Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38302e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          u+4jvnalQIRRtHms0M6e5k74AqPy7kN6rgdFa6GlWYM=
Subject key identifier:   1F:79:0E:07:B7:B4:1C:B4:E7:A2:67:C5:9D:2F:88:7F:C1:77:F5:4B
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       452EB46E72132CE070D423D6491D7BDF92EC82BA
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:33 +0000
ROA not before:           Mon 23 Mar 2026 01:30:33 +0000
ROA not after:            Mon 22 Mar 2027 01:35:33 +0000
asID:                     26593
IP address blocks:        200.108.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2e:b4:6e:72:13:2c:e0:70:d4:23:d6:49:1d:7b:df:92:ec:82:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:33 2026 GMT
            Not After : Mar 22 01:35:33 2027 GMT
        Subject: CN=1F790E07B7B41CB4E7A267C59D2F887FC177F54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:71:18:07:78:92:2c:5f:a2:ce:e1:cb:c0:
                    72:9e:5b:22:d8:31:d9:5c:ff:9a:33:80:6e:d4:4a:
                    a2:36:57:5c:5f:5f:f3:c6:04:34:e4:ad:97:ed:ec:
                    f2:df:c1:e4:5a:15:f1:18:38:94:d9:b2:46:8f:a5:
                    fe:38:d4:eb:86:38:79:b2:8c:0f:31:98:9f:c6:d5:
                    16:4a:80:ef:16:df:df:d7:29:26:78:01:07:b3:f7:
                    62:87:5f:97:dc:d3:a4:fc:0a:9e:b9:98:65:bf:57:
                    3f:2c:9a:d1:d2:d1:21:66:bd:da:a8:25:0a:52:29:
                    7f:46:24:20:96:fa:35:cb:69:b2:b1:b4:4d:c7:81:
                    2f:54:a9:6f:8b:48:d3:e3:1f:cd:9d:be:a0:27:46:
                    10:2e:83:bf:c1:04:6a:17:b3:7b:7d:24:07:1d:e5:
                    8e:55:17:79:8b:5b:76:aa:2a:65:02:7e:14:c5:be:
                    46:5b:99:fc:f5:ff:39:a4:00:02:e0:62:ab:26:56:
                    7d:83:66:9e:f5:7c:3b:7a:ab:33:a0:30:93:55:ef:
                    95:94:65:6f:1a:75:e7:98:3d:d9:07:f6:ee:9c:be:
                    52:a7:ea:88:a3:f4:0f:7e:be:37:fd:e1:39:66:20:
                    c7:24:19:d2:fc:72:3b:ff:96:4a:20:da:49:34:81:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:79:0E:07:B7:B4:1C:B4:E7:A2:67:C5:9D:2F:88:7F:C1:77:F5:4B
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38302e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ae:9d:1c:26:5d:95:1e:fe:19:42:3a:62:39:42:c4:26:d9:
         ba:17:22:68:06:73:64:09:56:5c:69:02:91:ec:24:bb:f8:38:
         fd:1c:d0:a7:f0:e8:ab:b8:9e:c5:c0:3d:74:41:d1:79:42:16:
         cb:e4:3c:0d:c4:5f:d0:55:e0:da:ef:54:19:4a:90:96:fb:76:
         9c:c2:6b:97:e1:c1:5f:7d:55:24:b9:46:af:0b:31:30:95:0c:
         e5:4a:59:e0:1a:54:ee:22:df:8a:1e:80:b1:05:f6:e8:67:35:
         06:63:1a:66:af:a6:5e:1d:b1:5c:47:49:dd:f2:bc:e9:1a:01:
         5e:40:0d:bf:9c:95:74:75:c7:48:44:32:73:15:f5:e9:9f:93:
         f3:bf:15:a1:b6:83:06:6b:3c:a0:1a:f0:d0:77:e3:66:dd:04:
         fb:c8:33:3c:96:a1:63:d5:e7:f7:52:0e:2a:53:38:e6:bb:8b:
         9c:d5:1c:42:ad:5c:c0:49:03:00:f3:f6:be:2a:19:61:96:79:
         e0:0b:ee:98:d6:21:4c:ac:d5:fb:f6:16:b7:00:c6:eb:30:c0:
         03:2e:e9:34:90:df:8f:1e:68:65:27:ce:bd:a9:9d:3c:98:7b:
         12:28:fc:1e:ab:49:2b:c2:bb:06:2d:d7:47:21:58:e0:00:4d:
         5e:e0:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:56 2026 by rpki-client