:56:ba:
                    0a:a7:59:b0:60:53:44:09:3f:52:ab:6b:f3:bb:7b:
                    ff:08:5f:83:ed:cd:61:d8:8c:be:92:fe:3a:f6:42:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:23:3A:24:96:8A:EC:D0:50:83:F9:94:B8:A6:5D:3F:75:BE:A9
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39352e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:de:c7:e5:2c:d9:fa:58:ef:d2:7b:c9:53:43:3b:dd:60:f2:
         89:0f:d1:80:fd:69:7f:13:a1:b0:8d:b5:8c:05:58:cc:da:3d:
         45:55:d8:e4:f6:e6:65:5f:ec:52:8b:6e:96:7b:2b:d9:0c:32:
         5d:41:19:79:8a:81:29:64:ea:c9:bd:74:d9:0f:93:70:47:a9:
         f2:6d:7d:52:57:8c:fe:5a:29:e3:d1:5c:dd:3d:d2:77:02:04:
         c6:fc:22:40:66:4d:04:6f:ac:8d:a7:1a:93:5c:55:03:4a:f1:
         e7:68:ca:48:98:92:0f:81:b5:15:79:cc:a9:72:5a:d2:5d:5b:
         36:97:2b:ec:76:0e:ad:da:21:55:8b:1d:ba:bc:3d:31:17:c9:
         a3:6c:76:44:5d:ff:8e:23:51:03:62:e0:14:7f:af:5e:f3:00:
         ec:8e:60:a5:89:19:ff:a8:ee:1e:a6:1a:99:09:1d:a0:17:90:
         c5:a7:b4:62:73:d4:64:6c:01:b9:ab:36:0b:b1:ee:24:83:c6:
         3a:43:f3:98:b9:87:3c:92:27:00:7e:0c:78:dc:d5:3d:2e:15:
         72:44:fc:78:92:75:2c:7a:fd:05:c8:8c:a7:63:05:93:b6:24:
         d6:b2:ca:da:93:cf:72:66:65:be:a1:fa:03:2e:88:08:04:55:
         3f:51:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org