Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27813.roa
File:                     AS27813.roa (raw, json)
Hash identifier:          mlUnpKczEOz8dbOJH3FcbMkb/wnku/Dpg81Vk1SxggY=
Subject key identifier:   8C:80:9F:1D:0D:60:C7:78:7A:7A:72:3E:70:AF:1C:F9:9F:C8:AA:BA
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       5F4BFE24B48D95E5301C18B156E3AB9EA5476C9E
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27813.roa
Signing time:             Tue 05 Mar 2024 18:07:58 +0000
ROA not before:           Tue 05 Mar 2024 18:02:58 +0000
ROA not after:            Tue 04 Mar 2025 18:07:58 +0000
asID:                     27813
IP address blocks:        201.254.236.0/24 maxlen: 24
                          201.254.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4b:fe:24:b4:8d:95:e5:30:1c:18:b1:56:e3:ab:9e:a5:47:6c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:58 2024 GMT
            Not After : Mar  4 18:07:58 2025 GMT
        Subject: CN=8C809F1D0D60C7787A7A723E70AF1CF99FC8AABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f4:31:7c:15:d1:2d:9e:52:2d:9c:7f:6e:90:
                    63:25:40:a3:07:43:99:4d:8e:20:ba:1a:01:a1:73:
                    b4:df:66:01:95:8a:c9:8d:ef:5c:22:d8:76:6d:c4:
                    30:31:29:53:3f:49:25:44:53:30:19:63:f0:c6:81:
                    5e:f4:51:31:5e:0e:fe:47:ba:48:55:46:a7:2d:16:
                    09:3f:3e:c0:96:2d:52:55:ad:c0:02:43:a1:e3:94:
                    bc:08:39:cd:06:41:52:e8:dd:a2:e9:61:87:99:30:
                    a7:65:16:08:ec:24:79:92:ff:90:56:25:75:ba:52:
                    2a:2b:a7:15:cc:54:e8:8a:4e:4e:8e:5f:91:a1:40:
                    3b:dd:05:52:fa:77:96:53:4a:53:68:24:1e:92:e8:
                    93:ef:9a:e6:c7:a2:46:f7:3c:de:33:95:f7:4a:a7:
                    dc:82:fc:62:27:c5:a7:62:44:3b:f3:e1:05:18:a7:
                    79:dd:f8:8b:d0:f5:82:7e:1f:1c:8c:12:88:95:47:
                    b8:74:68:31:27:9d:6f:bc:9e:34:22:2d:31:76:1f:
                    15:ef:9f:7a:30:90:6d:e4:f6:e6:6a:b4:94:48:80:
                    32:59:de:94:d4:ab:61:66:27:c7:50:cf:a7:e5:ff:
                    8b:6a:06:7c:9e:ab:59:f1:55:9e:38:d1:24:11:05:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:80:9F:1D:0D:60:C7:78:7A:7A:72:3E:70:AF:1C:F9:9F:C8:AA:BA
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.254.236.0/24
                  201.254.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e8:30:28:0b:a6:30:32:05:33:cc:9a:f6:e4:ef:b5:51:73:
         0a:37:fe:85:be:63:5b:c3:91:4c:1e:04:97:7d:67:64:fe:d5:
         51:a1:fb:8c:b7:b5:f2:bb:cc:f8:82:ad:4d:09:d7:a8:6c:b2:
         b8:00:8e:e0:65:c2:bf:98:ee:21:f4:9f:1a:5d:ee:30:e2:72:
         bb:d1:1e:75:e2:9e:19:cd:83:d2:b5:64:ad:8b:9a:fb:ef:16:
         5b:c8:7f:1d:b0:96:46:61:3d:a5:98:dc:5e:71:26:c6:cc:93:
         3f:ad:97:58:46:23:07:35:0c:03:c6:b3:1b:a1:4f:f5:0f:05:
         4d:d0:81:50:63:58:d7:0b:1a:c7:b3:76:33:40:bc:3b:c0:99:
         53:01:1d:84:74:9a:e7:f7:de:9e:69:bf:bc:68:25:45:55:29:
         53:ac:90:01:e2:7a:e8:16:e3:8b:3e:9d:d3:de:41:4b:a5:a0:
         f6:bd:e8:6f:b4:18:ac:c6:28:1b:18:a7:e0:db:7a:b5:ff:46:
         23:52:b4:b1:b0:fd:de:37:e0:9c:1c:e2:7e:ea:62:d5:d9:0f:
         d6:e0:13:08:11:c2:b4:04:39:e8:13:20:41:05:cb:1f:73:06:
         2c:f9:74:e5:ee:18:90:cd:ce:4b:2e:da:fc:f4:76:b6:16:ad:
         43:0f:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:57:55 2024 by rpki-client on console-fra.rpki-client.org