Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e36342e302f31382d3138203d3e203238303234.roa
File:                     3138362e32372e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          nRoQK0BwQATuHiKkBPRLfq/tJgd20/niG7Rx2cU6pXw=
Subject key identifier:   DD:66:3A:2E:7C:03:C3:C4:96:31:5D:BC:DD:6C:71:BE:60:E5:FF:25
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       7BFD7D57E937146BFDDBC9AEE8E82A6B6AD106A6
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:06 +0000
ROA not before:           Tue 04 Feb 2025 17:58:06 +0000
ROA not after:            Tue 03 Feb 2026 18:03:06 +0000
asID:                     28024
IP address blocks:        186.27.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fd:7d:57:e9:37:14:6b:fd:db:c9:ae:e8:e8:2a:6b:6a:d1:06:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:06 2025 GMT
            Not After : Feb  3 18:03:06 2026 GMT
        Subject: CN=DD663A2E7C03C3C496315DBCDD6C71BE60E5FF25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:a4:5d:58:3e:cc:cf:8a:1f:53:00:ed:77:
                    7f:84:f0:3e:eb:ad:b1:99:55:b9:27:ce:35:68:7e:
                    78:94:bc:60:51:a1:d5:e3:7f:89:e6:c3:54:9e:c4:
                    cc:a8:5f:49:16:31:54:6f:8b:2d:b4:5d:83:a6:df:
                    14:74:da:33:91:7c:36:ab:20:ab:27:e6:a4:d7:91:
                    00:c9:d0:48:ee:e3:7e:23:04:8e:97:3f:5c:f8:4c:
                    30:04:b8:95:e5:57:26:ab:86:c6:92:1f:7e:8c:e6:
                    7f:32:54:10:e1:8a:32:e6:79:44:e0:95:15:8e:30:
                    79:a3:23:a0:a2:d1:9a:06:b2:13:a1:03:75:23:29:
                    2c:3b:38:d9:d7:f6:1a:52:c5:08:f4:66:15:f9:52:
                    3d:6b:97:e1:2f:02:5e:e1:ad:ff:cb:76:bb:bc:0c:
                    6a:94:4f:e3:f9:ea:3b:f7:bc:63:13:b4:91:74:f2:
                    67:e7:f6:dd:29:6e:a9:ee:f6:49:df:4e:6a:f8:77:
                    3a:ff:cf:2b:56:34:c9:0c:6b:8f:f7:a9:e1:f1:e8:
                    99:f2:86:20:7e:9b:1a:25:b1:57:a9:85:e7:5b:7d:
                    42:7b:09:c7:09:96:b4:76:87:41:7c:5d:51:92:b7:
                    59:ae:b2:ca:ac:30:ed:a3:2a:d4:b3:9c:01:5c:b8:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:66:3A:2E:7C:03:C3:C4:96:31:5D:BC:DD:6C:71:BE:60:E5:FF:25
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:40:15:3b:ee:66:1d:0d:3e:a0:5f:9d:a3:72:06:8c:e5:40:
         12:2f:2d:b8:2a:bf:d7:36:31:83:ae:59:d5:52:a6:d0:59:bc:
         8d:29:a5:43:da:f9:75:c5:98:c5:27:ae:61:fc:29:6c:ca:b0:
         53:c4:cf:34:1e:46:17:7a:bf:14:54:d9:d9:94:15:bf:10:cc:
         43:0b:34:79:3b:1c:be:19:ca:a5:d1:6b:49:77:3e:86:a5:20:
         6d:1c:f9:76:b1:c8:69:a5:1e:ab:d4:76:e7:5b:45:5c:a4:6e:
         af:e4:5a:3b:27:86:d8:54:d4:b5:47:7a:16:7b:b2:61:fe:e8:
         d3:63:af:1b:f4:fb:1e:f7:89:47:06:ac:33:cd:93:9d:de:e1:
         df:33:d6:e8:75:4a:96:cb:a0:78:1c:c6:37:da:79:2f:1a:38:
         dc:69:02:be:42:7b:d5:b9:22:56:f2:c1:f6:23:3f:4f:30:3c:
         f2:10:07:4f:ad:98:53:7d:11:a9:df:5d:99:91:f4:f5:72:18:
         11:c3:78:29:d3:34:1e:e7:5f:c4:54:b8:e5:c3:fc:7d:11:82:
         d6:02:f1:7c:1b:1b:48:03:f0:a7:3d:5e:12:a1:03:10:bb:cf:
         bb:31:68:56:63:93:09:77:70:f5:54:58:4d:9d:bf:12:49:a1:
         39:4d:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:40:10 2025 by rpki-client