Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31372d3137203d3e203238303234.roa
File:                     3138362e32372e302e302f31372d3137203d3e203238303234.roa (raw, json)
Hash identifier:          XfRm3r2edCbpkL2knIamVmnHfeoUKLwe68GQrQ5BCW4=
Subject key identifier:   31:3F:BD:73:6D:83:C7:51:A2:D1:A2:FC:FE:B1:15:43:10:00:7C:23
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       5D3A961F5FAF0FCEB3ABDF3A5ECCEE1EE79EE698
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31372d3137203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:00 +0000
ROA not before:           Tue 04 Feb 2025 17:58:00 +0000
ROA not after:            Tue 03 Feb 2026 18:03:00 +0000
asID:                     28024
IP address blocks:        186.27.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3a:96:1f:5f:af:0f:ce:b3:ab:df:3a:5e:cc:ee:1e:e7:9e:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:00 2025 GMT
            Not After : Feb  3 18:03:00 2026 GMT
        Subject: CN=313FBD736D83C751A2D1A2FCFEB1154310007C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:12:8d:63:b9:e5:d1:4f:49:e4:9c:5f:40:
                    16:cc:b7:f4:53:7c:6b:30:b5:16:87:b9:79:64:1d:
                    b8:9f:95:1a:b4:ab:b9:db:9a:63:9c:a5:33:13:c2:
                    4b:db:a3:c7:e6:72:47:54:09:53:d6:55:71:b1:3a:
                    dc:20:e3:9f:eb:e9:aa:16:8e:93:67:1f:18:62:59:
                    2b:c8:75:bd:55:54:01:ab:79:39:40:ad:78:2b:aa:
                    8f:7b:17:df:f1:ab:b5:1a:fe:1d:dd:dd:b2:88:a8:
                    28:d9:28:06:45:1e:18:e1:2d:85:42:0a:b7:db:07:
                    33:66:0c:f4:c6:85:7a:af:1b:b2:52:3c:c5:25:8b:
                    7b:31:7f:74:21:88:2d:cb:bf:4d:4a:94:02:10:d3:
                    8b:75:f1:3d:9a:9c:e2:8a:34:98:58:0f:3f:dd:94:
                    8f:02:42:25:f4:90:54:84:3e:64:98:e4:48:e4:a1:
                    d4:1d:eb:9c:01:3c:76:7e:99:da:1c:27:52:74:19:
                    a3:45:84:31:75:b1:64:ed:d3:bd:98:1a:81:cf:16:
                    d2:c5:b7:0f:fb:2b:f2:46:a9:b4:fa:a5:f8:84:57:
                    75:ea:bb:ff:bb:12:6a:a3:9d:d1:83:cb:39:73:8e:
                    ae:1f:47:1d:92:03:dc:e0:24:dc:e8:17:83:bc:15:
                    86:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3F:BD:73:6D:83:C7:51:A2:D1:A2:FC:FE:B1:15:43:10:00:7C:23
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31372d3137203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:f1:53:fa:19:79:6f:8e:82:55:7a:2f:e4:fd:af:55:9a:
         9c:11:5d:d1:59:25:8a:ea:7b:60:18:62:92:f3:92:c3:83:ce:
         67:fb:77:e1:12:f7:27:f8:a9:2b:7d:35:e9:c6:a8:7a:e1:81:
         a0:cd:eb:6b:8e:62:89:b2:7a:ac:4c:b0:30:51:2c:bc:a1:22:
         e2:80:e3:1b:64:1d:43:20:ab:9d:f4:01:8e:97:6f:9f:ed:28:
         91:dd:d6:d5:1c:fd:21:cc:30:bd:81:6e:97:b3:61:e3:10:1a:
         3f:52:c9:9e:70:af:ee:42:af:02:d7:36:12:e8:2f:d2:eb:d1:
         10:14:fc:14:29:1d:a9:17:00:80:3c:05:bc:c3:67:8c:a2:31:
         e8:d4:ce:fd:71:7a:25:e8:07:4d:05:5d:3d:3e:ca:f6:ef:d0:
         95:85:19:4a:62:ff:d9:90:dc:4f:54:c0:73:45:25:ae:bb:4e:
         ff:5a:a0:27:81:1b:f8:76:98:04:8d:2c:9d:a4:4c:b5:70:64:
         7c:26:56:14:95:21:a4:da:fc:eb:e5:3d:03:5e:23:d4:be:7e:
         11:18:5c:3f:e6:95:26:9c:45:35:1a:cc:b9:43:f1:00:d5:74:
         5b:19:cc:77:3f:d0:3d:51:5c:b3:83:85:38:47:f8:dd:3c:1c:
         f6:e1:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:22 2025 by rpki-client