Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS27932.roa
File:                     AS27932.roa (raw, json)
Hash identifier:          TgJf/xV74/YY2IKwSved29P9Ac0rzoi6RmlGPftj1Ng=
Subject key identifier:   CA:53:C2:AC:F5:BA:AA:78:EF:E3:6C:C1:D9:7A:83:D4:5A:7F:CE:1F
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       4E8482FF2625342F92A1B2762A043D7365CBD1AA
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS27932.roa
Signing time:             Tue 26 Aug 2025 22:41:14 +0000
ROA not before:           Tue 26 Aug 2025 22:36:14 +0000
ROA not after:            Tue 25 Aug 2026 22:41:14 +0000
asID:                     27932
IP address blocks:        181.79.224.0/19 maxlen: 24
                          181.79.224.0/20 maxlen: 24
                          181.79.240.0/21 maxlen: 24
                          181.79.248.0/22 maxlen: 24
                          181.79.252.0/23 maxlen: 24
                          181.79.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 14:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:84:82:ff:26:25:34:2f:92:a1:b2:76:2a:04:3d:73:65:cb:d1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Aug 26 22:36:14 2025 GMT
            Not After : Aug 25 22:41:14 2026 GMT
        Subject: CN=CA53C2ACF5BAAA78EFE36CC1D97A83D45A7FCE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:94:f3:ce:d5:d1:14:c2:1b:1e:27:0c:28:
                    ee:8a:0d:bd:e9:3a:8c:9b:86:dd:25:09:62:cd:bd:
                    74:83:f9:5e:ab:d5:8f:f7:fc:aa:55:11:fe:ea:ec:
                    34:3a:38:4d:b4:a4:24:80:9f:3c:ac:08:0e:89:6a:
                    96:1f:b7:90:49:94:00:a8:e1:2b:5d:2e:fb:98:d1:
                    1a:1a:f2:b6:29:61:d5:fa:96:a7:ea:70:ec:bd:a3:
                    ff:7e:f8:b3:ac:02:44:91:42:3f:c3:62:0e:25:fd:
                    a8:5b:c1:e5:4d:45:37:0d:63:b7:e9:c4:33:1f:9d:
                    26:58:a0:48:14:1f:df:9e:06:8c:63:f4:9b:e9:df:
                    5e:66:e2:51:93:8b:0b:db:23:db:2d:67:63:f6:bf:
                    df:c9:c1:f1:47:22:b1:45:2b:fd:d0:40:bf:8b:8c:
                    e0:37:08:77:94:ed:6a:60:db:2a:96:41:29:5c:13:
                    09:70:69:5c:21:fb:b9:75:5e:d6:82:d5:fa:dc:af:
                    20:76:5d:63:1d:61:63:68:d5:9f:e9:9e:d5:8e:75:
                    2c:dc:19:ea:95:b0:8e:f9:b4:fc:b6:f9:a3:8b:fc:
                    72:b7:51:f3:8c:f4:fc:d9:6d:a2:2d:fd:0c:da:46:
                    c2:9d:5a:b8:c7:37:ca:6f:a8:f0:4e:bf:99:32:71:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:C2:AC:F5:BA:AA:78:EF:E3:6C:C1:D9:7A:83:D4:5A:7F:CE:1F
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS27932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:11:f0:8a:72:c7:32:ed:b8:15:c1:d5:87:f0:49:b9:3c:d9:
         a8:7f:f8:22:d8:7e:14:92:c2:4f:84:71:fa:7d:ce:f8:e5:83:
         d9:67:cd:eb:d2:55:8d:b8:fa:6b:54:ce:33:0b:af:0e:e8:16:
         95:5d:a5:e0:48:dc:8b:6b:17:dd:63:af:3b:23:d6:e6:f0:a1:
         e1:c4:8d:29:a4:ab:ae:c9:1e:e2:eb:ad:f7:ff:b7:45:84:d6:
         3d:3a:b4:83:0d:b9:64:3f:2f:93:92:b3:19:9e:9e:44:ea:29:
         6f:4a:81:5a:91:74:e1:9a:55:a2:07:db:97:7d:76:68:df:72:
         fa:eb:69:6d:f8:cd:46:97:11:0d:44:06:28:61:ef:e0:0d:e0:
         18:bb:bc:ba:b9:3c:ed:91:1b:34:f9:b6:e3:6b:ca:e3:29:d5:
         ae:92:ca:dd:97:86:2f:a4:62:fc:f2:0c:a9:a9:bd:59:d6:4b:
         92:1b:de:a1:c8:bd:bc:03:8b:85:6e:92:eb:40:d4:a5:d3:13:
         09:8d:0a:8f:2f:b5:b9:46:02:d5:d7:b5:af:b9:f4:94:ba:4f:
         3c:51:f4:4b:08:3f:28:61:c7:fd:e9:df:44:90:56:64:8e:f0:
         47:31:24:8d:ca:17:b9:aa:51:57:41:8a:f4:fe:db:95:74:d7:
         2e:33:28:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 12:38:24 2025 by rpki-client