Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27944.roa
File:                     AS27944.roa (raw, json)
Hash identifier:          DOrI2/CZPMa8wO4LXRWxeIMp8q5wGQCmEXC6EXXGk8Q=
Subject key identifier:   75:F3:3B:A7:39:A9:C9:9C:E3:67:22:D0:3A:8E:44:19:25:32:0A:96
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       03D15262EFAA0F4FC3E234B3582BF12C0BB9E4AE
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27944.roa
Signing time:             Tue 05 Mar 2024 17:54:52 +0000
ROA not before:           Tue 05 Mar 2024 17:49:52 +0000
ROA not after:            Tue 04 Mar 2025 17:54:52 +0000
asID:                     27944
IP address blocks:        201.218.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d1:52:62:ef:aa:0f:4f:c3:e2:34:b3:58:2b:f1:2c:0b:b9:e4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:52 2024 GMT
            Not After : Mar  4 17:54:52 2025 GMT
        Subject: CN=75F33BA739A9C99CE36722D03A8E441925320A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:77:0d:e1:d3:01:ca:b5:82:b5:4e:db:6c:f3:
                    8f:74:64:19:6f:25:3f:6b:3b:91:e1:b9:a2:69:71:
                    0b:73:0f:a9:6b:1f:73:29:8f:f7:51:7d:30:b2:82:
                    13:33:98:89:ad:1a:3f:3b:57:7a:f0:d7:79:4b:65:
                    55:d4:db:75:23:c1:09:66:17:95:1a:ed:4f:48:35:
                    8d:37:d6:ec:6d:20:5b:1b:8c:cf:70:44:1b:23:a5:
                    c2:60:23:5d:0c:24:b4:eb:75:22:26:18:a7:50:f8:
                    9e:b9:52:8b:73:73:94:5e:3c:22:a1:88:e2:50:f5:
                    29:65:59:a1:33:9a:24:92:63:02:dd:8d:ad:66:43:
                    0e:60:a5:69:b2:dc:34:1a:22:d5:b4:d4:86:a8:66:
                    9b:52:e8:bd:7f:7d:f9:ac:77:6a:28:92:de:5f:48:
                    f2:51:36:3f:6d:1e:de:2c:41:b0:5d:89:02:78:b4:
                    89:49:ff:20:6a:22:d6:7c:7e:af:b7:27:24:99:e2:
                    7d:94:52:08:d3:0b:f0:34:b8:39:4e:19:e2:1b:f6:
                    10:ed:81:34:61:db:49:16:32:2e:88:a4:7b:26:28:
                    a3:4b:07:e1:db:0a:07:56:bc:c1:fc:2f:5d:35:3d:
                    e3:62:90:9b:c8:29:8f:64:08:18:93:32:0e:69:d2:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F3:3B:A7:39:A9:C9:9C:E3:67:22:D0:3A:8E:44:19:25:32:0A:96
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27944.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:9b:71:54:0f:e4:4f:5e:1b:9b:b6:b7:f2:9c:ca:b2:d3:
         64:06:fe:e5:0d:94:55:db:53:c3:58:bf:6d:2d:c0:31:4b:48:
         93:b8:a1:4d:a8:ff:09:e0:64:58:ef:85:10:ad:e8:33:6b:9c:
         26:05:63:c8:95:81:2b:5e:07:73:d8:a6:53:43:fd:3b:8e:a7:
         f6:cf:d1:b6:38:13:ff:b9:5d:cf:28:29:ce:e7:1f:43:0f:c3:
         18:6b:e3:2d:f7:2a:9c:69:98:4d:56:76:63:e4:f4:0a:bf:c7:
         c9:02:9e:e5:ec:e5:34:28:b0:5f:51:3d:d3:60:b9:05:01:06:
         8c:e7:85:7e:cf:53:11:b7:0b:de:ba:2b:e4:f7:8d:8a:7e:13:
         b5:f1:e4:d1:90:31:44:26:cb:d8:2b:45:7b:36:52:64:91:65:
         61:c4:17:ee:5a:cc:2b:20:de:1f:29:9c:08:38:37:fe:b0:76:
         00:23:54:cd:42:38:1f:f7:ba:19:e9:0b:a3:97:64:fb:c0:dc:
         ec:5f:ad:12:3e:a5:22:ee:da:57:02:f6:f4:4d:a0:45:07:7c:
         6f:e4:89:04:56:d5:f5:ca:28:ad:12:b8:5a:f0:96:06:75:64:
         9f:10:be:88:5f:d3:fa:b9:23:3f:dd:99:a9:fc:b8:b2:e5:0f:
         69:f6:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org