Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27760.roa
File:                     AS27760.roa (raw, json)
Hash identifier:          qYKLnrH2g//0VDZ2l7g1sbVFISN5Qxx3BlSx1mCoOjM=
Subject key identifier:   BC:E8:E2:B7:B4:E5:AD:94:41:9D:A0:37:36:F9:B5:88:27:02:8D:61
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       442ECBAAF6401B697FBF2948E843D2D3D7FB437D
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27760.roa
Signing time:             Tue 05 Mar 2024 17:54:53 +0000
ROA not before:           Tue 05 Mar 2024 17:49:53 +0000
ROA not after:            Tue 04 Mar 2025 17:54:53 +0000
asID:                     27760
IP address blocks:        200.46.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:cb:aa:f6:40:1b:69:7f:bf:29:48:e8:43:d2:d3:d7:fb:43:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:53 2024 GMT
            Not After : Mar  4 17:54:53 2025 GMT
        Subject: CN=BCE8E2B7B4E5AD94419DA03736F9B58827028D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:52:08:97:d1:e0:79:af:87:a2:a1:1e:b2:
                    88:63:8d:98:19:f2:40:af:3b:5a:28:66:fd:cd:2b:
                    db:0c:ba:76:6b:0d:f9:61:7f:70:08:ab:4f:3f:9b:
                    b1:85:d5:91:98:7a:dc:0c:ba:e0:2b:83:9e:91:1a:
                    88:4d:98:7b:16:04:d3:c7:ac:7c:8a:a5:89:bd:d3:
                    93:a7:24:1c:d6:90:c5:8a:07:e4:48:5a:ea:11:43:
                    05:de:83:ee:89:75:72:36:98:fb:ee:65:06:2f:fc:
                    6a:db:19:92:62:7f:84:4d:55:d9:69:d4:ce:9d:55:
                    d8:9b:0c:7b:60:de:f7:89:b1:51:ec:86:a1:bf:c7:
                    41:a4:cd:2a:27:d2:af:a8:43:93:92:8f:19:c8:5e:
                    73:6c:f5:23:a2:c6:5e:14:b9:d0:ec:e4:d3:20:cf:
                    a8:da:c4:27:63:22:49:73:b3:e8:1f:59:7a:87:4c:
                    73:b2:53:0e:51:51:cf:63:9c:33:bd:cc:82:0b:f8:
                    d1:bc:ac:8b:f1:11:6c:e9:3b:24:a1:fb:04:47:61:
                    89:3b:91:a4:80:cf:c9:9f:08:e0:d3:10:d3:ef:a4:
                    ec:0a:a1:03:c8:10:a3:45:4c:1c:fc:6f:ab:46:09:
                    73:6c:46:10:b6:ce:de:b1:f6:f9:ae:55:0f:50:f5:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E8:E2:B7:B4:E5:AD:94:41:9D:A0:37:36:F9:B5:88:27:02:8D:61
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27760.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:9f:58:f0:b5:1d:b2:b9:21:45:53:83:9c:cd:3b:36:3e:
         6d:e4:4d:5f:8b:51:4c:4c:55:e0:55:09:2b:41:27:8e:ee:c6:
         07:17:fa:8f:75:34:38:c3:69:8e:db:56:6d:98:37:94:d6:67:
         66:ad:1b:08:7f:2d:0f:35:e3:ab:d0:ff:e2:59:9c:a6:fc:fd:
         88:88:7e:e7:9d:5a:2a:2c:17:bf:82:43:cd:25:e6:04:08:14:
         6b:4d:2d:b0:cf:6d:49:08:19:f5:17:cf:31:0c:32:30:13:b5:
         16:f4:24:57:02:c1:d0:18:23:a1:d2:74:4c:a8:78:d0:ce:4c:
         d6:b0:4d:e2:93:9c:b6:43:45:74:42:48:9b:f0:d5:37:9f:4b:
         fc:49:80:d1:bd:09:0e:4c:41:25:6e:48:92:1e:79:4e:0f:6a:
         af:8b:6d:a3:02:b1:e1:cd:c3:b6:d4:5a:27:51:1e:09:56:ea:
         6b:c8:aa:b5:01:30:fc:69:54:91:fa:fe:31:0b:0c:1c:7f:b1:
         c0:90:e2:d3:d1:9d:61:c5:29:a7:cd:60:8a:28:cc:cc:fc:ce:
         c1:89:30:b6:63:03:cc:ee:8f:14:ef:02:b5:cf:07:89:47:41:
         5d:7c:ad:11:d5:a6:9f:b7:b3:c1:55:c8:95:8a:00:d4:0c:d8:
         f3:5f:a6:ea
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIURC7LqvZAG2l/vylI6EPS09f7Q30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNDAzMDUxNzQ5NTNaFw0yNTAzMDQxNzU0NTNaMDMxMTAvBgNV
BAMTKEJDRThFMkI3QjRFNUFEOTQ0MTlEQTAzNzM2RjlCNTg4MjcwMjhENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcFIIl9Hgea+HoqEesohjjZgZ
8kCvO1ooZv3NK9sMunZrDflhf3AIq08/m7GF1ZGYetwMuuArg56RGohNmHsWBNPH
rHyKpYm905OnJBzWkMWKB+RIWuoRQwXeg+6JdXI2mPvuZQYv/GrbGZJif4RNVdlp
1M6dVdibDHtg3veJsVHshqG/x0GkzSon0q+oQ5OSjxnIXnNs9SOixl4UudDs5NMg
z6jaxCdjIklzs+gfWXqHTHOyUw5RUc9jnDO9zIIL+NG8rIvxEWzpOySh+wRHYYk7
kaSAz8mfCODTENPvpOwKoQPIEKNFTBz8b6tGCXNsRhC2zt6x9vmuVQ9Q9VHjAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUvOjit7TlrZRBnaA3Nvm1iCcCjWEwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG
RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMyNzc2MC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgu5TAN
BgkqhkiG9w0BAQsFAAOCAQEAjvKfWPC1HbK5IUVTg5zNOzY+beRNX4tRTExV4FUJ
K0Enju7GBxf6j3U0OMNpjttWbZg3lNZnZq0bCH8tDzXjq9D/4lmcpvz9iIh+551a
KiwXv4JDzSXmBAgUa00tsM9tSQgZ9RfPMQwyMBO1FvQkVwLB0BgjodJ0TKh40M5M
1rBN4pOctkNFdEJIm/DVN59L/EmA0b0JDkxBJW5Ikh55Tg9qr4ttowKx4c3DttRa
J1EeCVbqa8iqtQEw/GlUkfr+MQsMHH+xwJDi09GdYcUpp81giijMzPzOwYkwtmMD
zO6PFO8Ctc8HiUdBXXytEdWmn7ezwVXIlYoA1AzY81+m6g==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org