Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
File:                     AS27672.roa (raw, json)
Hash identifier:          gjNmnsJrD/PeLD/WgEmke8BGNpqYFUX/B2rmIY2zyxE=
Subject key identifier:   EC:66:63:B2:EF:AE:9C:F8:64:39:A3:F3:EE:D5:76:02:57:84:95:B1
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3BFAEC59F1945A3A168A248C023C406CDD4E28FD
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
Signing time:             Wed 29 May 2024 04:20:00 +0000
ROA not before:           Wed 29 May 2024 04:15:00 +0000
ROA not after:            Wed 28 May 2025 04:20:00 +0000
asID:                     27672
IP address blocks:        200.77.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fa:ec:59:f1:94:5a:3a:16:8a:24:8c:02:3c:40:6c:dd:4e:28:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 29 04:15:00 2024 GMT
            Not After : May 28 04:20:00 2025 GMT
        Subject: CN=EC6663B2EFAE9CF86439A3F3EED57602578495B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:8f:60:30:d9:6a:99:4f:4c:c1:3c:8e:05:
                    ad:d4:07:a6:87:9f:69:90:56:37:a6:da:bc:01:10:
                    40:3e:18:16:ad:2c:2a:a8:13:dd:a9:89:1b:c3:83:
                    58:e1:e1:5c:3b:a7:5f:b5:be:37:ee:0b:ce:b6:28:
                    a8:85:95:d4:89:14:15:09:e1:54:fc:98:6d:d5:b9:
                    4f:13:09:ca:28:62:b5:69:b0:6c:0d:71:d2:16:ea:
                    0d:07:e6:52:61:b4:9d:28:22:e1:69:78:2b:c3:d9:
                    98:d8:01:30:97:74:72:2a:c5:91:29:c5:b1:ee:3c:
                    b4:17:8a:5e:a2:64:b4:77:bd:55:2a:ef:af:51:b3:
                    b4:75:27:b3:cd:94:aa:54:14:33:32:a2:93:c5:c3:
                    62:4a:aa:b7:f7:d7:b6:bb:e3:5e:26:77:2f:22:7f:
                    9c:85:d8:57:d8:46:99:5f:b2:dc:42:9a:48:4b:8b:
                    85:6a:21:07:82:b7:d6:a6:5c:d5:94:34:41:cb:44:
                    ee:b7:7d:4f:a5:0a:15:95:8f:0e:d8:ff:57:2c:15:
                    bf:3c:ae:f9:70:ea:52:50:d8:d6:af:1c:a4:16:b0:
                    af:8a:7a:d5:72:2e:d9:43:d8:ac:c8:fb:a6:f7:75:
                    d2:78:28:95:92:23:b7:d8:5c:88:78:3f:50:09:b5:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:66:63:B2:EF:AE:9C:F8:64:39:A3:F3:EE:D5:76:02:57:84:95:B1
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:db:db:87:83:65:23:1f:50:d8:35:cd:f3:68:25:a3:8c:25:
         c7:aa:a4:67:48:de:52:bc:e0:c0:1b:17:b9:0d:8f:8e:83:6f:
         4a:54:85:f9:35:27:50:bf:7c:ac:3e:ff:d7:a4:50:fb:4e:65:
         9c:ec:e0:01:49:e3:ab:d6:df:a6:61:15:11:3c:63:80:4f:51:
         31:e3:a1:1e:d2:22:87:ae:54:84:b3:e3:a9:4e:6a:26:11:de:
         92:d9:37:3c:ed:ab:aa:35:e2:92:17:bc:13:eb:01:5d:18:94:
         7a:fe:21:f5:48:87:58:1c:df:84:42:a5:78:d8:e4:ae:42:b3:
         4d:0d:06:fb:95:33:18:6f:cd:f5:d4:e7:d1:fb:94:39:43:f5:
         66:05:74:5a:99:4d:cd:b3:4f:e0:e2:1b:53:33:02:b7:e2:3f:
         85:4e:67:bc:fc:9c:4f:25:20:21:f2:1c:78:0e:62:8c:7b:8b:
         25:a6:00:44:64:95:0e:47:e7:51:9f:12:ba:33:b5:d7:0c:5a:
         d2:d8:74:67:55:46:ad:f8:50:ab:0d:98:1d:9c:97:23:97:43:
         0e:b0:a0:fd:2b:23:98:45:dd:34:89:b0:a7:83:b8:5a:18:59:
         d6:d2:cd:9e:9c:a9:23:39:0e:71:d0:3f:6e:a2:55:ba:a1:3e:
         cb:44:71:a1
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUO/rsWfGUWjoWiiSMAjxAbN1OKP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjkwNDE1MDBaFw0yNTA1MjgwNDIwMDBaMDMxMTAvBgNV
BAMTKEVDNjY2M0IyRUZBRTlDRjg2NDM5QTNGM0VFRDU3NjAyNTc4NDk1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVj49gMNlqmU9MwTyOBa3UB6aH
n2mQVjem2rwBEEA+GBatLCqoE92piRvDg1jh4Vw7p1+1vjfuC862KKiFldSJFBUJ
4VT8mG3VuU8TCcooYrVpsGwNcdIW6g0H5lJhtJ0oIuFpeCvD2ZjYATCXdHIqxZEp
xbHuPLQXil6iZLR3vVUq769Rs7R1J7PNlKpUFDMyopPFw2JKqrf317a7414mdy8i
f5yF2FfYRplfstxCmkhLi4VqIQeCt9amXNWUNEHLRO63fU+lChWVjw7Y/1csFb88
rvlw6lJQ2NavHKQWsK+KetVyLtlD2KzI+6b3ddJ4KJWSI7fYXIh4P1AJtUMhAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQU7GZjsu+unPhkOaPz7tV2AleElbEwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD
N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQVMyNzY3Mi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAshNfDAN
BgkqhkiG9w0BAQsFAAOCAQEAFNvbh4NlIx9Q2DXN82glo4wlx6qkZ0jeUrzgwBsX
uQ2PjoNvSlSF+TUnUL98rD7/16RQ+05lnOzgAUnjq9bfpmEVETxjgE9RMeOhHtIi
h65UhLPjqU5qJhHektk3PO2rqjXikhe8E+sBXRiUev4h9UiHWBzfhEKleNjkrkKz
TQ0G+5UzGG/N9dTn0fuUOUP1ZgV0WplNzbNP4OIbUzMCt+I/hU5nvPycTyUgIfIc
eA5ijHuLJaYARGSVDkfnUZ8SujO11wxa0th0Z1VGrfhQqw2YHZyXI5dDDrCg/Ssj
mEXdNImwp4O4WhhZ1tLNnpypIzkOcdA/bqJVuqE+y0RxoQ==
-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:28 2024 by rpki-client on console-fra.rpki-client.org