Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS27837.roa
File:                     AS27837.roa (raw, json)
Hash identifier:          PaY5cikjmpxpUT+2LPLjVWC2vELBxjSrEFW5T8Ub6mA=
Subject key identifier:   9B:25:50:49:1E:F3:55:A1:41:F5:7E:29:25:BE:14:78:9B:FD:4D:C8
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       784B25DA41791AFC580DA869287E27969CC03AFE
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS27837.roa
Signing time:             Thu 04 Jun 2026 04:40:02 +0000
ROA not before:           Thu 04 Jun 2026 04:35:02 +0000
ROA not after:            Thu 03 Jun 2027 04:40:02 +0000
asID:                     27837
IP address blocks:        190.90.40.0/21 maxlen: 24
                          190.90.48.0/22 maxlen: 24
                          190.90.65.0/24 maxlen: 24
                          190.90.66.0/24 maxlen: 24
                          190.90.87.0/24 maxlen: 24
                          190.90.122.0/23 maxlen: 24
                          190.90.124.0/24 maxlen: 24
                          190.90.134.0/23 maxlen: 24
                          190.90.195.0/24 maxlen: 24
                          190.90.196.0/23 maxlen: 24
                          190.90.228.0/24 maxlen: 24
                          190.90.240.0/24 maxlen: 24
                          190.90.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 05:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4b:25:da:41:79:1a:fc:58:0d:a8:69:28:7e:27:96:9c:c0:3a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun  4 04:35:02 2026 GMT
            Not After : Jun  3 04:40:02 2027 GMT
        Subject: CN=9B2550491EF355A141F57E2925BE14789BFD4DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:ea:ff:fb:fa:06:c5:0a:17:14:42:16:09:
                    b0:b6:71:16:c5:ba:4d:9a:cc:91:70:d4:c3:33:c0:
                    46:9d:5b:59:29:0f:3f:4f:8c:5e:82:55:f2:2b:7c:
                    9a:a0:9d:ac:8a:03:f8:d6:63:2f:bd:f5:5c:ae:28:
                    c2:c7:1d:d4:88:e5:1e:72:03:36:a8:4b:55:b8:e0:
                    e9:fa:10:e1:d3:50:ce:a9:22:03:0c:81:12:64:76:
                    4e:af:5e:46:ca:e3:e6:7e:6c:ed:13:7d:43:8c:b0:
                    f4:2b:fb:b3:97:f5:ee:34:25:92:ee:60:9f:f0:cc:
                    d8:b6:3d:5d:3d:58:fd:e1:f8:17:0b:cc:8e:44:4c:
                    ed:14:5f:f5:77:d9:1c:da:90:fe:25:2f:91:39:cd:
                    4f:a4:4e:3c:ec:db:96:e7:17:ce:80:ff:38:e9:92:
                    75:6b:eb:96:b3:1f:21:44:26:cb:dc:a3:6b:01:fe:
                    af:59:e2:9a:7e:37:44:d3:d4:fb:62:1f:fb:eb:1c:
                    87:16:30:08:2c:22:a7:af:56:8c:3f:56:d9:09:1b:
                    52:48:e3:16:80:eb:8d:0c:cd:0b:81:4e:ab:b4:28:
                    33:b8:aa:23:8d:a0:02:70:18:79:9f:c6:6e:a8:f3:
                    08:ce:26:26:ee:f0:e9:2d:e2:72:ba:a8:38:55:f5:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:50:49:1E:F3:55:A1:41:F5:7E:29:25:BE:14:78:9B:FD:4D:C8
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS27837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.40.0-190.90.51.255
                  190.90.65.0-190.90.66.255
                  190.90.87.0/24
                  190.90.122.0-190.90.124.255
                  190.90.134.0/23
                  190.90.195.0-190.90.197.255
                  190.90.228.0/24
                  190.90.240.0/24
                  190.90.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:7c:84:da:1d:b8:ac:82:00:e1:39:d0:f2:14:d3:65:38:
         0e:86:27:64:cc:8a:df:13:d8:08:a0:70:38:ad:78:73:3d:06:
         19:66:03:f2:59:52:6e:fb:03:96:67:45:37:6b:02:9f:38:20:
         7f:2b:5e:39:ce:93:b9:c2:03:ef:dc:16:f0:c4:19:86:49:3b:
         80:d8:d7:2b:fc:2b:74:60:86:85:fd:68:92:ed:f2:08:6c:25:
         fc:b3:b7:0a:f5:1e:54:58:80:67:4a:48:b8:37:cf:a2:aa:99:
         87:83:87:6e:11:32:5c:25:20:60:3c:43:7e:60:e8:5c:e0:b1:
         c4:1a:69:29:4c:11:81:55:59:d0:85:26:30:b5:4a:a0:ad:5a:
         bf:cc:9c:31:76:0c:c2:f5:c7:c5:bc:85:ed:cb:af:11:32:6a:
         ff:6a:92:c4:f3:54:28:f3:09:a8:49:8d:8c:b9:1c:2d:d7:a4:
         32:1e:17:fd:6d:58:07:be:b3:4a:3e:c0:5e:25:ea:a5:45:5b:
         83:0d:5c:60:b2:c9:38:4f:8e:51:3c:c5:86:3c:c0:0c:ee:65:
         74:52:29:6f:1a:5b:23:e0:3e:17:a3:38:12:3e:d0:a7:e9:c9:
         df:79:a0:a2:54:f0:5c:25:72:60:9f:50:36:ab:3e:de:cc:3c:
         13:96:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 00:00:21 2026 by rpki-client