Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27968.roa
File:                     AS27968.roa (raw, json)
Hash identifier:          od6VN3KF1Ut/n1h3GFlMFgkRA5VYZdzDJHpCpiRz4pc=
Subject key identifier:   D0:39:4A:31:DA:D8:D0:D0:08:AE:E7:5B:A5:0C:D2:F8:38:36:4E:69
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       73428003D74CF5B3ECFD44CA6EFF2F6E90202F47
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27968.roa
Signing time:             Tue 05 Mar 2024 17:44:48 +0000
ROA not before:           Tue 05 Mar 2024 17:39:48 +0000
ROA not after:            Tue 04 Mar 2025 17:44:48 +0000
asID:                     27968
IP address blocks:        186.178.8.0/24 maxlen: 24
                          200.125.192.0/19 maxlen: 24
                          200.125.192.0/24 maxlen: 24
                          200.125.224.0/19 maxlen: 24
                          200.125.224.0/24 maxlen: 24
                          200.125.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:42:80:03:d7:4c:f5:b3:ec:fd:44:ca:6e:ff:2f:6e:90:20:2f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Mar  5 17:39:48 2024 GMT
            Not After : Mar  4 17:44:48 2025 GMT
        Subject: CN=D0394A31DAD8D0D008AEE75BA50CD2F838364E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:aa:51:de:b8:da:77:22:4e:4c:df:8c:3b:
                    72:88:6d:8e:61:94:ae:34:d8:01:50:d6:3c:40:74:
                    32:a5:c7:b9:ea:34:50:6a:4b:74:c9:06:b4:2c:ab:
                    41:81:86:3a:fd:f6:4b:15:5c:d4:16:a7:bc:8a:c7:
                    5b:e7:42:59:e2:4d:c3:3b:27:dd:be:b2:83:44:1e:
                    62:ee:b2:78:bb:f5:73:e1:32:d9:48:e8:6f:83:05:
                    f9:3f:58:1f:c8:ca:f0:dd:57:f9:de:5f:62:bd:1e:
                    f9:4c:2d:33:66:30:84:43:38:12:a3:5d:85:84:d7:
                    5a:db:5b:b0:66:58:94:ad:64:92:81:ef:97:c0:1d:
                    7a:38:d9:1a:97:2c:8d:b8:54:b1:90:39:5c:0b:63:
                    ad:56:d1:dd:a1:02:7a:33:83:37:3c:87:72:ad:53:
                    96:b6:fd:f0:30:38:11:e9:99:3b:6b:bb:09:fd:42:
                    59:e6:1c:ff:03:fe:ec:f5:f2:48:a7:7e:57:fb:d7:
                    27:d8:65:d3:f5:c5:c2:3b:f7:ac:0c:2d:b0:96:5d:
                    47:c6:90:42:f1:44:7f:90:05:ee:f6:3a:55:2a:a0:
                    ac:e5:b2:5d:fe:ba:5d:ce:62:6a:15:9b:bb:61:6a:
                    04:af:58:e2:b6:c4:a4:37:c0:36:e4:4b:ef:12:60:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:39:4A:31:DA:D8:D0:D0:08:AE:E7:5B:A5:0C:D2:F8:38:36:4E:69
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27968.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.178.8.0/24
                  200.125.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:37:05:4a:10:56:19:f8:72:b9:65:f1:0c:34:4f:eb:06:dd:
         af:7e:a3:af:10:e8:13:c0:18:22:a8:6d:bb:0b:c7:d2:88:d9:
         b1:c2:8f:55:6f:4a:81:5b:21:46:97:7c:6e:21:53:75:76:cb:
         19:ab:59:6d:5e:11:79:8e:21:b2:21:da:31:40:14:4f:0f:00:
         9b:d8:1a:42:a0:d0:56:f2:94:98:c0:2e:a2:9b:39:56:94:c7:
         ff:94:af:2d:02:61:78:33:7c:f6:ee:ad:bf:db:8d:f3:f2:e3:
         a2:ef:44:f5:14:54:7a:c2:82:16:e5:5b:49:83:89:40:21:c8:
         81:8b:3a:40:72:54:08:cf:28:00:db:e5:1c:a3:d2:2f:0c:e4:
         86:50:c3:b0:63:9e:04:5d:2b:42:a1:21:52:b3:77:d7:3e:08:
         f0:6a:33:29:5c:fa:89:9b:b6:9c:4d:ce:68:f3:cc:0c:66:c3:
         60:fd:03:86:d5:2c:22:d7:40:9f:b1:c2:9e:57:7f:f0:f5:13:
         fd:a9:5f:03:c4:e2:36:c7:de:0c:99:a7:35:ac:a3:db:9a:38:
         e7:96:55:19:3b:3c:d1:f3:34:6f:46:17:fd:1d:92:95:8a:2d:
         e4:e8:0f:72:1c:1a:4b:05:43:00:1e:45:e6:a0:5b:a6:b8:ca:
         a3:65:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org