Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27872.roa
File:                     AS27872.roa (raw, json)
Hash identifier:          FwIGyucK/ahr/slB+BSldBKxrp8W8tb1wJOzVk8KF8A=
Subject key identifier:   4E:6D:E2:9C:36:7A:62:07:AD:EF:33:87:82:40:F3:DB:99:35:07:A7
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       114346DBB9B58056C972F1675C2F7338634F49F6
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27872.roa
Signing time:             Fri 27 Mar 2026 21:05:05 +0000
ROA not before:           Fri 27 Mar 2026 21:00:05 +0000
ROA not after:            Fri 26 Mar 2027 21:05:05 +0000
asID:                     27872
IP address blocks:        201.234.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:43:46:db:b9:b5:80:56:c9:72:f1:67:5c:2f:73:38:63:4f:49:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:05 2026 GMT
            Not After : Mar 26 21:05:05 2027 GMT
        Subject: CN=4E6DE29C367A6207ADEF33878240F3DB993507A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:a8:7a:2e:59:0d:80:7e:a4:6c:88:f4:5f:
                    a1:98:1e:dc:c3:19:a1:a1:31:85:35:6b:a8:ad:ad:
                    27:48:0d:c5:bc:3a:fd:c0:03:7e:ee:a3:79:1a:03:
                    0d:71:48:e5:9d:a2:39:89:ec:19:2e:b8:6c:a9:fb:
                    9f:2f:41:a8:63:80:0d:47:68:3c:40:dd:e5:53:90:
                    56:d8:81:93:19:d3:8c:bc:34:1f:99:ac:58:57:09:
                    87:75:ee:dc:a1:cf:a1:bb:5d:bc:4b:bd:2a:56:09:
                    d5:91:17:13:fb:b6:cf:e2:6f:bd:c2:2a:d9:e0:3f:
                    67:f4:2c:eb:dd:ac:66:ea:e0:54:7a:a8:82:43:32:
                    11:94:59:4b:67:65:db:55:d5:11:22:a8:6f:d4:39:
                    7a:17:fe:d4:9d:b4:a0:3a:2b:96:df:bc:16:0f:b6:
                    64:e7:be:76:1b:8b:26:5f:27:32:3c:8e:26:6e:ae:
                    e0:b2:e1:b2:88:be:14:1d:c9:09:49:3b:75:f0:dc:
                    1b:20:d6:a7:71:09:5b:34:cb:4d:c6:2f:86:ff:d0:
                    77:67:a7:de:8c:32:3c:1e:c4:71:f0:ff:15:3b:92:
                    8d:fc:86:78:18:3c:58:92:0c:8b:af:20:bc:4d:de:
                    4a:b5:8a:c5:12:67:13:84:c1:8a:27:07:02:d8:35:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:E2:9C:36:7A:62:07:AD:EF:33:87:82:40:F3:DB:99:35:07:A7
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27872.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:0c:e1:df:cf:e4:2d:68:7f:f4:27:e3:6c:fd:31:4b:01:
         e1:9b:07:2d:6f:b3:e0:f8:a0:1c:cb:18:26:ac:16:ee:35:ad:
         b7:12:f8:12:2d:0c:eb:11:7b:cb:94:75:c9:e1:1c:bd:af:3e:
         b9:98:96:f5:a5:ac:cd:ee:11:9c:90:65:33:b7:40:c1:60:f3:
         fc:ba:b8:87:e7:3b:6d:8a:7a:c4:a0:29:80:04:60:13:78:28:
         33:bb:cd:23:9d:f3:c6:76:bd:8e:10:a7:7b:11:43:cb:78:3f:
         9e:09:29:9f:f0:5a:d7:0c:d8:ce:cd:fa:0b:c6:a4:0c:f2:04:
         da:b1:fc:48:47:4c:c1:d9:13:a6:bc:5a:0f:60:d0:6d:7b:b4:
         80:4a:c2:a4:d4:0c:9d:77:72:9b:55:e3:e7:17:82:ec:4b:9f:
         4c:a9:f2:e5:20:77:7f:5d:0a:2f:99:4d:e1:8f:de:e8:0a:1b:
         d7:fc:bd:18:72:cd:29:d5:92:cf:fc:0b:97:e9:54:2c:88:4e:
         77:8b:81:5e:13:d8:41:f6:66:8f:7d:05:c0:25:29:eb:2d:54:
         fa:98:58:31:f9:3d:10:a7:2e:13:a2:4b:8f:87:e0:e0:f7:ba:
         8f:72:a3:56:cf:f1:12:2b:10:74:62:ca:b5:79:d3:9a:83:f6:
         8f:0d:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:34 2026 by rpki-client