Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27915.roa
File:                     AS27915.roa (raw, json)
Hash identifier:          bTKZbJYVagCPFEwsp6Z1B6Mg84OhuMtH718ak9LSu+Q=
Subject key identifier:   94:57:BE:EE:89:A0:81:82:77:DD:6E:E1:92:A1:A9:EA:66:6B:B8:CA
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       6DBCCEF0871FA708A5D24519B48F74F6A8E2C734
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27915.roa
Signing time:             Tue 05 Mar 2024 17:54:56 +0000
ROA not before:           Tue 05 Mar 2024 17:49:56 +0000
ROA not after:            Tue 04 Mar 2025 17:54:56 +0000
asID:                     27915
IP address blocks:        201.218.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bc:ce:f0:87:1f:a7:08:a5:d2:45:19:b4:8f:74:f6:a8:e2:c7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:56 2024 GMT
            Not After : Mar  4 17:54:56 2025 GMT
        Subject: CN=9457BEEE89A0818277DD6EE192A1A9EA666BB8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:fc:a4:5b:ef:2e:61:e9:8d:ee:5d:19:61:
                    b2:79:ba:2c:e3:3b:47:a2:8f:ac:23:c3:ac:f6:8b:
                    64:51:69:48:a5:94:49:4a:04:60:7d:e8:f1:61:ff:
                    1b:f1:79:20:3d:43:4f:9c:99:29:0f:f0:8a:5e:c0:
                    9a:a1:4a:94:c7:aa:9f:17:e0:cc:40:02:02:2b:3f:
                    15:a4:2d:86:e4:a8:83:c0:9f:79:55:a3:29:13:a8:
                    80:1f:08:6a:f7:15:11:9c:db:bf:f5:a8:a7:cf:b9:
                    2b:19:d5:e6:95:b7:59:78:b6:72:c2:73:17:21:3f:
                    13:e6:7a:11:f6:81:b6:33:49:4e:41:d9:5a:3d:e6:
                    5e:2e:e3:9b:01:15:e9:b7:cb:7e:12:36:6d:8f:e6:
                    5f:e0:66:e1:2d:b5:5b:82:1f:8a:9d:b6:36:53:6d:
                    8c:50:eb:9e:7c:4c:61:24:d9:e2:b5:db:7b:d5:1e:
                    8b:89:49:db:93:ed:80:0d:74:be:f6:9a:a1:dc:ef:
                    c8:81:54:2c:09:9b:7b:30:71:ed:73:73:53:ba:6a:
                    26:42:59:a5:aa:ae:b2:f2:6c:f8:97:0b:6c:73:3e:
                    42:30:25:8a:c6:8f:79:ff:a6:1b:a9:c5:62:88:42:
                    ee:17:00:8f:9a:3a:19:84:dd:21:77:e1:0a:20:72:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:BE:EE:89:A0:81:82:77:DD:6E:E1:92:A1:A9:EA:66:6B:B8:CA
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27915.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:33:43:7d:6c:02:4e:ab:40:87:77:b5:70:7d:19:19:d2:
         ca:75:c3:e0:6c:38:0c:7d:27:3b:4e:75:63:e5:97:0b:de:cf:
         a3:38:f6:c3:72:23:f3:2d:38:58:cc:a0:97:8f:d9:b1:7b:b8:
         69:ee:17:75:cc:e9:a7:e8:74:14:c1:b2:60:a0:06:0f:ed:5e:
         22:e9:09:3e:00:f7:04:c2:02:e1:47:3e:4b:ff:26:fe:88:2a:
         87:e4:c1:98:17:ca:f8:fc:47:79:1c:8c:7f:3e:06:b6:1a:c3:
         92:88:1e:96:85:04:3b:43:c3:c0:6e:27:99:25:ff:eb:da:1f:
         ba:17:e4:ad:14:91:f7:c1:7d:9b:00:ab:52:e1:21:cb:af:88:
         25:ee:c3:78:98:03:6a:df:39:02:d1:13:a4:74:17:b6:2a:06:
         e5:eb:22:3e:ae:b6:50:d2:76:f9:fb:41:37:9c:24:23:04:72:
         16:54:66:ce:51:0d:b3:93:fd:c7:16:70:ff:24:b7:51:cd:a3:
         d8:e0:85:77:58:8c:00:e5:c0:0c:40:4a:42:82:bb:41:70:a1:
         a0:7c:c5:c7:83:8b:e4:4f:34:48:6d:70:fc:91:ef:5e:f7:e4:
         cf:eb:e8:93:76:80:de:2c:07:95:6f:d5:37:5c:2c:a2:52:dc:
         07:3e:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org