Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27812.roa
File:                     AS27812.roa (raw, json)
Hash identifier:          ezfdl2tW6bQDax5U0KujKdgZ33NlyitrwqE9wi2ad+E=
Subject key identifier:   3D:01:4D:93:5E:B6:AF:0D:21:D9:27:03:9A:9A:85:C2:1A:7E:A7:9B
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       1F5FA035F3DBDC47F1CF38AE28EBF1CD87D0C438
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27812.roa
Signing time:             Tue 05 Mar 2024 17:54:56 +0000
ROA not before:           Tue 05 Mar 2024 17:49:56 +0000
ROA not after:            Tue 04 Mar 2025 17:54:56 +0000
asID:                     27812
IP address blocks:        201.218.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5f:a0:35:f3:db:dc:47:f1:cf:38:ae:28:eb:f1:cd:87:d0:c4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:56 2024 GMT
            Not After : Mar  4 17:54:56 2025 GMT
        Subject: CN=3D014D935EB6AF0D21D927039A9A85C21A7EA79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:f6:eb:c5:aa:89:68:80:cd:80:41:15:76:
                    15:5c:fe:ca:5a:3b:97:24:e6:16:a4:ef:85:88:33:
                    f1:a4:eb:7f:1b:42:32:77:b0:9d:b7:72:13:f7:1c:
                    c4:9a:13:66:80:cb:eb:8f:2e:68:2b:84:f2:72:23:
                    ad:01:16:f0:0d:31:f8:59:96:98:74:bf:d3:c9:11:
                    ca:69:85:8a:a3:ba:b1:af:b9:40:46:ce:74:0e:60:
                    fc:24:da:52:b6:49:93:a3:31:4f:62:d5:48:ff:43:
                    73:d5:8a:32:07:c9:86:72:f1:49:4f:ec:a2:3b:37:
                    b1:3a:b1:6c:17:bf:ee:c5:e0:c3:52:73:6f:f3:46:
                    3d:31:66:ab:45:ce:f8:0f:5e:e8:65:cc:d6:9e:b0:
                    f0:cf:15:2c:ef:3a:dc:1f:23:46:fe:14:61:18:05:
                    53:ee:5a:3c:e1:4a:cb:21:9b:c3:1b:44:49:1e:48:
                    7a:75:1c:a3:e7:e0:6b:21:ae:d7:67:a4:2a:72:c9:
                    1f:d2:17:59:75:95:cf:7e:13:4a:41:5f:49:1e:49:
                    6f:7b:f9:8f:2a:bb:7e:25:d1:30:f3:3d:12:c3:3b:
                    00:66:08:63:ba:c6:3a:1d:22:49:5e:c8:3e:d1:98:
                    d8:c2:f1:dd:29:33:c6:9a:f8:b0:e6:1e:e1:c5:c9:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:4D:93:5E:B6:AF:0D:21:D9:27:03:9A:9A:85:C2:1A:7E:A7:9B
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:60:eb:14:d5:d0:de:3e:93:b8:38:8b:44:0d:cd:57:2a:2d:
         79:2a:cb:bb:ad:1f:85:c7:9f:2b:d2:1c:2e:57:3c:3e:32:eb:
         ee:ae:6b:7a:d6:62:17:c9:9e:85:0e:1d:e7:07:c8:53:f0:76:
         f7:d1:4a:e2:b4:e4:f3:62:ae:5f:1e:21:8a:de:10:23:cb:e3:
         ea:06:39:3f:07:69:6d:44:21:f7:9c:0f:8f:20:3e:7f:c3:9a:
         c7:43:5d:18:7a:90:0d:99:bc:9d:61:3c:ce:46:35:82:6b:41:
         ad:95:bc:d1:24:4b:f8:35:0b:71:05:00:16:e8:fe:e5:b1:33:
         ea:c3:25:9a:c2:d1:6a:cc:06:02:db:34:f7:6e:88:47:07:c9:
         45:09:9d:f9:24:b3:c1:5c:17:43:16:8c:65:d4:e8:d0:62:15:
         76:cc:d6:e6:6e:e3:28:4a:b0:ef:a7:2b:49:61:87:37:03:40:
         6c:48:f1:f4:36:a1:bf:f2:9f:35:fd:ce:f5:e4:10:c8:fb:a7:
         06:27:32:ba:b5:29:56:13:81:dc:1d:7a:0e:e6:c6:84:0d:ac:
         1c:d0:d2:84:45:c4:08:f1:7a:d5:1f:93:a3:26:40:9d:a2:48:
         21:50:59:3c:d0:cf:a3:66:7b:a9:cf:c8:b3:06:61:07:a4:68:
         23:95:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org