Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27783.roa
File:                     AS27783.roa (raw, json)
Hash identifier:          lDA/+2c1R2V+/Utt5BIW3GGMw5asqgpQE68inZcPyvs=
Subject key identifier:   54:31:EA:42:1E:4F:1A:62:3C:35:99:A0:46:B2:93:CB:8A:C0:78:48
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       4BCD99317B3C030113E767AB0FCFA5D0EFCF0A26
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27783.roa
Signing time:             Tue 05 Mar 2024 17:54:53 +0000
ROA not before:           Tue 05 Mar 2024 17:49:53 +0000
ROA not after:            Tue 04 Mar 2025 17:54:53 +0000
asID:                     27783
IP address blocks:        200.46.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cd:99:31:7b:3c:03:01:13:e7:67:ab:0f:cf:a5:d0:ef:cf:0a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:53 2024 GMT
            Not After : Mar  4 17:54:53 2025 GMT
        Subject: CN=5431EA421E4F1A623C3599A046B293CB8AC07848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:e3:c9:e6:16:6b:91:51:62:82:35:91:c2:
                    ef:bd:49:b1:54:11:ca:45:a7:23:b5:69:fe:d5:77:
                    c7:47:d7:1e:38:6b:07:d1:b2:5a:e7:6a:b2:8e:c7:
                    a2:4a:00:29:5c:85:99:14:05:63:3e:4b:4c:1a:dc:
                    37:b5:a7:ea:43:7b:30:9e:63:af:fb:34:b6:10:45:
                    86:b2:8f:f1:64:e5:a4:89:98:48:b2:0e:28:c3:2f:
                    d2:d2:6c:e1:b0:8b:ff:4e:7a:01:a0:40:45:4e:a6:
                    9d:9b:4c:67:f2:c9:a8:30:74:cf:fc:f5:47:41:e4:
                    27:72:0c:2f:65:10:38:93:d8:86:68:37:0d:6d:f0:
                    de:d3:91:7a:fd:04:66:5f:4f:bd:af:85:de:23:dc:
                    1c:fa:ae:2c:53:79:49:8b:0a:3e:76:91:af:f7:7c:
                    b9:17:79:2a:9b:15:dc:0f:6c:19:75:27:b7:eb:a9:
                    72:bf:b5:a0:ab:b3:71:48:95:f9:34:95:96:02:25:
                    a9:c9:8b:99:b0:bc:59:1b:0f:db:56:1c:80:01:27:
                    dc:2a:00:84:2a:81:47:fa:ab:c8:90:fe:bb:2a:2f:
                    e8:0d:27:fd:bc:0a:37:28:7e:95:0a:c5:31:04:32:
                    24:17:72:d5:49:7c:e5:70:9f:64:24:32:e6:a7:92:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:EA:42:1E:4F:1A:62:3C:35:99:A0:46:B2:93:CB:8A:C0:78:48
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27783.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:52:2f:cd:a4:44:26:7b:5b:dc:ef:07:f2:70:85:0b:fc:
         b0:f1:1a:04:99:e4:26:18:c4:8e:24:a7:b3:09:48:ea:0a:96:
         00:5b:54:ed:dc:9a:c5:c1:e4:47:7a:f0:aa:6f:8a:38:da:23:
         39:2a:00:56:67:e3:21:70:cc:ba:6a:34:75:25:29:48:8e:ed:
         57:e5:99:73:c0:1e:62:b1:d1:39:1e:6f:08:f7:a4:59:a2:98:
         73:8c:2b:05:bc:3d:73:d3:d3:5f:f8:22:db:fc:ea:aa:b0:b3:
         84:2e:eb:65:06:5c:c5:86:b7:80:08:23:a3:ad:fb:c7:3f:08:
         c0:07:11:1e:c6:15:10:21:3d:79:d8:16:18:cd:11:31:b5:0d:
         e8:6c:d7:8e:27:66:3d:5d:c4:ce:43:a3:1f:ca:9e:1c:d2:b5:
         0a:ea:d1:38:45:c8:02:c0:1f:f5:88:69:03:ec:d2:f4:cd:e3:
         c5:4a:37:27:ea:1c:5b:98:a5:23:fc:bc:ba:e9:81:57:26:36:
         62:1c:0a:fe:1e:bb:b7:f9:de:f6:4c:0e:1e:ea:86:e1:4d:79:
         80:9c:e0:a2:57:40:bb:5e:e1:7b:66:cd:a9:8e:24:d1:54:ed:
         b2:03:e4:ec:1e:f2:8d:7a:12:79:a3:ee:1d:f9:0b:42:77:dc:
         26:3e:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org