Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38382e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e38382e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          yfS67VELJ+FB1vHvE7zip5GejruduXUlUdM41boleMM=
Subject key identifier:   00:26:21:7D:43:2B:36:19:5F:8D:1B:D9:26:6C:28:F5:71:88:14:B0
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       589DBCAC7E0D33450DC28F612676F3ECC2B76077
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38382e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:36 +0000
ROA not before:           Mon 23 Mar 2026 01:30:36 +0000
ROA not after:            Mon 22 Mar 2027 01:35:36 +0000
asID:                     26593
IP address blocks:        200.108.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9d:bc:ac:7e:0d:33:45:0d:c2:8f:61:26:76:f3:ec:c2:b7:60:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:36 2026 GMT
            Not After : Mar 22 01:35:36 2027 GMT
        Subject: CN=0026217D432B36195F8D1BD9266C28F5718814B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:a7:e9:46:ed:2e:10:42:34:5a:d4:2e:a7:
                    df:eb:80:01:6b:63:a7:ee:7e:6c:22:98:d7:47:61:
                    5f:be:64:e6:4b:95:10:90:24:d6:c8:b8:4e:14:50:
                    94:7e:3c:7b:a9:76:dd:c1:6f:ab:57:71:7d:f1:58:
                    16:4e:24:4c:6d:80:5a:4d:66:7c:f1:16:9a:d4:3a:
                    59:61:da:78:25:7c:3a:12:de:3c:da:8b:ba:eb:d5:
                    e5:11:cf:0d:9d:b8:17:b7:2b:54:c1:a3:96:83:c8:
                    11:25:ed:64:75:bc:ff:9d:a9:ef:44:7d:5a:18:f2:
                    b6:aa:59:2f:4e:aa:0f:02:e4:63:7a:ca:67:1f:72:
                    55:e8:7d:ea:a1:37:26:03:74:e2:2f:42:3e:ac:e4:
                    46:3c:63:12:28:09:0d:6a:4f:c0:4d:07:53:b1:23:
                    55:6c:b0:2f:77:90:b8:ab:af:d4:f9:7d:36:af:a1:
                    24:58:c6:82:b0:0f:88:0e:ef:6c:f4:59:5b:60:5d:
                    14:59:99:cb:0e:f9:f5:b2:47:0d:c6:63:06:d7:a7:
                    4b:6c:c3:de:61:5d:b0:38:61:67:8c:d0:d5:23:ef:
                    a8:7e:0a:78:53:17:51:0e:a0:a0:ec:6d:15:bd:4a:
                    a6:ee:2c:1a:00:95:bf:b4:c1:73:82:94:a4:ec:d6:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:26:21:7D:43:2B:36:19:5F:8D:1B:D9:26:6C:28:F5:71:88:14:B0
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e38382e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:9b:cf:ce:2e:eb:40:34:3b:84:4a:a9:d4:22:bf:3a:41:
         97:35:d3:1e:ba:9a:bd:49:0a:81:01:2f:66:2e:19:f8:9a:8e:
         b1:66:44:3e:03:c4:5f:4c:52:2f:ac:67:11:df:dc:98:f5:57:
         56:d6:b1:d9:57:4e:b0:d4:76:de:46:6c:95:45:9b:1d:ce:84:
         62:53:e1:f0:08:ed:df:8b:7a:a7:3b:58:27:18:32:54:fb:73:
         aa:3f:12:31:4e:01:05:61:4a:a8:96:1f:17:2d:d7:1e:87:ea:
         0a:d3:5d:a2:e9:e9:b0:fc:56:a4:28:ff:8b:b2:c2:f5:72:ba:
         5c:2d:1b:69:80:c7:7e:aa:73:86:c8:79:08:29:93:6f:fa:b3:
         bf:85:90:31:63:1a:4b:25:78:4a:5a:d4:27:c0:5a:a0:e0:6b:
         5a:89:12:0e:0f:4e:dc:24:2e:71:d9:f2:99:3e:af:01:4b:9a:
         48:93:06:8b:da:e2:58:51:5f:79:1e:37:d1:96:42:eb:84:79:
         cc:61:39:75:80:57:cb:19:5f:b5:f6:5d:75:b4:04:73:a3:a9:
         7b:d9:49:65:52:8a:c0:44:d4:14:7d:57:57:78:a5:f4:f2:ca:
         27:35:29:70:c7:56:66:7b:ee:0f:a5:de:1a:a5:b8:e9:a4:e7:
         69:f6:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:42:27 2026 by rpki-client