Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
File:                     AS27672.roa (raw, json)
Hash identifier:          hA1aq3FHGrVfsT2gbsrOP1KJTF6S1FCRobUHPxmfntE=
Subject key identifier:   01:51:CC:5C:41:C1:9C:4D:D1:0E:49:1B:BE:3D:9F:77:FE:70:70:CE
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7B4AC5B8C7EB2BDCE2C09F14E278FFAD5DEC6BAE
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
Signing time:             Tue 27 Aug 2024 11:15:01 +0000
ROA not before:           Tue 27 Aug 2024 11:10:01 +0000
ROA not after:            Tue 26 Aug 2025 11:15:01 +0000
asID:                     27672
IP address blocks:        177.224.176.0/21 maxlen: 21
                          200.77.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:c5:b8:c7:eb:2b:dc:e2:c0:9f:14:e2:78:ff:ad:5d:ec:6b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Aug 27 11:10:01 2024 GMT
            Not After : Aug 26 11:15:01 2025 GMT
        Subject: CN=0151CC5C41C19C4DD10E491BBE3D9F77FE7070CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ac:20:52:c5:76:d3:29:58:13:93:90:9b:a2:
                    1c:c5:19:1a:c5:e0:31:d0:d5:b1:1d:8f:0a:33:39:
                    c2:cc:fd:89:3d:df:57:13:9c:8f:be:e5:05:6c:4f:
                    95:ec:a1:43:90:4e:cd:2f:47:99:94:01:33:d5:92:
                    d1:7d:4e:38:0e:a6:72:4f:53:8c:f4:24:29:85:97:
                    44:f7:08:91:08:f1:a1:18:5f:c6:96:f8:7b:a8:96:
                    7f:a4:f7:55:b1:71:0c:f2:5a:6d:d1:13:b8:b9:6d:
                    73:f4:31:7e:26:72:09:ae:23:f9:9a:8f:0f:c0:a6:
                    5c:82:57:37:bc:f8:41:04:c8:97:f2:3a:fe:a2:18:
                    7e:34:77:10:fb:e7:84:3e:1c:42:d0:a4:02:ff:a7:
                    22:ba:2c:e9:a5:5b:02:05:38:dd:89:90:24:6c:a6:
                    d4:d0:e4:0e:0f:6c:62:34:ba:28:44:8c:95:ab:f9:
                    d6:1c:ff:4f:05:32:d7:af:da:26:32:f4:3d:1f:26:
                    d0:ca:f8:ef:ba:4e:6d:08:a9:58:6c:7f:5a:38:19:
                    cf:3c:cd:e2:9b:1f:36:a1:86:c9:74:30:5f:62:01:
                    6d:e1:62:2e:a8:51:d9:66:0c:4c:cd:9e:e9:90:58:
                    ed:4a:13:e2:28:92:f1:cf:07:2a:56:02:7d:e5:55:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:51:CC:5C:41:C1:9C:4D:D1:0E:49:1B:BE:3D:9F:77:FE:70:70:CE
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.224.176.0/21
                  200.77.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:42:19:fc:dd:5b:a3:c6:20:9f:88:36:b8:3e:c3:e6:3f:
         3c:35:1a:a2:06:1f:4c:b3:75:90:0d:1e:73:e9:4f:d6:57:6f:
         04:69:52:81:8c:65:00:e1:70:ab:2c:7e:b6:eb:4c:4f:dd:28:
         65:40:6e:5e:f2:5b:8b:76:2d:9f:6e:4a:e8:7a:56:d2:5f:d5:
         51:80:7e:a0:d6:12:bc:17:15:c9:13:43:7d:5a:07:63:0a:8b:
         33:11:c0:20:8f:cc:4b:5a:1d:cf:af:1f:ae:2d:e3:76:97:9e:
         e7:05:15:f3:92:06:cf:c9:de:16:10:a9:64:e5:38:6b:ad:72:
         a5:8e:40:ab:ec:b5:5a:64:72:78:b1:02:b6:18:4a:7e:ae:e8:
         8d:00:47:f7:b7:fd:a0:5d:c4:90:1f:fb:1d:ea:50:73:6b:36:
         92:d0:75:04:fd:d4:c6:31:ef:ad:05:cc:a7:44:4f:e9:08:1d:
         ca:24:43:b4:e9:2d:8d:a8:cb:0d:15:8c:38:f9:2a:91:7c:65:
         fd:63:2c:80:f2:75:db:17:15:b8:7a:8b:3e:ec:d2:59:6e:4c:
         2c:96:bb:23:7e:7b:1a:a9:1d:28:7f:01:5c:0e:91:8c:77:b1:
         c8:5d:37:fd:1a:58:8a:6e:9a:06:39:3a:d5:a9:a7:bd:db:fe:
         6e:14:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org