Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27875.roa
File:                     AS27875.roa (raw, json)
Hash identifier:          I/xe3hxVaD3sCMOAI30zD5Iqrf5IySxFwij7ZB5xEaA=
Subject key identifier:   19:50:67:31:09:8D:96:AB:7C:B6:1D:E0:D3:E0:08:ED:A7:46:75:43
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       0836052973D949EBAFC85F8A084E436C889DE5A1
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27875.roa
Signing time:             Tue 04 Feb 2025 20:07:03 +0000
ROA not before:           Tue 04 Feb 2025 20:02:03 +0000
ROA not after:            Tue 03 Feb 2026 20:07:03 +0000
asID:                     27875
IP address blocks:        181.10.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:36:05:29:73:d9:49:eb:af:c8:5f:8a:08:4e:43:6c:88:9d:e5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:02:03 2025 GMT
            Not After : Feb  3 20:07:03 2026 GMT
        Subject: CN=19506731098D96AB7CB61DE0D3E008EDA7467543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:d4:6b:5f:65:93:3f:52:13:6e:fa:7d:ff:
                    25:ff:ba:09:11:8b:51:01:72:55:33:ac:e2:6c:de:
                    8f:ea:13:04:39:9f:69:c5:05:c5:46:c9:08:3b:47:
                    01:e3:2c:6b:92:d3:88:8e:27:0a:7f:65:88:d5:1d:
                    6a:32:64:34:1f:be:db:fa:4a:c7:fd:23:45:57:9d:
                    e0:5e:30:45:06:6b:80:72:49:1e:da:1c:b7:ac:9b:
                    35:cc:ec:35:19:d3:c3:d4:67:96:b8:8b:fa:00:d6:
                    c3:6d:5c:1d:9b:29:71:28:3c:81:f8:a9:cb:cb:ff:
                    a6:fd:5a:d8:bf:69:27:71:82:8b:ce:fc:55:5d:ba:
                    60:dc:48:f5:76:e3:a3:b9:0b:07:75:36:30:d5:73:
                    11:04:6b:bd:18:1c:4a:fc:40:f0:84:ac:ec:82:0c:
                    c3:d0:1c:ae:52:cf:fe:83:f4:ff:4e:56:6f:0b:fc:
                    cc:56:09:c7:4e:13:a7:50:da:27:93:94:0c:2a:77:
                    3c:49:5f:b8:2e:20:a9:b5:5c:42:96:da:43:f2:bb:
                    eb:5c:81:8d:d6:3a:62:d7:2a:46:a6:49:fc:30:c1:
                    c6:a9:a5:c2:d7:30:f3:3f:ba:54:40:24:ce:6f:06:
                    b5:05:72:88:09:28:31:63:b1:3e:bc:33:ef:40:37:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:67:31:09:8D:96:AB:7C:B6:1D:E0:D3:E0:08:ED:A7:46:75:43
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27875.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:83:dc:27:98:49:78:18:43:a9:7a:a1:f4:96:de:3e:ed:6a:
         5b:db:c9:4f:7e:a9:45:bb:3e:d1:d3:bd:81:c2:ea:62:9e:a2:
         e8:27:5f:eb:e2:be:d4:f3:b8:d0:7d:0d:c3:52:9a:7a:40:c8:
         1a:1d:79:45:09:80:e2:62:33:88:93:74:c9:43:f8:82:a7:c2:
         bc:b0:e2:86:f6:d2:f6:5a:c2:ec:1c:13:22:4e:be:b9:f1:bc:
         37:bb:e4:58:1e:27:43:15:52:cf:57:df:7b:4e:0c:8d:a5:f4:
         54:fc:fa:97:eb:93:5e:6f:1b:cb:16:b4:c4:b5:8c:dd:40:ff:
         c7:ba:be:fa:f8:b5:8f:e4:63:ee:d6:8f:7f:74:9d:f3:c5:28:
         71:2f:e0:9b:cd:1d:f2:e2:86:dc:03:6d:1b:83:7b:70:d4:1f:
         e1:1f:93:bb:ef:d1:89:52:da:4d:8a:aa:84:6d:e1:50:db:53:
         fc:0f:22:de:f0:7e:52:43:56:4c:98:79:b7:09:12:27:42:7a:
         e7:58:81:a3:26:fd:cd:42:8e:10:66:ed:0f:f2:9a:60:eb:c7:
         53:25:af:44:b0:df:92:16:e8:64:2a:b5:c1:be:70:7b:bd:44:
         16:cd:76:a3:a8:c1:24:77:43:e2:58:f0:fe:d1:3c:4f:50:ee:
         3b:7a:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:59:09 2025 by rpki-client