Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36382e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e36382e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          rC9d1m63mDg7tKJPCD+zMVpzR7NQIpEzny0/eoPEYiA=
Subject key identifier:   9C:BD:49:FD:43:76:A5:61:8B:6E:8E:4A:52:2D:30:9C:9B:81:34:A1
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       417198D5073F2273F4D161EAB7C6424C41410443
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36382e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:35 +0000
ROA not before:           Mon 23 Mar 2026 01:30:35 +0000
ROA not after:            Mon 22 Mar 2027 01:35:35 +0000
asID:                     26593
IP address blocks:        200.108.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:71:98:d5:07:3f:22:73:f4:d1:61:ea:b7:c6:42:4c:41:41:04:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:35 2026 GMT
            Not After : Mar 22 01:35:35 2027 GMT
        Subject: CN=9CBD49FD4376A5618B6E8E4A522D309C9B8134A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:68:1b:bd:c4:de:fa:bf:17:22:87:2a:43:
                    b1:22:7f:af:23:60:66:a0:1c:36:54:63:05:5b:84:
                    c8:df:d3:d4:21:b5:12:81:3b:69:d2:4f:d2:0d:7e:
                    b9:29:c5:03:d1:26:c3:e6:2e:cf:8f:6b:20:d5:9a:
                    c9:6d:f0:73:e8:71:10:35:36:fa:e6:03:94:a7:fc:
                    20:09:11:d5:26:5f:e7:60:fc:bb:77:d9:f7:d1:c3:
                    c7:c2:81:30:c2:6d:af:64:74:7b:58:30:29:ce:7b:
                    b4:8d:32:4f:61:72:79:28:0f:be:a6:a4:26:e5:0c:
                    fc:05:2e:6e:20:a6:0b:a2:f5:f3:0e:2f:d2:30:ba:
                    1e:06:39:a9:e4:04:e5:a2:21:8a:ff:ac:7b:58:7b:
                    31:e8:c0:28:cf:c6:00:dd:3c:ff:e7:65:67:72:a3:
                    bd:3a:49:1e:45:d9:11:2a:4c:e2:ae:55:80:3a:b4:
                    14:ff:75:80:8a:ac:98:0c:8b:32:0c:8d:3a:d4:5d:
                    68:f7:4e:de:8f:65:e4:7f:0d:38:00:b8:e1:7c:b5:
                    95:81:4d:df:ca:42:ac:26:a1:6d:30:35:6d:bd:d8:
                    60:ac:9b:7a:39:87:00:2a:93:fb:4b:43:32:b1:d2:
                    5e:84:e2:bf:c3:25:a1:1a:54:c9:17:9a:26:ae:90:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BD:49:FD:43:76:A5:61:8B:6E:8E:4A:52:2D:30:9C:9B:81:34:A1
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e36382e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f1:c6:18:42:07:63:7a:c7:78:00:f5:cc:90:c4:e9:a8:19:
         6e:ef:f7:9c:35:a2:91:4a:4d:e6:b1:88:d9:c5:c1:3d:77:53:
         d5:44:e6:99:10:98:a6:3e:e4:db:eb:a2:11:8a:91:12:63:40:
         88:06:76:15:b1:5f:8d:b3:e3:fe:ef:a8:64:bf:8a:4a:ac:b9:
         df:8a:08:46:5f:52:0b:a4:8e:6f:70:2c:fa:28:ac:21:ee:8d:
         8f:62:e9:8b:9d:65:fe:98:da:0b:ff:c4:90:f8:7d:f2:5c:9e:
         3a:d0:1d:a6:67:27:a6:c1:71:9e:4b:14:ff:66:d2:a6:75:29:
         c5:f4:75:1d:9b:ba:79:e6:08:ab:fa:fb:50:69:79:39:57:f8:
         cb:3f:d1:51:33:72:7e:ba:fa:db:ec:d5:ff:70:25:5e:80:b0:
         0c:5d:f3:eb:6f:8f:f8:92:1a:eb:cd:d8:01:ce:17:eb:25:2c:
         8f:67:80:65:d9:c9:e2:90:7e:08:39:23:bd:23:18:de:fe:4c:
         f6:38:42:69:a9:67:1c:3c:5e:d1:93:47:14:af:3c:ab:fa:23:
         84:3a:eb:cc:63:02:5f:e3:84:b9:93:9f:27:9f:37:c6:ef:4d:
         b0:0f:cb:3f:bb:c3:6d:36:0f:a3:ee:6b:63:de:4c:80:97:ee:
         d3:56:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:57 2026 by rpki-client