Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27953.roa
File:                     AS27953.roa (raw, json)
Hash identifier:          nQik/0dyF1Pfs1vMLc9bHnbqn4DH2yYsli6DngUZ4So=
Subject key identifier:   2B:E4:7A:DA:4F:1C:67:81:0A:87:35:60:A5:81:D1:85:CE:9D:79:6B
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       35DA2A2E15556DFE6B60EBDDED1D91FFA707ECEC
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27953.roa
Signing time:             Fri 27 Mar 2026 21:05:11 +0000
ROA not before:           Fri 27 Mar 2026 21:00:11 +0000
ROA not after:            Fri 26 Mar 2027 21:05:11 +0000
asID:                     27953
IP address blocks:        201.234.249.0/24 maxlen: 24
                          201.234.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:da:2a:2e:15:55:6d:fe:6b:60:eb:dd:ed:1d:91:ff:a7:07:ec:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:11 2026 GMT
            Not After : Mar 26 21:05:11 2027 GMT
        Subject: CN=2BE47ADA4F1C67810A873560A581D185CE9D796B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:19:28:c8:56:3a:49:e7:9d:7b:bf:40:cf:
                    3c:06:a0:74:f0:e1:1a:f7:2a:65:3c:18:82:ed:06:
                    37:fa:24:55:df:95:4a:dd:39:8b:e2:83:1a:a8:53:
                    63:ec:10:fb:44:f2:52:f6:3a:fd:8f:4b:9b:4e:d2:
                    1c:9a:c7:d7:4a:22:fe:ca:af:c5:e8:fb:0c:84:a5:
                    40:23:67:28:a2:b0:ce:4e:7f:12:25:cd:86:59:fa:
                    1a:66:c1:59:70:54:2a:4a:29:1f:84:74:62:f5:55:
                    b1:b8:75:0c:cd:31:dc:0d:9a:b3:b9:d3:98:4b:8e:
                    8d:aa:69:91:60:be:48:bd:d2:1b:d8:e2:b7:55:25:
                    84:e9:a1:84:82:57:b7:a6:2d:f7:e5:ba:b4:e2:a3:
                    f0:8c:4f:f0:eb:ba:be:ba:54:16:84:a0:b9:c8:0b:
                    ba:17:4d:9a:7e:85:e1:19:3c:31:96:76:e0:31:02:
                    d9:20:e3:84:1e:0e:21:c1:03:52:0e:04:c7:f2:fc:
                    8d:e6:64:d0:c6:57:ea:33:a9:59:8b:f4:da:ac:17:
                    a8:2a:45:3a:b8:e8:99:61:bc:5f:92:39:b5:7e:2d:
                    7f:14:8d:b8:6e:a5:34:3c:55:be:a1:6f:c8:a2:37:
                    57:d7:f4:96:70:74:e0:b7:75:49:db:9b:85:f0:1b:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E4:7A:DA:4F:1C:67:81:0A:87:35:60:A5:81:D1:85:CE:9D:79:6B
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27953.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.249.0/24
                  201.234.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:02:bf:ed:67:e8:ce:40:ff:8a:fb:2d:c8:7a:c4:20:e2:da:
         65:da:81:11:af:d7:83:2c:06:01:9d:8b:fa:74:ee:8e:f2:06:
         40:57:f1:d8:1a:e4:f9:41:b9:50:27:e9:fb:9f:1b:dd:65:d9:
         18:f9:b5:80:ef:95:56:f8:3d:04:40:68:72:71:73:03:f9:ad:
         a1:a5:ab:d1:32:b8:4f:0b:ac:dd:f5:75:89:01:2e:ef:59:05:
         ac:a7:99:b6:b4:db:8f:25:cc:4d:da:d7:83:74:d7:a2:bb:05:
         70:f5:ba:ed:c1:80:8e:35:5e:8a:fc:27:a6:2a:ad:1a:16:67:
         19:55:b9:80:38:b3:5f:9b:1b:a5:75:f3:a2:54:15:9c:b5:52:
         dc:0b:cb:14:af:4c:1d:6c:4f:cf:c5:13:29:43:45:40:14:bd:
         88:c8:96:ab:b8:99:f3:02:08:52:17:b9:0b:7e:07:42:7c:46:
         8e:92:05:66:f2:44:eb:02:cf:f7:81:0e:9b:ca:fb:63:94:87:
         cb:fd:5b:0b:b4:b2:2c:a9:56:cf:19:d9:3a:fd:af:98:c2:5d:
         a9:53:9b:9c:1d:58:a8:4b:3f:d9:ad:11:c4:c1:79:1e:e5:18:
         b3:62:8c:f4:84:6c:c4:e2:08:f5:5b:91:bc:02:5f:11:2b:66:
         f8:31:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:01:23 2026 by rpki-client