Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31392d3139203d3e203238303234.roa
File:                     3138362e32372e302e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          fG36Mlt5lpJq+uycOuHTinicQ/BlCSAiJ+8xFBGydJI=
Subject key identifier:   41:46:B2:DC:1C:87:C8:2C:CD:E6:F9:B2:91:8F:16:7B:0D:ED:D0:AF
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       61FB19D1B5C8341E883653054D1F77203DC5A673
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:03 +0000
ROA not before:           Tue 05 Mar 2024 17:51:03 +0000
ROA not after:            Tue 04 Mar 2025 17:56:03 +0000
asID:                     28024
IP address blocks:        186.27.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fb:19:d1:b5:c8:34:1e:88:36:53:05:4d:1f:77:20:3d:c5:a6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:03 2024 GMT
            Not After : Mar  4 17:56:03 2025 GMT
        Subject: CN=4146B2DC1C87C82CCDE6F9B2918F167B0DEDD0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:83:ff:fa:41:c4:0b:01:cf:5c:2a:45:82:73:
                    4a:b1:fe:36:fd:f6:3f:e4:b1:58:91:7b:b8:52:0d:
                    ba:a3:8f:eb:35:30:b8:a4:88:98:17:62:0b:ca:65:
                    31:a0:9a:67:9e:35:31:78:ad:7d:bd:f7:77:62:0c:
                    db:1b:8e:2f:7f:83:9a:90:9e:ed:63:58:a0:c7:08:
                    c4:ac:12:0c:0d:91:d7:02:7e:e5:0b:6e:d2:0b:d4:
                    a0:67:93:37:5d:c1:c6:07:f6:32:d9:7e:84:ab:3a:
                    44:cc:84:c1:74:5a:1a:b7:8a:c3:9b:71:46:a4:26:
                    df:c9:c2:96:74:08:e7:0e:b2:bd:1b:6c:a0:6c:b7:
                    42:18:24:0a:6e:0b:c9:68:21:54:2a:71:d9:64:74:
                    61:d0:42:40:f1:48:61:71:2e:9d:15:90:60:c0:1f:
                    7c:25:03:82:ff:94:bc:41:1b:a3:6c:53:0d:d4:59:
                    17:04:3b:35:3b:7b:e4:8f:22:c9:fb:03:14:c7:b4:
                    25:c8:8a:59:6d:0d:d6:5e:f1:3b:78:43:7c:76:cb:
                    61:57:d6:2e:30:af:1b:84:44:3f:6a:10:81:3c:61:
                    42:24:5b:85:3c:20:12:62:09:b7:f3:e4:f6:a0:2a:
                    ab:8f:18:92:06:c0:64:d4:68:83:4c:f0:45:b6:ee:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:46:B2:DC:1C:87:C8:2C:CD:E6:F9:B2:91:8F:16:7B:0D:ED:D0:AF
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:61:37:65:50:7c:df:48:aa:65:4c:25:e8:83:d3:72:09:
         de:ee:8c:81:09:35:83:c6:c4:92:01:68:52:ee:b1:5f:48:ec:
         45:cd:25:09:01:5b:57:0e:c8:c9:15:c0:0e:ed:0f:7c:67:3d:
         3e:e8:2a:75:38:8c:a8:86:ea:ef:46:c2:83:06:0a:05:8d:e3:
         77:86:be:74:c8:d9:fc:e8:ef:f9:5b:a4:ed:26:81:57:6d:6b:
         ed:91:fc:a1:f6:4e:40:c6:6f:d3:dd:60:00:d6:ed:d8:c4:c1:
         23:99:71:6f:ca:ed:68:8b:a3:c3:68:f7:eb:47:0d:2a:aa:b7:
         ab:22:43:61:70:44:ac:c5:84:5b:17:c1:a5:22:f0:b0:bc:07:
         36:b7:bb:0b:65:43:1c:4f:f2:ba:12:05:e6:3d:12:0f:ac:1d:
         6a:f0:56:04:c6:20:b0:c1:6b:17:91:60:46:94:30:e6:f8:70:
         0d:b4:77:34:1e:b8:55:1f:8e:8f:3b:3e:6f:37:9f:54:18:4c:
         02:4e:c6:15:52:73:b6:f0:82:f5:66:90:d1:4b:54:80:46:e0:
         a1:73:2e:90:33:e7:35:68:f6:01:fa:18:4d:03:02:3f:2e:88:
         d9:9f:d5:c5:1e:e2:42:7b:3b:6e:81:3e:79:6d:5d:0f:48:0c:
         a5:ed:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:18 2024 by rpki-client on console-fra.rpki-client.org