Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27730.roa
File:                     AS27730.roa (raw, json)
Hash identifier:          EY5If4a0tueQnNTKIlFVyNoY1F8+J6rIb50mzFL8kRE=
Subject key identifier:   F1:85:3C:98:BF:88:2C:B1:2A:02:B2:BB:89:F7:43:13:B3:7B:2D:9A
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       0D1D5C72966652692FF6B4D7E8E6BAAC7209B638
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27730.roa
Signing time:             Tue 04 Feb 2025 18:13:40 +0000
ROA not before:           Tue 04 Feb 2025 18:08:40 +0000
ROA not after:            Tue 03 Feb 2026 18:13:40 +0000
asID:                     27730
IP address blocks:        200.5.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1d:5c:72:96:66:52:69:2f:f6:b4:d7:e8:e6:ba:ac:72:09:b6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:40 2025 GMT
            Not After : Feb  3 18:13:40 2026 GMT
        Subject: CN=F1853C98BF882CB12A02B2BB89F74313B37B2D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:c1:6e:bc:71:f6:f3:26:14:f8:6b:5b:e2:
                    52:4e:7a:91:f5:30:75:1b:81:5e:a5:26:51:eb:d9:
                    41:4d:13:61:bc:8e:bd:c9:ec:8e:55:9e:eb:f1:79:
                    d9:3e:72:74:11:d9:56:58:16:f7:c3:46:a7:3d:64:
                    a7:e5:76:a7:5c:72:3c:87:c3:02:0a:ca:79:e4:16:
                    c7:31:bb:10:64:b4:85:15:b1:55:29:45:4b:30:3c:
                    fa:47:62:e3:35:2d:5e:ad:f4:55:cf:33:d7:16:c9:
                    ca:d0:d4:73:34:d8:23:ae:3a:82:0e:b1:c7:f5:b7:
                    33:39:71:86:be:94:9a:7d:9f:cd:53:0e:d0:6f:bb:
                    2c:fa:af:ba:a8:99:1b:1c:ff:46:bb:36:38:de:98:
                    51:d2:49:84:03:27:63:78:02:2b:92:69:01:85:e2:
                    06:1c:77:cd:75:b4:fb:f3:3c:5a:a6:6a:6f:cf:17:
                    f8:9e:13:f1:16:ab:be:69:e7:f3:ce:ee:bb:b3:f8:
                    26:61:c4:91:b4:18:60:2f:d0:db:48:cf:28:2c:93:
                    ba:c2:01:fd:e2:b0:03:87:2c:10:56:75:47:08:c4:
                    09:41:36:01:e1:43:b0:56:8e:ad:ed:fc:79:08:8f:
                    24:e7:7c:ea:81:8d:53:93:f0:0c:c9:c6:f6:e0:d4:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:85:3C:98:BF:88:2C:B1:2A:02:B2:BB:89:F7:43:13:B3:7B:2D:9A
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:78:9b:42:8b:a0:2b:ce:37:a1:71:6e:41:af:3a:27:40:
         47:60:6a:f5:af:58:38:70:38:ce:a4:cf:25:1f:e3:c7:80:ac:
         58:37:85:ec:67:27:fc:02:1c:86:20:ad:3a:38:9c:c5:59:00:
         1a:04:8c:5e:01:77:f2:c5:82:2b:2e:24:1e:00:a3:d3:0d:35:
         37:bc:61:45:6b:4d:7e:ec:6a:5d:f7:f7:ea:d9:57:d8:ad:05:
         18:ed:3f:51:5f:4d:45:06:46:ea:99:0e:79:68:c7:b2:3c:29:
         9b:dd:88:84:56:27:9a:d5:c7:1c:56:7c:d7:94:9c:6a:20:94:
         ea:73:25:b5:0c:2f:c5:2b:5b:3f:0d:2a:57:e4:89:6f:05:cf:
         35:6d:51:b6:87:18:75:a0:b9:95:6a:a4:62:f7:8e:0c:7e:18:
         bd:0b:8b:11:e4:6a:2c:dc:8a:f7:ce:6f:06:44:c1:09:6b:20:
         e5:b4:13:30:ab:24:ba:b3:c5:14:01:8c:74:54:e2:b1:9a:6a:
         af:b3:54:2f:31:5f:65:35:c9:e8:5e:57:f0:17:f6:36:9d:49:
         c0:74:20:5b:2c:e9:0f:4e:f3:46:2d:df:87:84:42:92:b4:6f:
         a6:fa:b4:94:ab:9d:ae:5e:17:8f:44:72:42:31:55:27:03:95:
         30:d3:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:04 2025 by rpki-client