Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27948.roa
File:                     AS27948.roa (raw, json)
Hash identifier:          4GzgJGBpXmWNxPsGDlFT/+r57INF7dcVyhAywn/1LKQ=
Subject key identifier:   4B:35:E3:BB:DE:9E:3B:C8:E4:3B:51:94:77:E5:EE:FE:75:A0:89:EE
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       6D83BA9D6C4BFB6776792A3D15DB2E0F6C339753
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27948.roa
Signing time:             Tue 05 Mar 2024 17:44:49 +0000
ROA not before:           Tue 05 Mar 2024 17:39:49 +0000
ROA not after:            Tue 04 Mar 2025 17:44:49 +0000
asID:                     27948
IP address blocks:        181.113.192.0/24 maxlen: 24
                          181.196.0.0/22 maxlen: 22
                          181.211.208.0/21 maxlen: 22
                          181.211.248.0/22 maxlen: 22
                          190.214.76.0/22 maxlen: 22
                          190.214.216.0/24 maxlen: 24
                          200.107.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:83:ba:9d:6c:4b:fb:67:76:79:2a:3d:15:db:2e:0f:6c:33:97:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Mar  5 17:39:49 2024 GMT
            Not After : Mar  4 17:44:49 2025 GMT
        Subject: CN=4B35E3BBDE9E3BC8E43B519477E5EEFE75A089EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:13:6e:4c:0f:8f:f3:03:4c:3b:ae:b2:73:
                    4a:b5:86:83:6e:bd:a2:2c:03:67:73:9a:66:a6:32:
                    c3:57:fb:cf:c0:21:39:ee:99:48:27:66:ef:13:d2:
                    d1:18:a1:1f:58:40:7f:8e:43:30:4f:a6:d2:c9:a9:
                    d1:11:57:92:78:d8:68:e6:d8:94:a8:b8:76:1c:d1:
                    2a:95:a3:1b:d0:84:26:76:7c:61:12:8b:fb:92:ae:
                    a7:a0:a9:6c:9d:3b:d5:48:03:71:e4:c8:c6:01:bc:
                    ae:2d:b7:c5:7f:26:b8:70:cf:23:47:66:71:79:6b:
                    f2:f4:71:2b:17:d9:c0:d8:67:ca:66:00:96:35:06:
                    bf:52:81:fc:ba:90:b7:df:b1:8c:7c:18:ad:be:0c:
                    05:25:7f:99:80:1f:86:9e:72:fe:a7:2e:40:a6:8e:
                    5b:64:d3:b0:f6:a3:ad:54:51:62:a5:43:02:66:03:
                    1f:4e:fc:0a:12:2a:ff:e1:13:d1:a8:0d:a6:03:5f:
                    4e:3f:27:aa:c7:61:bc:c7:58:ba:d8:5a:c1:a5:59:
                    e3:85:fc:14:e0:be:7d:eb:7f:e0:f0:d3:97:93:1f:
                    f9:28:2d:09:21:2c:29:87:5c:97:0e:84:60:47:c2:
                    aa:5d:41:6f:85:28:ef:17:a2:c5:1c:59:00:2d:8c:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:E3:BB:DE:9E:3B:C8:E4:3B:51:94:77:E5:EE:FE:75:A0:89:EE
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27948.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.192.0/24
                  181.196.0.0/22
                  181.211.208.0/21
                  181.211.248.0/22
                  190.214.76.0/22
                  190.214.216.0/24
                  200.107.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:f6:8b:f8:7a:ff:dc:cc:4a:c2:e3:34:8d:f6:d6:f2:06:
         47:6f:50:9a:9c:6e:bc:30:db:56:94:dc:99:3f:da:a4:18:e7:
         e7:3c:4a:e2:6c:1e:4c:8c:d4:44:12:a8:6a:7a:ed:6c:ce:d1:
         5f:a9:e7:d5:18:b1:99:01:a7:1b:78:72:e6:f7:1b:97:20:ee:
         aa:14:5f:47:11:ad:7b:08:f0:8c:ae:3b:8c:6e:ce:66:46:b2:
         ee:34:b4:b3:a4:cc:e7:be:d2:1a:fa:27:2d:5c:00:a5:ca:4d:
         41:a1:1d:6c:7e:ea:bb:3c:af:94:00:ed:4b:d6:86:68:ab:a7:
         ba:8f:98:ca:ca:0e:c2:53:e7:30:91:0e:a5:0f:79:e3:92:c3:
         57:03:09:8c:2b:04:95:69:72:bd:b5:ee:95:c9:42:73:d4:b8:
         5c:60:9a:4c:b6:a5:12:79:22:01:44:bb:f8:a0:30:cc:7c:fa:
         b7:1c:b3:9b:79:59:22:5b:e7:b9:e0:da:9c:6e:26:56:37:b3:
         c4:94:de:e7:04:b0:7a:af:5d:1b:d3:1e:25:1d:9a:e5:fc:f5:
         a4:5b:23:11:f7:27:30:24:58:cc:0f:09:e7:22:46:35:93:7c:
         4e:00:fc:fb:76:2c:d7:c3:ea:0d:c5:8a:74:72:a3:bd:7c:08:
         5b:ab:b1:ad
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUbYO6nWxL+2d2eSo9FdsuD2wzl1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGOEU3RDBCRjk1MTU4M0UwOTU5QjJBOTJBODkyMDMz
MENFQkU1OTAeFw0yNDAzMDUxNzM5NDlaFw0yNTAzMDQxNzQ0NDlaMDMxMTAvBgNV
BAMTKDRCMzVFM0JCREU5RTNCQzhFNDNCNTE5NDc3RTVFRUZFNzVBMDg5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcBNuTA+P8wNMO66yc0q1hoNu
vaIsA2dzmmamMsNX+8/AITnumUgnZu8T0tEYoR9YQH+OQzBPptLJqdERV5J42Gjm
2JSouHYc0SqVoxvQhCZ2fGESi/uSrqegqWydO9VIA3HkyMYBvK4tt8V/JrhwzyNH
ZnF5a/L0cSsX2cDYZ8pmAJY1Br9Sgfy6kLffsYx8GK2+DAUlf5mAH4aecv6nLkCm
jltk07D2o61UUWKlQwJmAx9O/AoSKv/hE9GoDaYDX04/J6rHYbzHWLrYWsGlWeOF
/BTgvn3rf+Dw05eTH/koLQkhLCmHXJcOhGBHwqpdQW+FKO8XosUcWQAtjLshAgMB
AAGjggK8MIICuDAdBgNVHQ4EFgQUSzXju96eO8jkO1GUd+Xu/nWgie4wHwYDVR0j
BBgwFoAUtvjn0L+VFYPglZsqkqiSAzDOvlkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83M0I2ODY4RTU2QjEyQzM1QzYzQjBBQjc2MzAyM0YyNTA4
MTIzQzMxMUNEN0VGNEY1MTYxRUY2RDBBNTUyOTlFLzAvQjZGOEU3RDBCRjk1MTU4
M0UwOTU5QjJBOTJBODkyMDMzMENFQkU1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkY4RTdEMEJGOTUxNTgzRTA5
NTlCMkE5MkE4OTIwMzMwQ0VCRTU5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83M0I2ODY4RTU2QjEyQzM1QzYzQjBBQjc2MzAyM0YyNTA4MTIzQzMxMUNE
N0VGNEY1MTYxRUY2RDBBNTUyOTlFLzAvQVMyNzk0OC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEALVxwAME
ArXEAAMEA7XT0AMEArXT+AMEAr7WTAMEAL7W2AMEAMhrAjANBgkqhkiG9w0BAQsF
AAOCAQEAben2i/h6/9zMSsLjNI321vIGR29QmpxuvDDbVpTcmT/apBjn5zxK4mwe
TIzURBKoanrtbM7RX6nn1RixmQGnG3hy5vcblyDuqhRfRxGtewjwjK47jG7OZkay
7jS0s6TM577SGvonLVwApcpNQaEdbH7quzyvlADtS9aGaKunuo+YysoOwlPnMJEO
pQ9545LDVwMJjCsElWlyvbXulclCc9S4XGCaTLalEnkiAUS7+KAwzHz6txyzm3lZ
IlvnueDanG4mVjezxJTe5wSweq9dG9MeJR2a5fz1pFsjEfcnMCRYzA8J5yJGNZN8
TgD8+3Ys18PqDcWKdHKjvXwIW6uxrQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org