Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27997.roa
File:                     AS27997.roa (raw, json)
Hash identifier:          DL3Ux1YqNfbqsN3Ih5QlD4TBz4wnWXiwdfarbixeqkw=
Subject key identifier:   67:09:BF:D9:08:20:29:69:A6:21:0A:7C:A7:3E:FC:3D:EB:5D:0A:64
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       76CF393C25735468D76A70F735520F751203BA87
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27997.roa
Signing time:             Tue 04 Feb 2025 18:13:38 +0000
ROA not before:           Tue 04 Feb 2025 18:08:38 +0000
ROA not after:            Tue 03 Feb 2026 18:13:38 +0000
asID:                     27997
IP address blocks:        186.56.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cf:39:3c:25:73:54:68:d7:6a:70:f7:35:52:0f:75:12:03:ba:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:38 2025 GMT
            Not After : Feb  3 18:13:38 2026 GMT
        Subject: CN=6709BFD908202969A6210A7CA73EFC3DEB5D0A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:62:25:cf:e0:08:c2:4a:61:18:e0:d4:9c:
                    56:83:5a:ce:98:28:dc:0d:d9:dd:1c:42:b6:0b:d3:
                    46:17:fa:bd:8b:8f:b9:77:9c:00:1d:b0:34:1c:cf:
                    f2:a5:17:47:4b:5a:66:eb:d1:80:de:a7:81:33:4f:
                    7d:cb:c5:06:4a:bb:cb:4d:be:24:89:c2:67:d6:25:
                    96:fe:b7:fb:bc:58:f5:8d:42:ab:8c:d6:74:cc:4f:
                    42:27:78:ef:1f:b8:39:c9:e7:b9:5f:b9:86:56:cc:
                    48:c6:c1:46:e3:a3:64:b7:a3:d4:da:39:3e:b1:b0:
                    aa:9e:91:b8:18:af:47:0e:66:f2:9e:8b:c4:19:52:
                    61:b1:40:3f:24:fa:b5:6c:70:90:e8:b8:d0:65:72:
                    20:36:8c:27:11:b3:3e:a0:79:f7:69:65:96:88:59:
                    9d:1f:7d:89:6d:4e:98:3a:1d:18:56:17:97:58:ee:
                    da:cc:3d:03:92:e6:7a:88:cc:46:17:f8:1a:41:e4:
                    3f:b5:6b:44:4b:d4:05:0a:93:23:59:23:1e:82:9c:
                    14:1e:b6:87:6e:37:f4:54:37:f0:d6:57:d4:09:3c:
                    ee:0a:e2:15:54:73:d9:c7:ca:53:17:91:be:e0:e0:
                    22:67:96:66:a5:2e:9b:5f:cc:ac:53:88:c1:a5:db:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:BF:D9:08:20:29:69:A6:21:0A:7C:A7:3E:FC:3D:EB:5D:0A:64
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:aa:99:8e:a2:5d:f1:6f:e9:df:d5:a3:01:2e:30:2e:56:
         ed:ec:3c:6d:73:5d:bf:bd:9b:1f:ae:d0:b8:e3:29:b6:74:4d:
         02:de:9a:18:34:a3:f0:fd:9b:5e:81:9e:96:40:ad:df:c1:a3:
         d5:ba:8c:76:57:42:fa:db:a6:6f:a5:6a:bc:71:f0:7c:64:31:
         94:51:54:f7:b7:33:c7:48:b8:d8:36:72:3f:dc:fa:b0:c1:8b:
         4f:67:31:8e:6e:71:26:b4:cc:0c:22:d8:e0:06:c9:d8:bc:bc:
         f0:e4:94:ff:84:fc:06:a7:e7:23:d9:b9:63:9e:7a:3b:e9:f8:
         2c:f3:40:ca:4c:98:f0:76:3a:74:b5:9a:86:50:b4:95:d9:a2:
         21:26:61:bd:60:15:57:56:7c:3b:40:f0:18:e0:39:72:2a:9a:
         27:33:e6:79:53:2f:a2:28:5b:e2:71:45:6c:ef:7c:64:72:f9:
         d3:9a:03:db:2c:93:d0:ef:c7:a2:6c:b9:02:a2:94:c2:64:06:
         7f:79:55:53:82:18:de:4c:ec:96:e4:a8:fc:c3:99:99:e1:42:
         fd:70:bc:90:ef:ae:45:71:ea:1f:d3:a5:24:d9:f6:9b:52:ee:
         6c:ac:79:8b:6b:f7:ab:50:f8:67:7c:f6:7f:55:1f:57:52:17:
         13:f9:32:8e
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUds85PCVzVGjXanD3NVIPdRIDuocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNTAyMDQxODA4MzhaFw0yNjAyMDMxODEzMzhaMDMxMTAvBgNV
BAMTKDY3MDlCRkQ5MDgyMDI5NjlBNjIxMEE3Q0E3M0VGQzNERUI1RDBBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eGIlz+AIwkphGODUnFaDWs6Y
KNwN2d0cQrYL00YX+r2Lj7l3nAAdsDQcz/KlF0dLWmbr0YDep4EzT33LxQZKu8tN
viSJwmfWJZb+t/u8WPWNQquM1nTMT0IneO8fuDnJ57lfuYZWzEjGwUbjo2S3o9Ta
OT6xsKqekbgYr0cOZvKei8QZUmGxQD8k+rVscJDouNBlciA2jCcRsz6gefdpZZaI
WZ0ffYltTpg6HRhWF5dY7trMPQOS5nqIzEYX+BpB5D+1a0RL1AUKkyNZIx6CnBQe
toduN/RUN/DWV9QJPO4K4hVUc9nHylMXkb7g4CJnlmalLptfzKxTiMGl20jTAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUZwm/2QggKWmmIQp8pz78PetdCmQwHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNzk5Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALo4ZjAN
BgkqhkiG9w0BAQsFAAOCAQEAKjaqmY6iXfFv6d/VowEuMC5W7ew8bXNdv72bH67Q
uOMptnRNAt6aGDSj8P2bXoGelkCt38Gj1bqMdldC+tumb6VqvHHwfGQxlFFU97cz
x0i42DZyP9z6sMGLT2cxjm5xJrTMDCLY4AbJ2Ly88OSU/4T8BqfnI9m5Y556O+n4
LPNAykyY8HY6dLWahlC0ldmiISZhvWAVV1Z8O0DwGOA5ciqaJzPmeVMvoihb4nFF
bO98ZHL505oD2yyT0O/Homy5AqKUwmQGf3lVU4IY3kzsluSo/MOZmeFC/XC8kO+u
RXHqH9OlJNn2m1LubKx5i2v3q1D4Z3z2f1UfV1IXE/kyjg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:11 2025 by rpki-client