Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27860.roa
File:                     AS27860.roa (raw, json)
Hash identifier:          4r8wNtxsVIdQbTOoPeegTn0mnkDXD5R+6UgDaWybvys=
Subject key identifier:   FE:16:E7:2D:49:99:46:43:B0:B6:C8:1E:74:A0:61:F8:41:E1:1B:45
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       643B66D56D8059EAE15D3994576362D2D35DFC75
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27860.roa
Signing time:             Tue 05 Mar 2024 17:54:59 +0000
ROA not before:           Tue 05 Mar 2024 17:49:59 +0000
ROA not after:            Tue 04 Mar 2025 17:54:59 +0000
asID:                     27860
IP address blocks:        201.218.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:66:d5:6d:80:59:ea:e1:5d:39:94:57:63:62:d2:d3:5d:fc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:59 2024 GMT
            Not After : Mar  4 17:54:59 2025 GMT
        Subject: CN=FE16E72D49994643B0B6C81E74A061F841E11B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:e8:61:c8:9c:72:26:f2:77:8f:f5:8c:81:
                    42:d1:b9:f4:28:15:04:81:1f:9b:97:1e:85:28:29:
                    08:8a:85:0e:31:b1:cd:28:43:92:79:cd:e4:69:a0:
                    f4:ba:4d:35:12:c1:91:aa:99:a8:be:4f:30:53:9d:
                    22:b8:37:8a:03:e1:d2:90:dd:62:8d:28:cc:e4:a8:
                    ac:83:a4:09:42:9c:99:35:46:73:1c:4e:91:d7:d8:
                    fa:a5:5a:86:cf:e9:a5:ce:3e:de:e9:e3:b1:0d:8f:
                    30:e6:a1:ed:e3:58:5f:fc:c2:f2:d3:68:33:2b:4e:
                    1e:7a:f9:55:d5:6b:47:62:cd:b2:31:3f:a8:58:10:
                    6b:56:2a:11:1f:f4:71:73:43:f1:24:1a:fe:57:63:
                    83:60:1c:90:80:6a:b1:78:50:07:16:fa:69:52:85:
                    64:d1:da:ee:0a:67:0c:90:24:0d:08:81:13:0b:d8:
                    aa:85:a0:6d:67:95:74:02:c7:8e:77:59:02:04:cd:
                    47:d2:96:e3:94:f0:88:88:17:af:f7:9d:79:a3:c2:
                    06:d3:0f:5b:c9:54:ae:af:1f:05:cf:2c:ed:14:09:
                    81:83:e2:46:56:84:b5:28:bb:d7:2b:92:51:51:58:
                    38:b3:69:bd:de:0a:67:0a:0c:fe:40:6a:45:97:81:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:E7:2D:49:99:46:43:B0:B6:C8:1E:74:A0:61:F8:41:E1:1B:45
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27860.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:68:3c:c1:94:05:fc:e1:d2:00:76:5a:84:18:97:b7:19:9b:
         ce:fe:65:87:da:2b:8f:cb:ad:41:5b:59:6c:7c:4e:49:8e:bc:
         59:6e:fb:48:40:dc:d4:6e:97:8e:8f:fc:98:2d:dd:c3:18:60:
         6b:c2:79:5c:61:ee:62:57:13:0c:0a:99:8c:a8:19:b4:cd:96:
         dc:7f:98:12:02:f6:55:d4:ee:3b:d8:fd:4b:3c:80:48:aa:6f:
         77:fa:8e:49:b8:8c:28:a7:a5:35:78:d6:4a:c1:7b:58:64:24:
         a1:af:7f:77:b6:c2:32:cb:60:c2:aa:61:a8:4f:94:8d:b5:8c:
         28:0c:52:ff:14:ad:c6:74:90:d3:ce:61:3f:96:c0:9e:24:32:
         ed:78:eb:5a:98:44:41:fb:46:ce:c6:65:3a:91:0c:74:b7:26:
         7a:6b:9a:35:3d:4e:d3:af:66:e8:d6:e6:e6:4c:6c:c4:27:f6:
         da:a3:c2:aa:f5:f9:4f:49:fd:8b:2b:35:da:c1:43:7f:8f:85:
         16:88:ac:aa:22:6c:49:57:f1:67:41:92:3a:96:b5:14:dd:8d:
         8a:bc:b4:44:ca:ed:92:a6:ab:77:bf:fa:66:ce:89:5c:34:06:
         cf:fb:c7:59:bf:cf:a3:12:9b:1e:8d:96:19:b2:96:d6:94:a4:
         6f:2f:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org