Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36362e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e36362e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          SLAOUv9Dys8HwwwnZ4I/mR7WK1vOmAvSjZPM06SDxAg=
Subject key identifier:   16:7F:B4:95:E9:DA:F4:55:31:1A:FE:1A:A4:EB:96:74:2C:84:4F:FE
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       04369846E0727CA75981AF055469CE72BE0D0738
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36362e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 21 Apr 2025 01:15:29 +0000
ROA not before:           Mon 21 Apr 2025 01:10:29 +0000
ROA not after:            Mon 20 Apr 2026 01:15:29 +0000
asID:                     26593
IP address blocks:        200.108.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:36:98:46:e0:72:7c:a7:59:81:af:05:54:69:ce:72:be:0d:07:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Apr 21 01:10:29 2025 GMT
            Not After : Apr 20 01:15:29 2026 GMT
        Subject: CN=167FB495E9DAF455311AFE1AA4EB96742C844FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:9f:97:11:8a:74:0c:be:25:19:2e:fb:65:
                    52:95:36:a7:77:38:0f:ce:d8:a2:39:09:e9:a9:3b:
                    52:86:49:91:0b:a5:fa:f1:18:54:bd:3b:d4:a2:f0:
                    a3:1a:90:6d:33:81:43:13:53:19:20:c3:e7:a5:18:
                    fb:03:c1:c6:d8:97:fb:77:3d:7e:48:fa:b7:03:9f:
                    ee:87:f6:0a:50:39:28:28:97:d4:11:5c:37:75:73:
                    42:d8:d9:f0:ca:2b:3b:ec:94:58:71:6d:ab:a3:e7:
                    9e:1c:3e:e9:9b:6d:e8:1d:86:f4:d3:aa:d3:9f:c6:
                    15:51:01:aa:31:9d:00:b2:f6:76:ea:ed:5b:fa:8f:
                    32:ea:b6:c7:f6:a2:0a:8b:3a:f5:b0:99:5e:86:00:
                    1f:b2:0f:3b:99:ad:d8:47:44:13:d1:0f:32:ed:69:
                    73:06:97:36:2e:73:dd:1d:b8:03:c0:3a:f9:f8:90:
                    ca:1a:f6:0d:56:e7:c3:cd:71:86:b6:8c:d0:dc:c5:
                    7b:5f:21:7d:bb:19:eb:af:1c:2a:d8:1b:25:d3:14:
                    3f:a0:f4:2e:3b:49:3f:54:b9:eb:76:6c:73:f9:fc:
                    ef:4a:b3:fb:9f:f6:5a:e7:46:72:11:c0:7c:31:39:
                    11:e1:e8:86:40:3a:09:db:8f:97:18:b3:88:bb:52:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7F:B4:95:E9:DA:F4:55:31:1A:FE:1A:A4:EB:96:74:2C:84:4F:FE
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36362e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:9b:66:2a:1d:70:05:9f:9d:1a:84:c7:93:01:76:71:91:
         09:1c:cb:f4:f5:c6:27:a5:5d:59:11:2e:12:7c:ab:fc:e1:18:
         26:6f:8b:07:42:81:0c:d1:fe:5a:59:f3:22:0a:13:75:50:ea:
         c5:5e:64:8e:6c:e2:a7:6c:09:ec:bd:5b:6d:3c:76:99:48:41:
         8c:58:37:19:d7:5b:b7:12:3c:45:2c:54:ed:58:ae:3f:f1:d2:
         31:88:60:74:8b:ed:ae:30:ab:81:7b:85:94:47:27:56:a0:1f:
         4c:b7:d5:f5:c7:7a:cd:2e:d8:25:78:9c:33:11:56:22:c5:dc:
         07:c4:53:d2:0a:fe:9d:f9:b6:27:27:89:10:9c:f5:55:dd:1b:
         f9:0d:5b:e1:33:71:aa:4d:b6:a8:db:b3:93:7a:02:d4:e6:0f:
         6f:59:8c:1a:ec:a9:3c:f9:4e:45:f1:d6:f3:f9:0c:8a:18:20:
         04:83:a0:3e:f7:84:9c:1d:3c:36:1a:2f:74:b1:ec:98:0a:f7:
         00:eb:e9:7a:09:48:cf:a0:0f:3b:d0:e8:db:0f:15:f6:1e:80:
         bf:77:45:db:56:e9:b9:77:64:9f:d6:3a:0c:ea:3e:ff:17:9a:
         b4:c5:85:ce:a4:7c:8a:98:42:cb:ca:fc:7a:4f:d2:3a:bb:4f:
         f5:ca:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:39:24 2025 by rpki-client