Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/3230312e3232312e3132372e302f32342d3234203d3e203532343137.roa
File:                     3230312e3232312e3132372e302f32342d3234203d3e203532343137.roa (raw, json)
Hash identifier:          wD8568+7K8n2Dulh1LOaH08CIxJDuGbnVsDvMSLw810=
Subject key identifier:   C9:F9:98:07:A5:D6:47:23:87:E5:92:D4:15:A3:4A:10:ED:E6:25:E3
Certificate issuer:       /CN=CEE07DBD2BF8ABE8C6C28D845474A884D847AC93
Certificate serial:       5115F232601D1967998F406B733A3722E7C80770
Authority key identifier: CE:E0:7D:BD:2B:F8:AB:E8:C6:C2:8D:84:54:74:A8:84:D8:47:AC:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/3230312e3232312e3132372e302f32342d3234203d3e203532343137.roa
Signing time:             Tue 05 Mar 2024 17:55:36 +0000
ROA not before:           Tue 05 Mar 2024 17:50:36 +0000
ROA not after:            Tue 04 Mar 2025 17:55:36 +0000
asID:                     52417
IP address blocks:        201.221.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:15:f2:32:60:1d:19:67:99:8f:40:6b:73:3a:37:22:e7:c8:07:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE07DBD2BF8ABE8C6C28D845474A884D847AC93
        Validity
            Not Before: Mar  5 17:50:36 2024 GMT
            Not After : Mar  4 17:55:36 2025 GMT
        Subject: CN=C9F99807A5D6472387E592D415A34A10EDE625E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:74:7a:0b:fe:26:80:cb:a6:0b:c6:85:e6:
                    81:4f:25:7a:42:b0:3c:07:33:88:01:e9:75:31:ab:
                    be:47:43:3b:3a:9e:61:4c:01:11:3f:1d:22:4b:29:
                    23:93:9e:73:dd:1c:7c:af:16:7e:21:9b:03:d4:b1:
                    4f:41:5f:52:52:d1:28:8e:1e:85:dd:39:58:58:9a:
                    f0:40:ed:6d:df:ac:40:45:80:95:1e:7c:32:ed:89:
                    c3:08:87:25:cb:e8:88:e7:30:a3:27:6d:a7:6a:27:
                    7e:6c:10:92:50:d0:de:00:f5:28:4a:b2:86:04:c6:
                    6a:fb:76:0b:5a:ba:17:50:30:22:1f:c8:ef:a4:5f:
                    4c:96:b7:b6:a1:75:b5:df:f9:51:f1:64:73:f9:99:
                    98:31:3d:f8:80:5a:87:25:d1:99:99:52:9f:93:69:
                    20:87:59:a6:e1:69:15:9a:d9:13:7f:23:73:02:10:
                    3d:9c:06:ba:41:ee:c4:4c:b7:e7:4f:b4:68:96:ea:
                    62:9d:7e:61:36:09:5d:d4:93:c1:e4:80:40:b6:4a:
                    23:55:e2:60:ee:f5:72:47:12:41:aa:86:a3:f5:5f:
                    7a:28:1e:8c:7b:12:9a:ea:25:7f:3d:6c:69:92:a5:
                    1c:7b:fc:32:4e:6b:51:22:17:11:e3:9f:63:50:fa:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F9:98:07:A5:D6:47:23:87:E5:92:D4:15:A3:4A:10:ED:E6:25:E3
            X509v3 Authority Key Identifier:
                keyid:CE:E0:7D:BD:2B:F8:AB:E8:C6:C2:8D:84:54:74:A8:84:D8:47:AC:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/3230312e3232312e3132372e302f32342d3234203d3e203532343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:eb:9e:c0:1c:70:07:d7:93:4f:b9:5b:2c:5b:d2:ec:3f:00:
         1c:d2:90:65:2b:86:f7:99:1e:14:12:19:d2:ba:38:82:a0:7b:
         96:b1:55:d1:0a:af:32:cd:52:b6:4a:cd:2d:41:06:85:76:0d:
         0f:70:d7:d5:32:d4:e4:38:65:dd:c7:52:7d:74:03:69:a0:e8:
         06:6d:56:10:e2:7f:85:93:95:74:0a:1b:88:0a:48:1a:c5:6e:
         1f:dc:0f:94:4b:8c:63:82:e5:72:dd:83:18:cb:ab:91:5b:7c:
         53:cc:3c:eb:c4:0b:81:0b:e0:3d:b6:50:8b:6c:fc:30:21:a5:
         1f:22:02:1a:32:12:1e:8a:c6:00:e9:c7:85:e7:ee:cf:a2:90:
         49:4e:c1:2b:86:f9:7b:7f:41:10:aa:e9:1b:57:d4:31:53:29:
         5d:27:70:58:08:a7:4f:e6:5b:fe:f1:b3:7f:fb:e3:ca:2c:a3:
         8a:9a:8b:77:a2:10:45:7a:fb:b1:f6:fe:ba:7c:e2:28:05:16:
         4b:74:28:fc:92:9a:c4:f5:6c:de:96:69:7b:2e:a4:0f:af:26:
         06:5c:d5:1f:59:c2:03:74:b5:bc:7f:cc:0b:04:a6:16:fa:13:
         04:1a:e7:9f:95:0c:91:a1:21:9a:e7:9f:08:bb:2b:a9:b3:5f:
         70:1e:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:20 2024 by rpki-client on console-fra.rpki-client.org