Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa
File:                     AS27754.roa (raw, json)
Hash identifier:          2ZF3moeZXMUgVg/ZA9dYPaAT/9NOhJ1vx5+FhHCL9EM=
Subject key identifier:   B5:6C:69:85:12:1E:25:9E:8B:E7:5E:02:C8:2C:85:F0:6E:08:A3:D5
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       01D7610349BF2B7E789CB079DA81171135AE365B
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa
Signing time:             Tue 04 Feb 2025 18:13:44 +0000
ROA not before:           Tue 04 Feb 2025 18:08:44 +0000
ROA not after:            Tue 03 Feb 2026 18:13:44 +0000
asID:                     27754
IP address blocks:        186.38.89.0/24 maxlen: 24
                          186.38.90.0/23 maxlen: 24
                          186.38.92.0/24 maxlen: 24
                          186.38.108.0/24 maxlen: 24
                          186.38.110.0/24 maxlen: 24
                          186.56.39.0/24 maxlen: 24
                          186.56.50.0/24 maxlen: 24
                          201.251.73.0/24 maxlen: 24
                          201.251.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d7:61:03:49:bf:2b:7e:78:9c:b0:79:da:81:17:11:35:ae:36:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:44 2025 GMT
            Not After : Feb  3 18:13:44 2026 GMT
        Subject: CN=B56C6985121E259E8BE75E02C82C85F06E08A3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:ff:af:2d:c0:74:5e:60:e3:b9:00:5d:ff:
                    92:3d:c9:47:58:61:7d:96:84:e9:01:6f:dd:2a:53:
                    18:a3:14:6d:9e:2a:78:c3:1d:23:ac:0f:43:2d:de:
                    9b:76:af:77:a2:ec:cb:7d:d9:84:8d:39:ea:64:78:
                    92:5d:95:eb:b7:23:55:90:49:3e:20:d7:aa:d3:75:
                    9c:1a:93:99:df:2e:95:31:6f:4f:3a:29:4e:53:fd:
                    0b:64:7f:e7:cb:de:7a:15:20:a5:1b:c7:eb:dc:35:
                    5e:1c:92:17:42:96:66:9e:35:de:7b:85:ae:79:49:
                    13:cb:63:cd:cf:be:ae:9f:b3:41:4e:db:28:67:ab:
                    a9:ee:3f:f7:88:f9:1e:3d:66:99:48:b0:b8:ab:6e:
                    97:1d:01:c1:e1:54:1a:6e:88:f5:a0:f3:42:70:12:
                    2b:f5:d5:0e:07:8d:11:23:a4:ae:eb:5b:e5:0d:59:
                    f8:c4:62:48:6e:b0:e1:aa:bf:0e:0b:51:4f:d3:26:
                    df:33:0f:00:01:52:a4:9e:99:3d:33:a6:86:50:92:
                    da:ea:f1:65:c4:0c:c6:be:3e:34:0f:60:cd:14:4e:
                    0b:34:71:5c:b9:f7:1d:c8:05:10:1f:19:42:ce:4d:
                    58:ad:ba:20:8f:fc:c8:98:15:6b:37:88:02:5e:91:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6C:69:85:12:1E:25:9E:8B:E7:5E:02:C8:2C:85:F0:6E:08:A3:D5
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.89.0-186.38.92.255
                  186.38.108.0/24
                  186.38.110.0/24
                  186.56.39.0/24
                  186.56.50.0/24
                  201.251.73.0/24
                  201.251.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:b8:67:d3:13:42:9b:47:dd:c3:57:e3:a0:ec:c2:68:a7:
         ec:b0:7e:10:32:87:0a:09:13:00:92:90:ae:5e:54:d3:d6:62:
         1b:a9:94:44:c0:7f:ac:ec:c0:43:08:fa:e2:6e:16:fc:df:68:
         5d:a3:c9:ad:78:dc:3c:df:85:9f:e5:2f:56:90:14:44:dc:a1:
         ca:fa:7d:53:9e:49:46:a8:c1:29:6c:fd:3c:f9:1c:4c:56:ee:
         ad:29:8f:00:d5:7f:0c:82:68:e6:4b:57:8a:f8:e0:00:ba:cf:
         d7:f2:b6:63:59:14:92:52:83:53:fe:a5:e3:8d:4e:94:03:31:
         c5:1d:af:78:eb:36:4e:9c:ca:cc:c7:5c:c4:11:24:20:84:3e:
         6e:5a:ad:9a:0a:e9:a2:4f:79:07:fd:63:54:4b:67:1e:de:79:
         da:33:40:a2:40:54:53:5b:8b:d0:e2:7b:f9:38:c8:e8:ab:1b:
         69:c9:37:ab:10:1e:35:5e:c7:23:1d:50:58:f8:c2:21:9c:1f:
         fc:dc:06:37:6c:ce:4f:49:a2:c8:66:d2:68:a8:1b:17:37:52:
         45:ba:cb:e6:1c:ee:ae:95:74:15:13:51:fb:5f:29:b4:4f:60:
         5d:cf:f0:bf:8d:5c:78:19:bb:3a:b5:92:e9:7f:99:eb:3f:f0:
         17:91:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:04 2025 by rpki-client