Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27787.roa
File:                     AS27787.roa (raw, json)
Hash identifier:          6pD0gyFuee1FxkFjhb11hlxWGFybjmbrKoFrVVsqPWY=
Subject key identifier:   E1:DB:F2:AC:18:A7:0F:FC:D4:A2:BF:49:8F:D3:4C:D6:83:9A:CC:DC
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       61BBD5DA7932E9AC1BBF1965906CE435F80066C9
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27787.roa
Signing time:             Tue 04 Feb 2025 20:07:03 +0000
ROA not before:           Tue 04 Feb 2025 20:02:03 +0000
ROA not after:            Tue 03 Feb 2026 20:07:03 +0000
asID:                     27787
IP address blocks:        190.227.12.0/24 maxlen: 24
                          200.43.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bb:d5:da:79:32:e9:ac:1b:bf:19:65:90:6c:e4:35:f8:00:66:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:02:03 2025 GMT
            Not After : Feb  3 20:07:03 2026 GMT
        Subject: CN=E1DBF2AC18A70FFCD4A2BF498FD34CD6839ACCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:05:ac:fe:43:33:83:77:76:b2:6e:93:dc:
                    5b:d6:bb:17:5d:e8:c9:b3:59:b3:5e:3c:ba:01:97:
                    3f:a9:18:e9:fe:0a:10:a6:d7:7d:f4:ee:d2:fa:c4:
                    2f:88:0b:8d:de:05:ea:10:d4:93:26:b4:3c:f6:16:
                    37:59:e7:14:4b:8a:6c:c7:31:68:5c:16:21:38:2f:
                    63:de:1e:dc:54:b1:49:e3:40:6f:6b:ac:9f:31:f8:
                    6f:4b:39:e9:07:f0:f0:87:a9:ff:25:d1:b4:ab:35:
                    c9:51:8c:d5:27:06:66:5d:15:c6:fe:56:a4:ee:74:
                    30:75:57:9f:e1:94:0a:42:cf:c3:99:8f:e9:7e:85:
                    0d:b2:c8:8a:b1:82:73:a4:56:8c:c9:67:94:e9:76:
                    f6:eb:d6:64:ab:df:6c:84:80:0d:b3:10:25:5f:bd:
                    2b:7b:33:be:f5:f2:ad:74:72:40:67:66:54:ed:28:
                    10:8e:c8:fb:c1:10:36:a6:3e:24:24:2c:7e:c5:76:
                    89:3e:e6:79:94:e2:cd:0b:08:07:c6:8e:1b:d9:39:
                    bc:ea:02:8b:9d:72:77:dc:cc:72:cd:be:cd:7a:c2:
                    4a:7e:51:78:a7:c3:98:10:e9:7b:ef:93:33:f7:2b:
                    67:4b:a0:9f:56:67:82:75:1d:57:cd:e8:23:9b:94:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DB:F2:AC:18:A7:0F:FC:D4:A2:BF:49:8F:D3:4C:D6:83:9A:CC:DC
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27787.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.227.12.0/24
                  200.43.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:66:0d:32:46:62:89:4b:86:73:c1:cd:c5:2f:e4:c5:dd:
         42:c7:21:26:1d:e1:b9:6a:f8:cd:b5:e5:a2:22:1d:3c:71:15:
         42:78:ad:aa:4c:80:e5:26:4d:14:b8:e1:72:4e:a8:62:d3:d0:
         93:f3:7a:43:b6:51:12:b7:18:08:c2:a4:30:69:c8:de:6b:4b:
         32:76:67:54:e2:ad:48:e3:f5:92:b8:99:27:5d:a4:f9:bc:4c:
         22:e5:47:2a:b8:b6:d4:15:26:94:89:d1:ad:73:13:13:07:a9:
         78:ca:27:d3:42:24:83:ac:41:88:bd:e0:7b:1b:2c:75:b2:b8:
         bd:52:5b:e0:de:23:98:28:12:50:98:15:80:4c:3e:0a:ac:84:
         a3:0a:b1:45:73:fb:a3:0c:77:19:dc:cb:38:a4:30:74:3b:f7:
         ab:8e:a4:7c:1b:e6:ba:d8:0a:cd:c8:e5:f1:f2:30:4d:cb:eb:
         ce:0f:12:24:62:43:f6:73:9e:1d:b9:14:83:2b:61:b2:80:b8:
         f9:d9:37:bf:b1:ba:c6:94:cb:2f:63:43:15:c5:be:de:4d:fe:
         c0:a8:90:73:76:03:fd:7e:79:2c:ac:d9:c1:46:aa:a3:d7:1e:
         cd:66:3f:62:3a:69:ae:11:22:7e:58:a0:86:d4:89:52:78:04:
         c8:0a:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:10:37 2025 by rpki-client