Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38312e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38312e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          afbWaAfJJ8URFH82U9hv0BK2H6SWgJN3rVxTj9ZMdEo=
Subject key identifier:   A4:2C:24:55:27:FF:76:89:3F:3D:B9:FF:58:D1:D7:E0:50:FB:01:30
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       0F6AFA5A853DF9AB03BC0CA3D7E1C0A323BAC87B
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38312e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:31 +0000
ROA not before:           Mon 23 Mar 2026 01:30:31 +0000
ROA not after:            Mon 22 Mar 2027 01:35:31 +0000
asID:                     26593
IP address blocks:        200.108.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6a:fa:5a:85:3d:f9:ab:03:bc:0c:a3:d7:e1:c0:a3:23:ba:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:31 2026 GMT
            Not After : Mar 22 01:35:31 2027 GMT
        Subject: CN=A42C245527FF76893F3DB9FF58D1D7E050FB0130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:98:60:e4:f8:49:f7:53:3e:be:4b:d2:cc:
                    92:bc:c1:52:4d:44:be:42:71:6f:5e:b3:ce:36:fc:
                    ee:53:b5:b2:5a:8a:18:5f:07:ca:2a:27:de:a1:75:
                    1c:5f:e0:0b:3c:f0:bc:69:b9:32:3b:75:8b:2a:ef:
                    44:41:a4:5c:14:ae:8e:e1:88:34:d6:d2:6e:01:4d:
                    30:4b:60:c7:b9:af:c3:1a:14:89:03:72:c1:56:6b:
                    06:c7:7c:72:a6:30:30:54:61:d9:d9:bc:dc:83:41:
                    01:45:1a:25:bc:cc:14:4a:4d:74:dd:5d:ea:20:5f:
                    c4:53:57:06:c0:c1:e7:59:5c:8a:32:75:28:67:77:
                    36:c7:c6:a5:8c:39:e7:81:c9:b1:9a:7d:12:bf:ab:
                    d8:34:ad:7d:23:cf:ec:fc:d8:26:0d:7d:ee:1a:97:
                    36:92:85:c0:37:db:a2:34:be:b5:94:8f:4e:3c:52:
                    6c:ab:dd:a4:65:c9:38:37:66:f9:4b:87:43:64:22:
                    1c:2d:b6:67:5a:66:d4:80:32:71:29:ad:46:fe:75:
                    00:f7:14:4b:44:b3:ed:c1:77:c6:62:c7:a7:04:fe:
                    62:f0:4c:cc:78:4f:39:e0:32:60:fd:01:77:29:28:
                    c2:5d:6b:93:c4:2e:c9:f5:f6:3b:e6:9f:4e:73:f9:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2C:24:55:27:FF:76:89:3F:3D:B9:FF:58:D1:D7:E0:50:FB:01:30
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38312e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:6b:b2:08:25:28:72:6c:f9:e4:3c:02:34:73:4f:4d:65:
         b8:fc:a4:47:1c:1c:d3:26:dc:af:de:23:c4:25:ae:3f:94:4b:
         00:ab:de:7b:88:29:83:f3:53:96:00:4a:80:6f:72:2c:2f:b7:
         61:63:31:bd:c4:0b:57:fa:22:3f:da:c8:db:1a:3c:16:5a:6c:
         db:d4:6f:6c:dd:0b:5d:66:36:26:60:ed:a6:b9:d1:32:03:b4:
         42:e1:8d:db:24:bd:a2:dc:ae:72:26:dc:09:a2:df:5c:55:cd:
         ea:4e:d9:93:73:15:d6:b0:34:f5:c5:5c:8d:91:61:0b:31:0c:
         a5:f6:d2:24:3f:e4:9b:39:90:2c:30:b1:e0:c0:ad:43:b7:83:
         26:d7:9c:a6:b8:bd:3c:c1:ee:5e:0b:b3:0a:7a:d7:8a:5e:d4:
         ba:d1:fd:cd:9b:ef:e4:6c:5a:f7:a4:64:dd:ea:bf:5c:ee:0f:
         d6:1c:75:3e:f2:75:9c:b1:c5:e2:02:4e:7e:fa:34:04:d5:66:
         07:1f:f5:06:81:a3:7e:d7:1c:40:c4:9c:e2:a6:02:a4:f1:44:
         f3:d9:88:6e:62:10:8d:10:4e:e8:64:45:8f:fe:eb:cc:61:25:
         10:02:16:3d:ca:26:00:a1:79:5b:b7:51:78:43:8f:8a:f9:03:
         f0:1a:e7:41
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUD2r6WoU9+asDvAyj1+HAoyO6yHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxM0M5M0E2NkM3RTQ3QkI1Qjg2MDkwMDg3MzIyQkMy
RDY5ODFDQTAeFw0yNjAzMjMwMTMwMzFaFw0yNzAzMjIwMTM1MzFaMDMxMTAvBgNV
BAMTKEE0MkMyNDU1MjdGRjc2ODkzRjNEQjlGRjU4RDFEN0UwNTBGQjAxMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvZhg5PhJ91M+vkvSzJK8wVJN
RL5CcW9es842/O5TtbJaihhfB8oqJ96hdRxf4As88LxpuTI7dYsq70RBpFwUro7h
iDTW0m4BTTBLYMe5r8MaFIkDcsFWawbHfHKmMDBUYdnZvNyDQQFFGiW8zBRKTXTd
XeogX8RTVwbAwedZXIoydShndzbHxqWMOeeBybGafRK/q9g0rX0jz+z82CYNfe4a
lzaShcA326I0vrWUj048Umyr3aRlyTg3ZvlLh0NkIhwttmdaZtSAMnEprUb+dQD3
FEtEs+3Bd8Zix6cE/mLwTMx4TzngMmD9AXcpKMJda5PELsn19jvmn05z+Za5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpCwkVSf/dok/Pbn/WNHX4FD7ATAwHwYDVR0j
BBgwFoAU7BPJOmbH5Hu1uGCQCHMivC1pgcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzAzRTM2RjY1RkVCREFGMDkxNTQ5ODFBRTMyNjdEN0Yx
OEIwOUE5MDEyM0ZGN0E1MzQ5RkUzM0JDRDY1QkFCLzAvRUMxM0M5M0E2NkM3RTQ3
QkI1Qjg2MDkwMDg3MzIyQkMyRDY5ODFDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzEzQzkzQTY2QzdFNDdCQjVC
ODYwOTAwODczMjJCQzJENjk4MUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcwM0UzNkY2NUZFQkRBRjA5MTU0OTgxQUUzMjY3RDdGMThCMDlBOTAx
MjNGRjdBNTM0OUZFMzNCQ0Q2NUJBQi8wLzMyMzAzMDJlMzEzMDM4MmUzODMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhsUTAN
BgkqhkiG9w0BAQsFAAOCAQEAFUxrsgglKHJs+eQ8AjRzT01luPykRxwc0ybcr94j
xCWuP5RLAKvee4gpg/NTlgBKgG9yLC+3YWMxvcQLV/oiP9rI2xo8Flps29RvbN0L
XWY2JmDtprnRMgO0QuGN2yS9otyucibcCaLfXFXN6k7Zk3MV1rA09cVcjZFhCzEM
pfbSJD/kmzmQLDCx4MCtQ7eDJtecpri9PMHuXguzCnrXil7UutH9zZvv5Gxa96Rk
3eq/XO4P1hx1PvJ1nLHF4gJOfvo0BNVmBx/1BoGjftccQMSc4qYCpPFE89mIbmIQ
jRBO6GRFj/7rzGElEAIWPcomAKF5W7dReEOPivkD8BrnQQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:08:10 2026 by rpki-client