Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27948.roa
File:                     AS27948.roa (raw, json)
Hash identifier:          jscSh3mr/jbOZ++JvREfow/iVaEm8ncfT2kPSQNHV50=
Subject key identifier:   61:77:43:77:99:D1:43:84:AD:6F:DC:23:4A:AD:B0:12:14:25:56:2E
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       6ECEAF0E5FD3CD7C4E676DBC2283C69232A87B3B
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27948.roa
Signing time:             Thu 24 Jul 2025 17:40:00 +0000
ROA not before:           Thu 24 Jul 2025 17:35:00 +0000
ROA not after:            Thu 23 Jul 2026 17:40:00 +0000
asID:                     27948
IP address blocks:        181.113.172.0/24 maxlen: 24
                          181.113.175.0/24 maxlen: 24
                          181.113.192.0/24 maxlen: 24
                          181.196.0.0/22 maxlen: 22
                          181.211.208.0/21 maxlen: 22
                          181.211.248.0/22 maxlen: 22
                          181.211.251.0/24 maxlen: 24
                          186.178.0.0/16 maxlen: 24
                          186.178.56.0/23 maxlen: 24
                          186.178.58.0/23 maxlen: 24
                          186.178.60.0/23 maxlen: 24
                          186.178.62.0/23 maxlen: 24
                          186.178.216.0/24 maxlen: 24
                          186.178.217.0/24 maxlen: 24
                          186.178.218.0/24 maxlen: 24
                          186.178.219.0/24 maxlen: 24
                          190.214.36.0/23 maxlen: 23
                          190.214.76.0/22 maxlen: 22
                          190.214.216.0/24 maxlen: 24
                          200.107.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ce:af:0e:5f:d3:cd:7c:4e:67:6d:bc:22:83:c6:92:32:a8:7b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Jul 24 17:35:00 2025 GMT
            Not After : Jul 23 17:40:00 2026 GMT
        Subject: CN=6177437799D14384AD6FDC234AADB0121425562E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:ae:26:60:c1:99:60:3d:8d:34:06:cf:97:
                    a4:48:67:f8:90:af:83:95:5b:75:f1:39:3b:d1:3b:
                    11:4c:5d:ca:67:9e:f7:32:55:1e:da:c5:dd:6b:a1:
                    05:27:e3:ab:93:15:89:ab:ac:e7:2d:0c:0f:e1:ea:
                    c0:6f:2f:45:20:99:6b:4e:bc:c5:06:a2:19:6a:7d:
                    04:6c:36:19:52:2b:a6:02:74:e0:90:42:b3:95:b8:
                    78:99:e6:ea:dd:5a:66:9c:e9:85:7e:55:dd:c8:0c:
                    22:b1:9b:ec:c4:9e:3b:8d:e4:91:4e:43:69:3f:e8:
                    1e:ae:33:0e:53:94:26:0c:e0:02:b8:36:c7:9d:36:
                    24:23:36:32:14:c7:bb:26:4c:5c:6d:07:4b:76:33:
                    13:67:9e:6f:fc:f7:71:10:22:ca:49:db:42:6e:38:
                    97:17:7b:ac:68:45:c9:ec:0d:62:61:ac:70:2e:46:
                    b5:e1:4c:f2:4d:d5:44:5d:ca:c5:63:1b:cf:8c:fb:
                    94:9a:9e:70:a1:f0:49:af:bc:30:b2:83:34:31:2e:
                    9e:14:4b:28:32:b3:dc:bc:10:f7:96:77:04:3c:b3:
                    5b:6a:b9:91:dc:87:eb:db:aa:2d:d6:2c:4e:eb:9a:
                    26:75:4b:cd:0e:1a:d2:57:b7:e1:b2:87:97:da:f1:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:77:43:77:99:D1:43:84:AD:6F:DC:23:4A:AD:B0:12:14:25:56:2E
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27948.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.172.0/24
                  181.113.175.0/24
                  181.113.192.0/24
                  181.196.0.0/22
                  181.211.208.0/21
                  181.211.248.0/22
                  186.178.0.0/16
                  190.214.36.0/23
                  190.214.76.0/22
                  190.214.216.0/24
                  200.107.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:ed:ab:a6:96:40:98:0d:32:34:6a:24:32:b3:a9:93:93:
         da:45:c6:e9:6c:92:41:c4:ab:15:66:73:32:42:8a:67:60:db:
         73:03:2e:03:cf:39:2b:56:f9:24:c3:54:e8:e6:3d:02:e9:a2:
         f6:21:b7:2e:74:7e:3e:22:49:3e:db:6d:56:a9:e0:96:94:b3:
         9e:68:25:49:9a:50:54:f8:3c:5c:45:fd:ed:70:6e:f4:98:56:
         6c:25:9b:7c:cc:44:50:cd:e0:d4:47:dc:dd:ef:fd:f7:26:ed:
         89:11:2f:0f:da:98:b6:49:e0:02:36:43:cc:d8:a9:05:4e:26:
         62:28:4c:72:a0:47:50:c8:bc:fa:3f:ea:0a:f8:52:ea:6d:01:
         0b:e7:f5:11:e8:ba:5b:12:bb:a6:1c:33:4b:89:ea:b4:97:0f:
         cf:12:be:b0:e9:1f:7e:2c:d7:9d:14:5a:21:05:c5:9b:79:db:
         02:f5:d9:3a:13:25:4e:a3:1c:01:0e:64:0c:8f:c4:ba:0c:85:
         ac:bf:72:5e:2c:1a:2e:63:e5:c8:34:93:69:c8:3a:b0:bb:45:
         8e:16:63:2f:2c:ba:7f:3b:1e:54:f1:40:94:b8:85:37:3e:04:
         68:02:b7:4d:c6:6c:f9:e2:82:56:70:4f:0a:72:01:76:fb:f6:
         cb:0d:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:55:03 2025 by rpki-client