Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa
File:                     AS27754.roa (raw, json)
Hash identifier:          EAo2vg84PYGIqR61Xl8FpU6+ypI9hdyiooqMKrJl1Zs=
Subject key identifier:   E3:48:65:EE:3A:0C:B0:89:AC:12:5E:19:D0:CD:7C:1F:81:00:3C:5D
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       5B468CFA504321B91BC8EB988210D1C9CD61CBAE
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa
Signing time:             Tue 05 Mar 2024 18:07:54 +0000
ROA not before:           Tue 05 Mar 2024 18:02:54 +0000
ROA not after:            Tue 04 Mar 2025 18:07:54 +0000
asID:                     27754
IP address blocks:        186.38.89.0/24 maxlen: 24
                          186.38.90.0/23 maxlen: 24
                          186.38.92.0/24 maxlen: 24
                          186.38.108.0/24 maxlen: 24
                          186.38.110.0/24 maxlen: 24
                          186.56.39.0/24 maxlen: 24
                          186.56.50.0/24 maxlen: 24
                          201.251.73.0/24 maxlen: 24
                          201.251.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:46:8c:fa:50:43:21:b9:1b:c8:eb:98:82:10:d1:c9:cd:61:cb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:54 2024 GMT
            Not After : Mar  4 18:07:54 2025 GMT
        Subject: CN=E34865EE3A0CB089AC125E19D0CD7C1F81003C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:d0:38:13:75:39:08:1b:fb:c5:72:3d:3d:
                    11:13:a2:35:5b:6b:f2:bc:b0:66:2b:ac:0e:1f:53:
                    06:3b:4d:8d:2f:eb:25:94:83:f9:47:e6:b8:6f:53:
                    62:de:0d:c6:e6:a7:c2:95:0a:ce:a3:39:3a:c0:75:
                    89:7d:85:e5:3c:c7:67:75:d5:ce:13:b2:cb:6b:57:
                    cf:f2:58:4b:1f:81:33:cd:3f:59:34:9d:e9:f9:3e:
                    d7:14:d7:8c:59:25:eb:04:80:60:93:b5:8c:53:e4:
                    02:0b:74:01:eb:e9:a5:80:e5:e6:9c:4a:25:47:f3:
                    4b:a9:33:67:de:79:48:f6:ac:1d:60:0b:30:02:11:
                    03:5b:55:04:06:68:be:a5:c7:9f:7b:5f:44:15:be:
                    5b:c3:28:55:6b:3b:40:b9:5b:f9:7c:ba:d5:6a:f4:
                    76:f2:d3:70:19:91:ab:7d:40:9d:05:38:a0:f0:cb:
                    7f:89:aa:bb:53:8a:37:90:26:d7:12:07:e2:fa:41:
                    02:e8:1d:1f:69:11:f2:fc:9c:cf:70:b8:44:cd:1b:
                    b0:0f:15:8d:3a:01:8e:6a:ca:e3:2b:3a:23:c6:6c:
                    d5:63:5b:19:58:46:66:14:53:ee:6e:b6:dc:04:fc:
                    ea:1e:11:1d:c0:09:58:dc:a8:be:ce:43:d6:49:27:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:48:65:EE:3A:0C:B0:89:AC:12:5E:19:D0:CD:7C:1F:81:00:3C:5D
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.89.0-186.38.92.255
                  186.38.108.0/24
                  186.38.110.0/24
                  186.56.39.0/24
                  186.56.50.0/24
                  201.251.73.0/24
                  201.251.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:00:fd:15:2e:97:34:0f:53:47:92:37:ff:a9:8a:de:a0:35:
         fb:9f:54:35:20:d6:4a:5b:69:bd:9b:81:33:6b:85:86:71:9c:
         64:e4:d6:26:59:42:eb:8b:df:f6:3a:43:42:ae:43:24:05:bc:
         af:0e:be:3f:b4:51:83:e9:66:3f:80:26:cf:31:18:28:63:a1:
         65:50:ce:0f:66:8a:5d:91:35:82:bc:89:0b:0a:cc:c5:77:c3:
         63:23:a0:2d:c0:6a:fe:8c:f7:eb:7d:1d:f9:fa:e7:fa:21:59:
         d6:6b:db:a7:ff:05:ac:4d:08:1f:ba:48:d2:da:29:39:19:9b:
         a9:cc:43:0a:ee:74:32:bd:ed:3f:a6:54:23:ee:cf:5b:82:b9:
         75:13:63:e0:76:a2:16:e6:4b:8e:db:7e:56:31:e2:67:c4:e7:
         30:67:2b:d6:c3:30:3c:86:f0:ea:d7:c0:63:6c:b8:52:58:e1:
         3f:7e:6a:9a:25:89:d0:f4:6f:82:99:42:06:c2:37:6d:be:bf:
         e0:64:c1:ee:67:23:b4:7f:58:ff:82:7b:dc:fc:23:a3:d7:70:
         2f:7b:ae:7b:b2:69:5d:2d:47:d7:87:ff:15:c1:fe:0e:7b:23:
         ce:2e:4d:24:46:88:34:47:19:46:8b:69:00:a5:90:90:43:e8:
         b3:9e:9c:9d
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUW0aM+lBDIbkbyOuYghDRyc1hy64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNDAzMDUxODAyNTRaFw0yNTAzMDQxODA3NTRaMDMxMTAvBgNV
BAMTKEUzNDg2NUVFM0EwQ0IwODlBQzEyNUUxOUQwQ0Q3QzFGODEwMDNDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KtA4E3U5CBv7xXI9PRETojVb
a/K8sGYrrA4fUwY7TY0v6yWUg/lH5rhvU2LeDcbmp8KVCs6jOTrAdYl9heU8x2d1
1c4TsstrV8/yWEsfgTPNP1k0nen5PtcU14xZJesEgGCTtYxT5AILdAHr6aWA5eac
SiVH80upM2feeUj2rB1gCzACEQNbVQQGaL6lx597X0QVvlvDKFVrO0C5W/l8utVq
9Hby03AZkat9QJ0FOKDwy3+JqrtTijeQJtcSB+L6QQLoHR9pEfL8nM9wuETNG7AP
FY06AY5qyuMrOiPGbNVjWxlYRmYUU+5uttwE/OoeER3ACVjcqL7OQ9ZJJ8yDAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU40hl7joMsImsEl4Z0M18H4EAPF0wHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNzc1NC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMjAMAwQAuiZZ
AwQAuiZcAwQAuiZsAwQAuiZuAwQAujgnAwQAujgyAwQAyftJAwQAyfv5MA0GCSqG
SIb3DQEBCwUAA4IBAQAHAP0VLpc0D1NHkjf/qYreoDX7n1Q1INZKW2m9m4Eza4WG
cZxk5NYmWULri9/2OkNCrkMkBbyvDr4/tFGD6WY/gCbPMRgoY6FlUM4PZopdkTWC
vIkLCszFd8NjI6AtwGr+jPfrfR35+uf6IVnWa9un/wWsTQgfukjS2ik5GZupzEMK
7nQyve0/plQj7s9bgrl1E2PgdqIW5kuO235WMeJnxOcwZyvWwzA8hvDq18BjbLhS
WOE/fmqaJYnQ9G+CmUIGwjdtvr/gZMHuZyO0f1j/gnvc/COj13Ave657smldLUfX
h/8Vwf4OeyPOLk0kRog0RxlGi2kApZCQQ+iznpyd
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org