Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS27921.roa
File:                     AS27921.roa (raw, json)
Hash identifier:          imoaSMpsDIwVzrj7BaR17efCAanqn9G6V5anJgkexXs=
Subject key identifier:   53:46:1D:2E:76:F8:3C:13:26:B8:33:F7:B8:E0:D6:29:2A:CD:C9:29
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       72E0C1A067AD5BA2AD1F13E6E85793A2082216CF
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS27921.roa
Signing time:             Tue 05 Mar 2024 17:55:24 +0000
ROA not before:           Tue 05 Mar 2024 17:50:24 +0000
ROA not after:            Tue 04 Mar 2025 17:55:24 +0000
asID:                     27921
IP address blocks:        190.13.96.0/24 maxlen: 24
                          190.13.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e0:c1:a0:67:ad:5b:a2:ad:1f:13:e6:e8:57:93:a2:08:22:16:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Mar  5 17:50:24 2024 GMT
            Not After : Mar  4 17:55:24 2025 GMT
        Subject: CN=53461D2E76F83C1326B833F7B8E0D6292ACDC929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:c5:ac:b0:8b:60:e7:4a:a6:1c:60:1c:a2:
                    b4:ea:ea:d6:0d:00:9f:dc:ce:22:e9:2f:9d:1e:97:
                    ca:c9:d3:0d:06:02:46:ad:df:51:24:fc:de:26:08:
                    84:26:83:8a:d7:d6:20:fa:16:1d:42:b9:61:a9:21:
                    23:e0:ed:d2:85:d4:52:e3:96:58:8e:13:61:6d:0a:
                    2f:96:ce:d0:1d:9b:94:49:a9:c4:13:0a:57:8c:b2:
                    cf:18:65:35:b1:76:da:07:92:6f:1d:9c:f8:10:f1:
                    19:d3:dc:8d:ce:f6:4e:9e:80:5f:84:e9:d5:e2:c0:
                    36:c2:79:1d:77:96:fd:6e:c5:02:b7:f6:b2:c6:a3:
                    e7:c0:2d:7c:cd:d0:27:dc:c4:a3:b2:7f:e4:b0:58:
                    a4:8f:df:e1:03:c1:35:70:e1:a4:17:a0:b7:ec:80:
                    95:a9:70:36:56:f7:e2:71:da:bd:c5:fd:89:78:a1:
                    a9:e4:84:cd:6e:3a:f2:f1:5a:ee:ba:1c:2b:6e:85:
                    6d:81:a9:68:d9:aa:f4:18:5e:f0:ca:72:b2:f1:98:
                    cf:ae:90:cc:46:37:d6:fe:33:d5:4a:b0:cc:3b:b2:
                    03:ce:fe:f1:9f:2c:be:24:4b:2e:fc:87:ee:a4:9b:
                    25:5b:4b:43:ea:ed:22:bb:6b:35:4e:97:89:4d:90:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:1D:2E:76:F8:3C:13:26:B8:33:F7:B8:E0:D6:29:2A:CD:C9:29
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS27921.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.96.0/24
                  190.13.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:7a:c0:72:7c:06:fe:93:f1:e4:f7:6c:d5:56:bd:42:fe:
         61:a0:69:9d:c0:d8:0c:4c:2e:49:17:86:e8:a1:75:1a:d8:5d:
         f1:ef:ee:9b:ea:24:19:85:66:7e:34:8c:ad:b9:5b:42:0d:cf:
         00:25:e6:6e:24:9b:a9:8f:3f:40:09:c6:62:12:d1:24:ae:29:
         ea:eb:7b:94:cd:1a:65:fa:e2:dd:32:7a:95:33:2a:05:03:e5:
         c5:93:e3:2b:42:a4:d3:01:58:c0:5c:8d:1a:00:10:c4:ed:a2:
         a7:16:af:ad:8d:81:92:e9:7c:51:38:00:5c:7d:ec:79:3d:15:
         91:dd:9f:f6:39:f4:c1:2f:32:9d:c5:bf:ae:b1:4c:d7:9e:27:
         1d:d1:d3:9a:b1:68:4b:c2:81:b9:de:bd:65:d0:92:25:e8:8c:
         7e:f6:06:67:c3:fb:8d:80:ec:49:89:63:bd:f9:b3:ff:f6:33:
         b4:b0:17:f7:76:64:55:4d:54:e1:c2:20:d4:3a:98:d9:cf:95:
         ab:55:ee:69:b7:24:0f:c5:7f:7a:b3:6b:c0:8d:27:9d:3c:52:
         79:d6:da:0f:cf:f5:67:f2:24:de:68:1f:00:9d:d6:67:b7:71:
         8e:30:84:ea:db:ec:6c:67:3c:f4:1a:2e:3e:d8:fa:b5:81:fd:
         02:81:c9:dd
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIUcuDBoGetW6KtHxPm6FeToggiFs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwNjIzNkI5NkVFMDA5MzRGQ0QzOUE1NjBFNUJDMDRF
QjdCOUVBNDAeFw0yNDAzMDUxNzUwMjRaFw0yNTAzMDQxNzU1MjRaMDMxMTAvBgNV
BAMTKDUzNDYxRDJFNzZGODNDMTMyNkI4MzNGN0I4RTBENjI5MkFDREM5MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4MWssItg50qmHGAcorTq6tYN
AJ/cziLpL50el8rJ0w0GAkat31Ek/N4mCIQmg4rX1iD6Fh1CuWGpISPg7dKF1FLj
lliOE2FtCi+WztAdm5RJqcQTCleMss8YZTWxdtoHkm8dnPgQ8RnT3I3O9k6egF+E
6dXiwDbCeR13lv1uxQK39rLGo+fALXzN0CfcxKOyf+SwWKSP3+EDwTVw4aQXoLfs
gJWpcDZW9+Jx2r3F/Yl4oankhM1uOvLxWu66HCtuhW2BqWjZqvQYXvDKcrLxmM+u
kMxGN9b+M9VKsMw7sgPO/vGfLL4kSy78h+6kmyVbS0Pq7SK7azVOl4lNkOHhAgMB
AAGjggKeMIICmjAdBgNVHQ4EFgQUU0YdLnb4PBMmuDP3uODWKSrNySkwHwYDVR0j
BBgwFoAU2wYja5buAJNPzTmlYOW8BOt7nqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIx
RDI0N0Q3RTc3RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvREIwNjIzNkI5NkVFMDA5
MzRGQ0QzOUE1NjBFNUJDMDRFQjdCOUVBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA2MjM2Qjk2RUUwMDkzNEZD
RDM5QTU2MEU1QkMwNEVCN0I5RUE0LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIxRDI0N0Q3RTc3
RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvQVMyNzkyMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAL4NYAME
AL4NbDANBgkqhkiG9w0BAQsFAAOCAQEAMG16wHJ8Bv6T8eT3bNVWvUL+YaBpncDY
DEwuSReG6KF1Gthd8e/um+okGYVmfjSMrblbQg3PACXmbiSbqY8/QAnGYhLRJK4p
6ut7lM0aZfri3TJ6lTMqBQPlxZPjK0Kk0wFYwFyNGgAQxO2ipxavrY2Bkul8UTgA
XH3seT0Vkd2f9jn0wS8yncW/rrFM154nHdHTmrFoS8KBud69ZdCSJeiMfvYGZ8P7
jYDsSYljvfmz//YztLAX93ZkVU1U4cIg1DqY2c+Vq1XuabckD8V/erNrwI0nnTxS
edbaD8/1Z/Ik3mgfAJ3WZ7dxjjCE6tvsbGc89BouPtj6tYH9AoHJ3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org