Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
File:                     AS27672.roa (raw, json)
Hash identifier:          h0/AouKFZ35dnZAbF0xIZOIys1wzuvcuH0jgjI5bEbQ=
Subject key identifier:   EE:93:54:62:DE:84:37:FF:3E:D2:9F:A0:04:C4:60:65:C2:6E:08:B6
Certificate issuer:       /CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
Certificate serial:       3E9D09048792EBBE6A8154350A326EBDC629B8A4
Authority key identifier: D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
Signing time:             Wed 02 Sep 2026 07:25:00 +0000
ROA not before:           Wed 02 Sep 2026 07:20:00 +0000
ROA not after:            Wed 01 Sep 2027 07:25:00 +0000
asID:                     27672
IP address blocks:        177.224.176.0/21 maxlen: 21
                          177.240.128.0/19 maxlen: 19
                          189.195.160.0/23 maxlen: 23
                          200.77.124.0/22 maxlen: 22
                          2806:260:1009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 19:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9d:09:04:87:92:eb:be:6a:81:54:35:0a:32:6e:bd:c6:29:b8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
        Validity
            Not Before: Sep  2 07:20:00 2026 GMT
            Not After : Sep  1 07:25:00 2027 GMT
        Subject: CN=EE935462DE8437FF3ED29FA004C46065C26E08B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:54:08:99:d3:21:32:4d:0c:51:ab:f3:19:
                    c3:86:b6:a0:d1:6e:fa:7d:55:aa:46:87:76:d4:b2:
                    f0:10:a5:fb:b9:b9:9e:80:72:d5:e4:80:59:ce:b4:
                    d3:17:fc:f8:b6:6e:22:fd:f3:8e:b3:b2:74:5f:d0:
                    6f:43:90:d0:54:7c:be:6d:78:cc:d0:07:2f:4b:f4:
                    b5:3e:98:ff:ee:eb:95:ff:42:2a:e0:7e:c6:df:50:
                    ba:a2:2b:2d:5f:59:0d:4c:c9:09:b2:f4:01:d4:0b:
                    45:f7:c6:55:32:44:01:b8:12:44:64:cf:82:47:34:
                    78:7f:fb:9c:c6:cb:44:82:a4:cf:b1:cb:94:1d:2f:
                    10:a5:77:a5:5e:38:a3:71:3d:d1:85:e8:1b:3e:27:
                    1d:f4:22:ba:59:9f:c8:f0:11:bf:a1:d3:92:43:7c:
                    2b:07:13:dd:97:76:65:2f:ce:e7:a5:67:c4:0e:fe:
                    b6:78:cf:da:36:47:25:a4:96:59:99:fd:e9:0f:99:
                    da:61:59:dc:2c:c2:c7:98:cb:39:6d:70:f2:49:a4:
                    b3:3f:b6:9e:10:40:da:77:41:60:86:ea:a6:31:35:
                    8b:b3:12:bb:6e:aa:8c:81:02:1c:57:05:26:23:ae:
                    1e:32:07:0a:0c:e3:d8:88:f8:36:e0:bb:73:ab:e6:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:93:54:62:DE:84:37:FF:3E:D2:9F:A0:04:C4:60:65:C2:6E:08:B6
            X509v3 Authority Key Identifier:
                keyid:D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.224.176.0/21
                  177.240.128.0/19
                  189.195.160.0/23
                  200.77.124.0/22
                IPv6:
                  2806:260:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:45:6a:bb:9e:23:58:1b:81:c2:59:ac:59:c1:15:de:31:
         9e:29:43:11:ee:cb:e0:38:e3:d6:82:ab:d7:d4:80:d2:0e:f7:
         36:24:1c:cc:8e:f6:78:b7:67:55:1b:a1:85:72:5f:a9:e1:6c:
         16:76:64:1a:cb:4a:a2:9c:26:37:89:5a:17:3d:6a:c4:5b:52:
         5b:b4:8d:e8:93:e1:8a:a4:7f:c3:52:ad:ac:6e:2b:8d:c2:a9:
         0c:90:43:a9:f1:73:00:bc:c5:0a:75:ad:94:6f:ef:ae:83:6a:
         9b:9c:c2:52:ae:47:78:4b:16:65:a4:62:b6:92:58:c8:d9:23:
         92:97:16:7f:d8:1d:d7:66:10:b0:6c:79:f1:37:3e:45:ce:16:
         15:23:ad:1d:5d:5b:11:ee:ce:ba:d3:75:ba:aa:71:f8:fd:0e:
         44:b1:4f:ac:d3:70:0c:d1:fa:b4:7a:17:6a:07:27:31:3c:c3:
         81:ae:3f:3f:78:22:46:9c:cb:f4:d3:c3:4a:a2:06:83:5c:23:
         48:e9:9a:68:54:56:2a:a7:aa:95:59:f7:25:3d:6e:1e:02:e2:
         fe:9d:1c:e3:65:69:65:35:55:4a:6e:84:00:4e:81:e6:17:7e:
         49:76:73:de:05:b5:bc:8d:15:0d:93:40:51:18:04:32:1d:0b:
         22:44:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:20:05 2026 by rpki-client