Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/32372e35302e31322e302f32322d3234203d3e20323634383235.roa
File:                     32372e35302e31322e302f32322d3234203d3e20323634383235.roa (raw, json)
Hash identifier:          WsysQZm1Rvg2S9FpHDMH9r2v+RBC22p2JGzhBmtJizc=
Subject key identifier:   EB:16:06:9E:B1:5A:B5:F8:AF:EB:17:35:F1:BB:EC:70:C1:1E:FD:7D
Certificate issuer:       /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial:       55D9522BB6EE6A0166E88F9808567BE12B8F5BDB
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/32372e35302e31322e302f32322d3234203d3e20323634383235.roa
Signing time:             Tue 04 Feb 2025 18:45:25 +0000
ROA not before:           Tue 04 Feb 2025 18:40:25 +0000
ROA not after:            Tue 03 Feb 2026 18:45:25 +0000
asID:                     264825
IP address blocks:        27.50.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d9:52:2b:b6:ee:6a:01:66:e8:8f:98:08:56:7b:e1:2b:8f:5b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
        Validity
            Not Before: Feb  4 18:40:25 2025 GMT
            Not After : Feb  3 18:45:25 2026 GMT
        Subject: CN=EB16069EB15AB5F8AFEB1735F1BBEC70C11EFD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:0e:31:89:12:ff:dd:52:91:be:fa:66:53:
                    8e:a3:4b:72:04:0e:e0:14:da:85:8e:52:17:ff:19:
                    70:ef:9f:0f:b0:ad:5b:6c:ef:28:f6:85:90:d4:b0:
                    1d:1d:d6:3f:49:2c:1f:0b:de:80:92:ed:97:59:32:
                    3d:a2:5e:31:7f:b3:16:99:8c:6c:21:dd:0e:38:cf:
                    5f:67:f4:a7:0c:f9:b1:3a:47:d0:26:70:b5:c4:a5:
                    f0:0a:f4:78:d2:c5:b6:03:ac:3b:dd:a6:98:77:64:
                    73:63:38:c7:d9:2d:f7:b0:5a:ec:5e:12:5d:fc:67:
                    e4:0c:7d:6c:1c:84:0d:7b:54:86:08:61:c7:ea:c3:
                    d3:89:05:f3:28:97:37:78:b4:a8:bb:2b:d7:c6:3b:
                    ec:b2:06:15:a6:18:10:a7:90:d0:38:8e:55:18:02:
                    4b:41:cc:12:01:23:34:b1:ff:1f:79:16:af:34:85:
                    ac:b9:e3:80:c6:60:6b:e5:e3:34:69:a8:08:45:a6:
                    4c:36:76:58:bf:74:0a:66:b5:b4:60:eb:56:86:f7:
                    c7:e3:cb:71:42:d7:82:4f:0d:28:be:be:72:d1:d5:
                    19:30:55:54:9b:05:ea:81:33:6b:a7:f1:85:a0:73:
                    79:79:2d:00:65:2a:bc:42:3f:68:36:89:40:c9:2c:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:16:06:9E:B1:5A:B5:F8:AF:EB:17:35:F1:BB:EC:70:C1:1E:FD:7D
            X509v3 Authority Key Identifier:
                keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/32372e35302e31322e302f32322d3234203d3e20323634383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:1b:41:70:97:1d:7e:33:64:fd:3f:46:a8:18:34:fb:03:
         fc:3f:6f:e7:ee:10:e3:12:8c:3e:9a:fa:14:f5:7b:ba:b7:7c:
         d0:d0:c5:8f:af:5a:a5:34:b3:4b:58:d9:27:62:bd:8b:7e:9f:
         64:d1:69:4f:1c:93:20:32:72:e8:e0:b3:a3:7f:fc:9a:8c:a3:
         1b:dd:7f:2e:55:8c:f1:73:cc:da:ae:13:49:03:00:38:98:56:
         67:eb:db:14:27:d7:91:41:ad:79:b3:74:2e:a3:be:07:46:8f:
         28:a0:bc:2a:d5:7a:e5:c6:42:f2:c1:ea:37:6e:ee:1e:c6:04:
         01:4a:52:4f:38:bc:5b:59:5e:57:af:5f:8c:6a:c4:33:61:23:
         18:a8:02:22:45:4a:b4:5a:b2:9f:09:fd:c8:e8:93:e0:4a:ff:
         58:4b:74:59:32:42:1d:5c:54:05:f5:f5:5b:e5:a0:d7:a4:5d:
         62:3f:65:fe:22:86:73:46:6a:cd:c6:2e:c3:14:ff:d2:c2:29:
         2d:63:fc:f1:20:da:b6:2e:e9:cf:87:bb:7d:c9:69:fb:2a:9e:
         cb:39:2f:50:c5:9b:34:22:e6:0e:d0:bd:e6:7f:75:db:6f:ba:
         33:ac:a6:b1:1d:21:5e:34:36:b6:59:6e:ce:12:e0:69:84:af:
         a2:89:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:32:16 2025 by rpki-client