Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27997.roa
File:                     AS27997.roa (raw, json)
Hash identifier:          0ulYcDvNtllx8yC0L7UP+lkMP7s71kbHRtwHpWDQHL4=
Subject key identifier:   F0:02:D0:F9:B7:C0:2F:5F:50:E9:D1:6F:26:F4:B0:51:2C:8F:53:D9
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       50FC774FB70EA965B040B2D000F2B7CB96736914
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27997.roa
Signing time:             Tue 05 Mar 2024 18:12:23 +0000
ROA not before:           Tue 05 Mar 2024 18:07:23 +0000
ROA not after:            Tue 04 Mar 2025 18:12:23 +0000
asID:                     27997
IP address blocks:        190.226.241.0/24 maxlen: 24
                          200.43.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fc:77:4f:b7:0e:a9:65:b0:40:b2:d0:00:f2:b7:cb:96:73:69:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:23 2024 GMT
            Not After : Mar  4 18:12:23 2025 GMT
        Subject: CN=F002D0F9B7C02F5F50E9D16F26F4B0512C8F53D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:96:c8:06:1f:82:f8:d4:28:84:97:22:fa:
                    d0:ec:f7:55:e5:cd:be:01:0b:58:08:f5:d9:a6:53:
                    70:fd:fa:c7:21:e2:3c:62:ca:ad:3e:c8:43:f3:fb:
                    8b:65:f7:ee:0a:cb:d4:62:6f:ef:40:90:5f:45:8a:
                    99:0d:ba:0d:bd:ff:17:29:23:cb:e3:d6:e3:57:90:
                    e4:90:05:d7:d6:03:18:e2:00:14:5e:03:a8:fd:39:
                    8b:f9:3a:0c:f9:66:78:10:66:5f:6b:7a:f0:df:a6:
                    72:5b:c1:b6:17:0d:f0:0c:6e:70:34:73:12:a9:66:
                    07:f8:3d:02:08:2a:a5:13:22:da:98:91:de:15:35:
                    b6:e7:5c:10:97:76:8a:43:1e:8b:ba:4b:57:e7:7e:
                    c5:1d:d5:85:5d:9a:e8:c8:4d:da:ef:8c:c8:18:5c:
                    1e:d4:43:ab:48:8f:f8:5f:47:0a:9c:c8:56:85:e8:
                    ed:e2:91:77:a0:cd:e5:b6:46:77:84:25:95:1b:df:
                    46:7e:a9:ff:03:82:25:83:73:cb:f3:0b:36:d3:d2:
                    b6:91:a4:c4:16:65:f5:0a:8a:48:6e:4d:e1:42:f3:
                    ab:ce:a9:13:4d:35:43:21:f8:e5:f8:29:2c:4b:c2:
                    78:64:03:9d:0f:5e:ec:3e:4f:7b:ee:11:68:ca:a5:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:D0:F9:B7:C0:2F:5F:50:E9:D1:6F:26:F4:B0:51:2C:8F:53:D9
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.241.0/24
                  200.43.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:26:f2:18:06:0a:21:ca:a3:1b:0c:66:0d:c3:be:fa:4e:
         d7:7a:6c:82:5a:f6:dc:0a:f2:7e:7c:d4:cc:06:9f:92:b3:08:
         e8:63:6e:8c:4b:79:ef:47:2a:bf:ce:8d:4f:76:ef:bd:c3:9e:
         97:63:92:57:f6:fd:79:fe:5e:1f:98:5a:64:d3:b6:4d:45:4b:
         e6:7a:f0:97:18:e2:0f:09:c3:95:ef:59:8b:14:92:0b:dc:69:
         47:36:de:77:7d:89:96:8c:0c:70:e1:ce:56:10:93:02:1a:7b:
         91:91:3f:7f:b4:16:de:08:68:57:7e:47:05:5a:04:27:6e:02:
         88:e8:9d:1e:9a:fc:ce:86:60:e2:93:c7:9e:13:ce:bd:92:1d:
         72:a9:ca:b0:a8:bb:27:20:d6:91:91:b4:49:1d:02:36:54:fb:
         f9:66:9d:56:5c:03:e4:56:e5:e6:69:98:05:a3:ca:fe:f1:65:
         bb:64:35:ab:57:ab:f9:ca:e4:2e:86:cb:4b:0c:1e:83:c1:ad:
         4e:38:16:0a:5c:54:83:a8:72:16:ea:ca:63:87:eb:f4:10:27:
         95:28:1e:74:8f:13:14:17:64:88:64:0a:0c:6a:3b:98:c9:50:
         3d:17:3f:ea:60:9b:9c:39:45:40:64:d5:d9:99:64:e2:cb:c9:
         43:53:b2:93
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIUUPx3T7cOqWWwQLLQAPK3y5ZzaRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNDAzMDUxODA3MjNaFw0yNTAzMDQxODEyMjNaMDMxMTAvBgNV
BAMTKEYwMDJEMEY5QjdDMDJGNUY1MEU5RDE2RjI2RjRCMDUxMkM4RjUzRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCStJbIBh+C+NQohJci+tDs91Xl
zb4BC1gI9dmmU3D9+sch4jxiyq0+yEPz+4tl9+4Ky9Rib+9AkF9FipkNug29/xcp
I8vj1uNXkOSQBdfWAxjiABReA6j9OYv5Ogz5ZngQZl9revDfpnJbwbYXDfAMbnA0
cxKpZgf4PQIIKqUTItqYkd4VNbbnXBCXdopDHou6S1fnfsUd1YVdmujITdrvjMgY
XB7UQ6tIj/hfRwqcyFaF6O3ikXegzeW2RneEJZUb30Z+qf8DgiWDc8vzCzbT0raR
pMQWZfUKikhuTeFC86vOqRNNNUMh+OX4KSxLwnhkA50PXuw+T3vuEWjKpbHbAgMB
AAGjggKeMIICmjAdBgNVHQ4EFgQU8ALQ+bfAL19Q6dFvJvSwUSyPU9kwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNzk5Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAL7i8QME
AMgrNzANBgkqhkiG9w0BAQsFAAOCAQEAmhQm8hgGCiHKoxsMZg3DvvpO13psglr2
3AryfnzUzAafkrMI6GNujEt570cqv86NT3bvvcOel2OSV/b9ef5eH5haZNO2TUVL
5nrwlxjiDwnDle9ZixSSC9xpRzbed32JlowMcOHOVhCTAhp7kZE/f7QW3ghoV35H
BVoEJ24CiOidHpr8zoZg4pPHnhPOvZIdcqnKsKi7JyDWkZG0SR0CNlT7+WadVlwD
5Fbl5mmYBaPK/vFlu2Q1q1er+crkLobLSwweg8GtTjgWClxUg6hyFurKY4fr9BAn
lSgedI8TFBdkiGQKDGo7mMlQPRc/6mCbnDlFQGTV2Zlk4svJQ1Oykw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org