Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37322e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          jI+IlaxZgZocgXhp/YGKk1YHn/TC0SdwizkTqgzD8ts=
Subject key identifier:   14:51:B7:51:47:5F:DF:38:6C:62:2E:E1:0D:6C:C9:3D:51:EE:36:1A
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       5D053C8D61AA7E4EDC6B6231D1EEAE8A628952FE
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:32 +0000
ROA not before:           Mon 23 Mar 2026 01:30:32 +0000
ROA not after:            Mon 22 Mar 2027 01:35:32 +0000
asID:                     26593
IP address blocks:        200.108.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:05:3c:8d:61:aa:7e:4e:dc:6b:62:31:d1:ee:ae:8a:62:89:52:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:32 2026 GMT
            Not After : Mar 22 01:35:32 2027 GMT
        Subject: CN=1451B751475FDF386C622EE10D6CC93D51EE361A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b7:c1:d1:29:53:14:8a:c3:f4:8f:32:62:8a:
                    c5:8e:b0:28:ce:77:71:f2:29:8b:cf:c4:ee:bb:1f:
                    cd:dd:6a:2e:36:c0:3d:5f:59:9d:2e:88:21:af:09:
                    73:e3:26:ec:b9:5d:3b:1b:a3:82:50:50:4c:eb:90:
                    af:b3:f4:04:9c:a7:d7:ca:ac:62:44:9e:30:1d:35:
                    94:54:f2:de:0a:e1:5a:80:a2:6c:6c:14:8d:7d:23:
                    0d:62:ef:de:ae:59:a4:43:3f:5e:07:8d:97:87:f2:
                    d5:ce:f8:82:9c:de:b0:e7:7d:2c:3c:b7:90:9a:85:
                    6d:0b:75:1e:48:15:64:41:78:fa:06:be:28:24:f8:
                    4a:e4:95:c3:f8:28:b7:5b:c9:f6:ed:16:84:73:81:
                    57:44:4b:4c:e9:f6:c8:5b:d4:2b:c9:f0:91:20:44:
                    90:eb:63:e9:4d:57:51:a8:e8:6b:2e:9c:08:39:37:
                    f3:21:dd:71:b0:0a:20:e1:c0:00:ba:47:75:34:d6:
                    62:54:ca:83:6a:fb:b7:87:7a:9c:dd:f4:a1:1e:04:
                    63:33:5d:db:31:bc:34:93:f1:0e:d6:03:a3:54:4d:
                    14:f3:41:d9:66:0d:e3:6b:6a:98:47:f8:5a:71:5c:
                    be:cf:80:41:56:14:7e:9d:8e:bf:af:eb:96:3a:98:
                    21:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:B7:51:47:5F:DF:38:6C:62:2E:E1:0D:6C:C9:3D:51:EE:36:1A
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37322e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:52:60:4a:17:99:68:ac:7a:8d:1a:e0:e6:6e:46:9c:b3:25:
         a0:54:05:60:45:16:f9:50:59:dc:9d:d4:24:a2:45:89:72:0c:
         a7:e0:ff:c2:74:e0:0d:60:48:ef:10:55:30:f6:cb:63:0e:93:
         ff:9f:c8:f5:f9:eb:3e:64:c8:46:5e:fc:9c:8f:6b:a6:fb:04:
         70:91:d6:8b:72:c0:cc:59:16:e8:92:f1:0c:1a:3b:9d:c8:cb:
         72:0d:e7:99:db:92:69:e1:45:e1:14:18:d5:40:05:03:d8:21:
         87:f9:93:d6:a4:2b:43:92:13:5d:94:13:cf:10:8d:af:f1:7f:
         e6:ed:63:94:b7:0e:e6:4c:b4:75:bc:d0:f8:04:96:46:dc:74:
         99:33:60:f6:cb:76:26:c7:82:e5:33:1f:23:b1:90:ce:4a:18:
         5f:d7:25:a0:19:72:47:e9:47:92:5d:64:41:0f:f0:66:71:b1:
         db:23:04:1b:bf:45:8e:2b:43:2f:0f:4d:80:9a:47:c5:cf:0e:
         2a:d0:c4:07:cf:a0:23:51:d9:a7:46:17:9c:7d:41:1d:54:52:
         ca:a5:ac:6d:d7:08:e9:0f:53:e1:04:77:14:dd:00:f2:10:76:
         20:6a:4a:d1:32:bf:d4:a2:56:b5:57:61:5e:11:6c:02:b7:40:
         b6:a7:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:40:48 2026 by rpki-client