Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e36342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          kOyadGh9fPqToVla8ZOb0BQUQytso8xP1io54Jo1a+E=
Subject key identifier:   0D:D9:91:50:E0:07:2B:1F:77:07:E9:29:7F:04:3A:44:04:A9:E6:83
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       2CEAAD72119290643A0813964288AF6EDD2F0280
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:33 +0000
ROA not before:           Mon 23 Mar 2026 01:30:33 +0000
ROA not after:            Mon 22 Mar 2027 01:35:33 +0000
asID:                     26593
IP address blocks:        200.108.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ea:ad:72:11:92:90:64:3a:08:13:96:42:88:af:6e:dd:2f:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:33 2026 GMT
            Not After : Mar 22 01:35:33 2027 GMT
        Subject: CN=0DD99150E0072B1F7707E9297F043A4404A9E683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:be:9c:b3:f2:f7:92:d0:e1:17:b6:3f:2e:
                    d1:11:6f:7e:e2:ef:72:a5:f9:f6:13:7e:6c:18:ba:
                    f3:04:30:17:6f:2d:da:28:01:3a:82:74:da:fc:5b:
                    17:2d:de:9b:69:e8:4e:ae:79:1a:57:e1:4b:90:9f:
                    29:ee:be:1e:9a:8e:fc:2f:24:bb:20:64:91:a4:46:
                    ab:71:ac:73:3d:16:0f:a6:99:08:1f:3b:31:ab:fd:
                    c4:6a:04:aa:7b:50:08:3c:a2:f1:6d:13:d8:ae:66:
                    cb:b0:8f:e2:f2:a0:e1:85:61:a6:5c:c2:49:4f:a7:
                    32:8e:aa:5f:7c:74:23:d2:30:ab:af:69:47:4d:9a:
                    44:d4:11:65:74:c9:03:92:59:0b:72:47:ab:87:59:
                    bd:a0:a5:d1:0c:88:9e:be:17:e6:d7:00:f1:59:2a:
                    56:4a:b4:4f:0b:2a:5e:6e:ba:c3:31:23:63:d8:03:
                    c8:35:ad:44:8e:96:23:e2:b3:89:23:92:61:7a:d2:
                    2f:69:3c:70:1a:91:ef:d6:5e:85:1d:45:2c:7e:c8:
                    67:11:ff:3b:81:ea:0b:27:7b:3d:62:0d:6b:7d:b7:
                    77:bc:2c:a3:4c:a5:0c:f4:e5:2a:0c:7c:20:fb:28:
                    2b:c4:34:f7:5f:a2:f6:16:82:d4:43:1f:d5:42:dc:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:91:50:E0:07:2B:1F:77:07:E9:29:7F:04:3A:44:04:A9:E6:83
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7f:8c:b7:dd:ba:f5:6f:6c:f0:ff:d1:5a:9d:37:79:a8:bb:
         39:b5:2b:cd:07:9f:af:dd:a0:9f:12:9a:97:a0:36:51:cd:30:
         39:1f:a1:01:25:e1:2d:77:05:99:14:5c:f7:d0:6b:de:d7:8d:
         9c:a6:55:e1:4f:2c:68:cc:08:f1:b2:32:83:92:97:3a:e7:97:
         83:d9:c1:e2:fe:1f:19:b8:f5:d7:8f:56:98:71:e2:d5:2e:6d:
         e6:25:d5:23:04:4f:37:bb:70:aa:2a:0c:a0:e9:71:2b:52:e9:
         b9:f4:5a:ca:c4:6f:e6:68:06:7c:08:f3:ef:cc:7f:68:c0:9d:
         35:85:7e:83:45:f7:1d:f5:26:74:b5:2b:ab:a6:d1:55:59:5b:
         13:63:18:5e:db:a4:4a:6b:91:3f:53:70:ff:e9:e8:b9:36:3f:
         71:31:4f:97:f0:2e:c0:34:00:df:ff:9d:14:82:40:36:da:f5:
         8e:28:16:0a:15:e6:5e:88:aa:65:f1:47:c3:81:f7:2d:4a:bf:
         2a:95:70:fe:e2:1c:74:9f:4f:9f:b7:9b:cd:b8:77:10:49:93:
         db:af:45:42:9f:5e:68:b9:0c:00:83:c2:5c:08:03:8e:66:29:
         9e:44:64:45:8d:37:7f:56:52:ab:cb:e7:47:cc:5e:bd:cd:2c:
         68:c3:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:59 2026 by rpki-client