Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS27910.roa
File:                     AS27910.roa (raw, json)
Hash identifier:          s06MIajM3IVg5Z94+EI9589jPexQdhx3YbRAE5yiAiQ=
Subject key identifier:   EB:3F:AF:9F:CE:88:7E:98:0F:97:3A:ED:8B:D5:A9:DC:F3:18:50:9B
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       671BDDCF934AF6A67BE39BD3C06B26577362213B
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS27910.roa
Signing time:             Tue 30 Jul 2024 17:10:02 +0000
ROA not before:           Tue 30 Jul 2024 17:05:02 +0000
ROA not after:            Tue 29 Jul 2025 17:10:02 +0000
asID:                     27910
IP address blocks:        190.242.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1b:dd:cf:93:4a:f6:a6:7b:e3:9b:d3:c0:6b:26:57:73:62:21:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul 30 17:05:02 2024 GMT
            Not After : Jul 29 17:10:02 2025 GMT
        Subject: CN=EB3FAF9FCE887E980F973AED8BD5A9DCF318509B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:89:11:53:da:ef:6e:52:f5:05:f1:4a:9f:
                    bc:4e:cc:11:10:d8:c3:0b:06:fe:1f:bb:22:f7:a1:
                    a9:4c:43:12:b1:ef:d1:05:27:46:e2:7b:8b:e5:7c:
                    98:e0:8a:30:ce:61:77:23:4f:f7:18:e4:b1:1d:c5:
                    3e:da:d4:5f:1b:b0:fe:3c:9a:50:93:8d:fd:7e:14:
                    df:c5:6b:49:1e:a3:af:55:e5:56:ed:3c:7c:81:55:
                    ef:7f:5a:ee:f6:1e:b8:16:b5:7d:80:df:e8:68:0a:
                    c9:c5:6e:d0:fd:21:80:fa:1c:a1:98:62:9a:53:a0:
                    f1:93:b9:70:22:13:6f:36:40:ac:67:e2:6f:2d:ae:
                    56:89:8b:a2:20:b7:69:be:3e:b2:7b:30:c9:b1:8b:
                    69:a9:47:d7:87:cc:f1:29:d6:57:14:6d:1d:5b:e7:
                    ea:4e:e5:9a:e3:65:34:88:e3:ca:10:62:ae:8c:60:
                    cf:be:d6:11:82:1d:a1:4a:56:19:c1:5b:ce:5f:19:
                    9e:9a:a0:a1:55:fa:e2:1b:da:02:67:17:cb:79:ad:
                    f0:c8:a1:4a:13:69:2b:61:05:53:82:87:e8:6f:68:
                    64:90:b6:a2:dd:ee:cc:61:45:be:fd:82:36:4e:49:
                    72:6c:ec:3e:31:cb:7e:84:04:cb:e8:f3:0e:f7:9f:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3F:AF:9F:CE:88:7E:98:0F:97:3A:ED:8B:D5:A9:DC:F3:18:50:9B
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS27910.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:b0:38:5f:d0:97:93:f3:59:6a:dc:73:9a:79:2e:bb:16:
         15:33:84:e5:d9:46:46:88:cd:d6:3f:72:80:31:26:1a:13:82:
         55:11:a7:27:dd:76:43:63:9f:ab:3f:84:df:f2:cb:0b:5a:cc:
         43:67:ba:94:f8:dd:7d:e0:09:3b:9b:df:63:ba:fc:fa:8b:58:
         1c:7a:de:65:92:b5:f3:a3:73:25:30:ee:52:da:64:0d:de:12:
         40:94:2d:9e:3e:d5:a7:64:2f:8e:31:65:b2:65:57:b8:e0:3d:
         bb:c6:c8:e0:0c:24:e6:95:78:af:f1:d1:ab:27:39:f4:53:78:
         1c:0a:63:81:e1:7c:f3:20:74:6b:97:5c:79:48:29:eb:21:2a:
         fc:d5:bb:63:06:40:10:56:77:4c:a2:3b:35:92:b5:18:79:6d:
         7f:30:d1:ef:cb:8b:f7:32:7d:b5:01:52:e3:e2:93:00:50:1f:
         aa:73:5c:46:02:73:e6:1c:e2:82:2c:8e:f0:f9:0b:a8:ad:aa:
         9e:63:0f:f6:61:90:69:5e:5c:c2:96:77:f9:eb:13:c4:fa:e3:
         82:d9:97:6c:f3:c1:32:cf:35:f3:c4:a2:00:d1:af:35:48:0e:
         d8:40:dc:e6:9d:65:8e:a4:a7:0a:58:45:9f:8e:bc:38:fa:46:
         79:9d:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org