Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37392e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e37392e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          bj9oqc/ykB+Z2ymezveGzx9pHjSzG2Aux03dyEB7eCA=
Subject key identifier:   06:F6:69:B4:37:2C:F5:D2:19:3A:05:C3:B3:1B:71:F1:9F:51:FE:F1
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       42AD4A4C8183C97B6DCC4AD64D6D3AD46A0AB049
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37392e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:32 +0000
ROA not before:           Mon 23 Mar 2026 01:30:32 +0000
ROA not after:            Mon 22 Mar 2027 01:35:32 +0000
asID:                     26593
IP address blocks:        200.108.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ad:4a:4c:81:83:c9:7b:6d:cc:4a:d6:4d:6d:3a:d4:6a:0a:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:32 2026 GMT
            Not After : Mar 22 01:35:32 2027 GMT
        Subject: CN=06F669B4372CF5D2193A05C3B31B71F19F51FEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:90:59:5b:6e:01:d3:2d:80:89:32:ea:4b:
                    06:b5:7a:1c:6a:d4:5c:05:dc:8f:f0:d8:85:8a:a3:
                    b4:3b:cc:0b:b9:4f:e4:43:23:86:3e:6f:94:80:3d:
                    2b:51:83:2b:c4:96:86:86:6f:1e:f1:ab:77:48:1b:
                    ce:c4:81:04:d7:8a:61:03:6c:52:5b:ee:f4:cb:a9:
                    92:a3:65:67:bb:b3:f7:c9:42:29:4d:ad:a3:7e:a1:
                    7f:a0:17:23:0d:1c:ff:b0:a5:00:ca:b3:c2:8a:ee:
                    6b:ce:3c:13:ac:06:f7:2a:de:7e:06:ad:f4:38:8c:
                    ff:c0:61:98:b3:3e:ac:4a:00:d4:00:8b:08:78:79:
                    d6:af:bc:ff:20:ef:15:88:e9:a9:b2:c8:4c:20:91:
                    c4:ec:fe:b6:6b:4a:ae:8c:e5:32:a0:e7:5d:74:dd:
                    f2:53:e7:73:a0:7a:b0:01:3d:a2:be:43:54:1f:eb:
                    c6:de:73:15:19:67:eb:84:2e:14:20:07:d5:a5:c5:
                    f4:21:99:02:d7:68:6f:20:fd:cd:84:39:2e:74:30:
                    57:27:58:5d:b4:8a:2a:84:2c:1c:48:75:18:31:94:
                    85:e1:df:d9:b6:38:7e:d8:1b:9e:8a:67:34:be:14:
                    5b:ac:aa:34:63:22:e6:fe:28:54:8e:eb:fb:93:39:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:69:B4:37:2C:F5:D2:19:3A:05:C3:B3:1B:71:F1:9F:51:FE:F1
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e37392e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:1a:ee:fc:8a:3f:f8:fe:e7:89:07:08:2b:34:0b:2b:ec:
         bf:12:87:e3:6d:5f:9f:1a:6b:74:64:fa:c4:07:87:1e:0f:c3:
         9d:55:92:8c:a5:5e:68:73:02:ac:bd:59:5e:00:50:c7:42:e3:
         cf:4b:c8:13:4b:53:56:89:04:01:6f:21:88:90:d4:28:a6:1d:
         e5:38:1a:16:5c:53:ee:d2:1c:1f:a3:8f:1f:7e:e5:26:13:9c:
         fd:44:a3:4b:8e:d8:92:9d:b4:7e:21:4d:e2:53:5a:98:e2:17:
         57:d3:92:27:27:21:5a:f4:92:60:e9:01:b8:bf:b2:37:6e:63:
         e2:c2:55:9f:14:59:7e:b1:ed:b3:69:a7:56:de:e9:ef:da:11:
         68:a9:6c:16:99:18:fb:32:48:02:da:a4:35:2c:6d:6b:85:5b:
         3e:c1:b9:c4:af:be:1b:32:8a:f2:be:b0:03:76:d8:d7:5a:d6:
         8f:9c:14:dc:ee:98:52:15:99:af:19:8f:d1:dc:93:18:7d:fc:
         e2:58:39:8b:46:3c:52:6c:8e:12:c4:d1:a1:b6:8c:49:b0:a9:
         dd:85:53:78:ef:3a:4a:0e:31:38:4b:67:c6:b0:ee:b5:0e:ac:
         db:04:15:e7:80:51:3a:03:27:3e:b4:2d:2e:58:d1:18:c2:01:
         66:cc:50:b8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQq1KTIGDyXttzErWTW061GoKsEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxM0M5M0E2NkM3RTQ3QkI1Qjg2MDkwMDg3MzIyQkMy
RDY5ODFDQTAeFw0yNjAzMjMwMTMwMzJaFw0yNzAzMjIwMTM1MzJaMDMxMTAvBgNV
BAMTKDA2RjY2OUI0MzcyQ0Y1RDIxOTNBMDVDM0IzMUI3MUYxOUY1MUZFRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVpBZW24B0y2AiTLqSwa1ehxq
1FwF3I/w2IWKo7Q7zAu5T+RDI4Y+b5SAPStRgyvEloaGbx7xq3dIG87EgQTXimED
bFJb7vTLqZKjZWe7s/fJQilNraN+oX+gFyMNHP+wpQDKs8KK7mvOPBOsBvcq3n4G
rfQ4jP/AYZizPqxKANQAiwh4edavvP8g7xWI6amyyEwgkcTs/rZrSq6M5TKg5110
3fJT53OgerABPaK+Q1Qf68becxUZZ+uELhQgB9WlxfQhmQLXaG8g/c2EOS50MFcn
WF20iiqELBxIdRgxlIXh39m2OH7YG56KZzS+FFusqjRjIub+KFSO6/uTOVfbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBvZptDcs9dIZOgXDsxtx8Z9R/vEwHwYDVR0j
BBgwFoAU7BPJOmbH5Hu1uGCQCHMivC1pgcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzAzRTM2RjY1RkVCREFGMDkxNTQ5ODFBRTMyNjdEN0Yx
OEIwOUE5MDEyM0ZGN0E1MzQ5RkUzM0JDRDY1QkFCLzAvRUMxM0M5M0E2NkM3RTQ3
QkI1Qjg2MDkwMDg3MzIyQkMyRDY5ODFDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzEzQzkzQTY2QzdFNDdCQjVC
ODYwOTAwODczMjJCQzJENjk4MUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcwM0UzNkY2NUZFQkRBRjA5MTU0OTgxQUUzMjY3RDdGMThCMDlBOTAx
MjNGRjdBNTM0OUZFMzNCQ0Q2NUJBQi8wLzMyMzAzMDJlMzEzMDM4MmUzNzM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhsTzAN
BgkqhkiG9w0BAQsFAAOCAQEALSQa7vyKP/j+54kHCCs0CyvsvxKH421fnxprdGT6
xAeHHg/DnVWSjKVeaHMCrL1ZXgBQx0Ljz0vIE0tTVokEAW8hiJDUKKYd5TgaFlxT
7tIcH6OPH37lJhOc/USjS47Ykp20fiFN4lNamOIXV9OSJychWvSSYOkBuL+yN25j
4sJVnxRZfrHts2mnVt7p79oRaKlsFpkY+zJIAtqkNSxta4VbPsG5xK++GzKK8r6w
A3bY11rWj5wU3O6YUhWZrxmP0dyTGH384lg5i0Y8UmyOEsTRobaMSbCp3YVTeO86
Sg4xOEtnxrDutQ6s2wQV54BROgMnPrQtLljRGMIBZsxQuA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:08:10 2026 by rpki-client