Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39342e302f32342d3234203d3e203236353933.roa
File:                     3230302e3130382e39342e302f32342d3234203d3e203236353933.roa (raw, json)
Hash identifier:          cC9F3tqwGxMimZ+2B+qJTVxk46c9o4fH21p9gehGdH4=
Subject key identifier:   5C:C4:C2:5B:70:88:6B:0E:53:19:F7:DF:55:62:B9:DB:E3:02:7A:43
Certificate issuer:       /CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
Certificate serial:       2F494B86CBE6735671CA8EEF35A9FAA2995659A1
Authority key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39342e302f32342d3234203d3e203236353933.roa
Signing time:             Mon 23 Mar 2026 01:35:30 +0000
ROA not before:           Mon 23 Mar 2026 01:30:30 +0000
ROA not after:            Mon 22 Mar 2027 01:35:30 +0000
asID:                     26593
IP address blocks:        200.108.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:49:4b:86:cb:e6:73:56:71:ca:8e:ef:35:a9:fa:a2:99:56:59:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA
        Validity
            Not Before: Mar 23 01:30:30 2026 GMT
            Not After : Mar 22 01:35:30 2027 GMT
        Subject: CN=5CC4C25B70886B0E5319F7DF5562B9DBE3027A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:22:16:6c:41:58:8b:13:ac:a6:89:38:c3:
                    51:04:2c:42:14:5b:db:58:4a:da:d2:8a:1a:c6:0f:
                    69:95:75:28:a1:b9:ea:36:f2:c7:f3:63:9c:18:11:
                    2b:ba:e8:86:5c:ef:e0:01:d3:d4:bc:6b:ba:07:d0:
                    58:7b:16:da:f8:ce:07:5d:8a:ce:17:9c:3b:68:a9:
                    1b:b4:26:3f:b6:1c:4d:a4:34:ab:5e:a8:3c:f0:5b:
                    e7:de:f5:7c:eb:f6:df:13:10:31:be:05:54:7f:fb:
                    35:d1:12:a4:f0:25:14:3f:5c:c9:5e:78:91:b0:f2:
                    96:c5:e8:a8:fa:07:e1:e8:c8:d9:bc:e0:b4:6c:33:
                    3f:cc:9a:ab:2d:43:54:01:6f:55:9e:1a:7f:5e:a1:
                    eb:c3:08:af:12:03:e8:25:36:f1:50:70:e8:5a:7d:
                    b4:0a:c5:c3:2b:fe:90:82:6a:7c:b3:2e:22:54:ba:
                    bd:e3:bf:73:7d:85:95:a8:2e:18:be:ff:a4:63:5b:
                    af:55:de:9e:58:26:85:04:54:36:c2:97:63:44:44:
                    bd:11:5b:c7:83:70:d8:f2:9d:6b:99:85:cc:c0:01:
                    74:f0:9e:71:9c:82:56:c9:b7:4d:a6:ef:d3:48:5f:
                    e0:44:f7:37:c4:24:ff:28:78:d9:9d:a0:f1:85:ce:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C4:C2:5B:70:88:6B:0E:53:19:F7:DF:55:62:B9:DB:E3:02:7A:43
            X509v3 Authority Key Identifier:
                keyid:EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/3230302e3130382e39342e302f32342d3234203d3e203236353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:75:97:05:6e:8b:5d:0b:75:c0:28:b8:a1:40:dd:7d:f9:4c:
         2a:87:bd:00:7c:8b:b3:83:b6:e2:18:28:79:45:42:63:59:4e:
         32:74:9a:4e:de:d2:20:50:b6:92:5c:18:eb:ab:e8:27:3d:1d:
         a2:9c:6a:2d:7b:bb:a6:35:46:3c:ec:95:1f:03:a0:49:85:74:
         a9:c5:ec:6b:f3:58:12:9a:29:7d:5d:17:39:72:0e:ad:c3:c7:
         74:d9:ac:40:8a:64:b7:1a:5a:63:41:11:26:bd:0f:bf:93:9c:
         a8:6e:84:ab:ff:c8:1a:29:61:d7:6e:f2:29:8c:0d:87:0c:47:
         c0:25:04:c0:c7:92:ca:e8:20:b9:b1:89:55:a9:58:e4:f9:b0:
         3a:b3:f4:8b:41:76:21:4a:f6:9f:f1:4b:ad:8a:37:9a:8d:7c:
         ea:ba:f5:60:d4:bb:49:26:82:17:d8:20:f6:fc:bf:d1:84:a4:
         af:1f:bb:8a:ca:ac:86:da:4e:99:e3:78:9b:99:a2:d8:26:41:
         e8:0b:66:b8:4a:06:7a:bc:a0:e3:a1:79:6c:7d:97:5d:57:5f:
         e0:ff:26:aa:31:24:8d:1b:ca:e3:7c:75:31:3c:71:a0:61:93:
         bd:5c:4a:18:e0:fa:e2:f2:10:41:7c:11:94:4e:0d:20:b4:42:
         b8:c1:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:57 2026 by rpki-client