Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27927.roa
File:                     AS27927.roa (raw, json)
Hash identifier:          +PfD5jHRBzM8VRJ0Y/VMJL621UbpO5NRJaaudCnSLyE=
Subject key identifier:   6D:CE:BA:71:D1:59:7F:74:5C:4A:8E:0B:C3:9C:ED:05:1F:46:2F:8C
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       7F04B698C576AD0286DEB0CB54962C2382FC2BE2
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27927.roa
Signing time:             Tue 05 Mar 2024 18:07:58 +0000
ROA not before:           Tue 05 Mar 2024 18:02:58 +0000
ROA not after:            Tue 04 Mar 2025 18:07:58 +0000
asID:                     27927
IP address blocks:        179.40.100.0/22 maxlen: 24
                          179.40.104.0/24 maxlen: 24
                          179.40.105.0/24 maxlen: 24
                          179.40.106.0/24 maxlen: 24
                          201.251.13.0/24 maxlen: 24
                          201.251.14.0/23 maxlen: 24
                          201.251.16.0/23 maxlen: 24
                          201.251.20.0/24 maxlen: 24
                          201.251.24.0/24 maxlen: 24
                          201.251.26.0/23 maxlen: 24
                          201.251.28.0/24 maxlen: 24
                          201.251.32.0/23 maxlen: 24
                          201.251.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:04:b6:98:c5:76:ad:02:86:de:b0:cb:54:96:2c:23:82:fc:2b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:58 2024 GMT
            Not After : Mar  4 18:07:58 2025 GMT
        Subject: CN=6DCEBA71D1597F745C4A8E0BC39CED051F462F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:e9:d3:01:74:79:e8:82:c9:0c:d0:59:b6:
                    63:9e:fd:fc:3b:f6:ac:ed:ca:bf:98:e7:4f:66:d9:
                    b6:18:83:5a:80:d0:b8:79:e3:ec:06:72:b6:d6:3e:
                    d3:e6:fc:fe:59:64:59:2d:e3:7c:17:d9:92:c5:45:
                    51:74:a7:4b:5e:86:b5:af:26:81:6f:a6:7e:c4:f6:
                    9a:ca:bf:74:0e:91:79:57:8d:7c:36:3e:e8:ee:25:
                    d4:70:ed:96:de:50:24:7e:5d:74:2b:ee:0d:9e:5d:
                    87:01:57:64:38:b1:65:72:48:b1:57:48:ab:30:88:
                    2a:b6:57:fa:5d:6e:5e:72:40:70:54:c2:50:06:88:
                    45:a9:11:5e:04:e4:64:85:c4:65:86:94:69:7c:e3:
                    52:f0:66:f9:88:59:2e:40:77:a3:2e:c7:eb:20:f8:
                    a5:61:e7:84:21:0b:96:a7:08:49:22:c8:2a:01:4d:
                    c1:31:e4:17:d9:ea:26:9b:a5:88:c6:86:ff:9f:86:
                    0a:9f:30:77:ea:d3:4c:26:50:fa:c4:67:b5:70:bb:
                    1b:8c:b1:0b:ab:e5:a0:ed:c3:68:76:d7:b5:df:52:
                    8e:1d:79:8a:97:39:a8:5e:0f:ac:37:45:9f:20:66:
                    d1:d3:80:1a:fe:6d:82:df:00:a9:6a:bf:3f:f3:f1:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CE:BA:71:D1:59:7F:74:5C:4A:8E:0B:C3:9C:ED:05:1F:46:2F:8C
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27927.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.100.0-179.40.106.255
                  201.251.13.0-201.251.17.255
                  201.251.20.0/24
                  201.251.24.0/24
                  201.251.26.0-201.251.28.255
                  201.251.32.0-201.251.34.255

    Signature Algorithm: sha256WithRSAEncryption
         bf:df:96:96:3b:a1:6d:ef:57:a8:4b:ee:51:03:54:a4:b1:c8:
         ef:c7:8e:95:6e:51:d0:35:da:f2:00:da:96:1e:2e:66:04:f9:
         57:37:43:45:d7:03:d4:e3:12:c2:28:43:08:ed:e5:b0:db:53:
         84:90:aa:6f:4f:bd:6f:dc:be:d0:ab:e6:f7:4e:6f:96:46:94:
         c0:89:9e:5a:bd:2d:4e:17:5d:74:46:18:3a:5d:bf:d1:ef:9d:
         2a:f8:08:19:4e:32:e0:f5:af:bf:a7:3f:ef:4b:07:a0:fe:7c:
         af:3d:97:de:fe:63:1b:a9:c5:11:a9:34:6d:57:20:02:b9:c8:
         91:a9:c4:04:3c:ed:61:2d:37:45:45:de:44:ae:d0:cf:9f:dc:
         37:a0:79:42:41:9e:d6:ff:b1:57:35:b6:07:91:8f:a7:77:b7:
         57:14:2c:f0:e6:0f:01:ab:68:ac:6a:24:e4:2f:88:c3:8d:f0:
         a9:4c:06:67:63:35:ac:ed:c6:e0:85:f9:59:70:e7:24:38:48:
         7c:22:dd:98:77:59:fe:01:fb:5e:d6:53:0d:bc:fd:ec:76:26:
         2c:c8:7a:a0:63:c2:bd:58:75:1f:6e:82:67:13:2f:93:0a:83:
         b5:39:0a:b6:78:8b:5d:7b:33:ff:bb:72:16:ce:b7:09:24:b7:
         91:ab:d3:9e
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIUfwS2mMV2rQKG3rDLVJYsI4L8K+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNDAzMDUxODAyNThaFw0yNTAzMDQxODA3NThaMDMxMTAvBgNV
BAMTKDZEQ0VCQTcxRDE1OTdGNzQ1QzRBOEUwQkMzOUNFRDA1MUY0NjJGOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6h+nTAXR56ILJDNBZtmOe/fw7
9qztyr+Y509m2bYYg1qA0Lh54+wGcrbWPtPm/P5ZZFkt43wX2ZLFRVF0p0tehrWv
JoFvpn7E9prKv3QOkXlXjXw2PujuJdRw7ZbeUCR+XXQr7g2eXYcBV2Q4sWVySLFX
SKswiCq2V/pdbl5yQHBUwlAGiEWpEV4E5GSFxGWGlGl841LwZvmIWS5Ad6Mux+sg
+KVh54QhC5anCEkiyCoBTcEx5BfZ6iabpYjGhv+fhgqfMHfq00wmUPrEZ7VwuxuM
sQur5aDtw2h217XfUo4deYqXOaheD6w3RZ8gZtHTgBr+bYLfAKlqvz/z8VE1AgMB
AAGjggLWMIIC0jAdBgNVHQ4EFgQUbc66cdFZf3RcSo4Lw5ztBR9GL4wwHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNzkyNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBdBggrBgEFBQcBBwEB/wROMEwwSgQCAAEwRDAMAwQCsyhk
AwQAsyhqMAwDBADJ+w0DBAHJ+xADBADJ+xQDBADJ+xgwDAMEAcn7GgMEAMn7HDAM
AwQFyfsgAwQAyfsiMA0GCSqGSIb3DQEBCwUAA4IBAQC/35aWO6Ft71eoS+5RA1Sk
scjvx46VblHQNdryANqWHi5mBPlXN0NF1wPU4xLCKEMI7eWw21OEkKpvT71v3L7Q
q+b3Tm+WRpTAiZ5avS1OF110Rhg6Xb/R750q+AgZTjLg9a+/pz/vSweg/nyvPZfe
/mMbqcURqTRtVyACuciRqcQEPO1hLTdFRd5ErtDPn9w3oHlCQZ7W/7FXNbYHkY+n
d7dXFCzw5g8Bq2isaiTkL4jDjfCpTAZnYzWs7cbghflZcOckOEh8It2Yd1n+Afte
1lMNvP3sdiYsyHqgY8K9WHUfboJnEy+TCoO1OQq2eItdezP/u3IWzrcJJLeRq9Oe
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:30 2024 by rpki-client on console-fra.rpki-client.org