Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27951.roa
File:                     AS27951.roa (raw, json)
Hash identifier:          YTnaTC+9twkynEnHyCejHU7Ze/67NeYdmpFvcOOLcqI=
Subject key identifier:   41:79:22:0A:11:59:EF:19:97:37:75:A7:D1:B9:D9:4F:D5:4E:9A:EF
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       279963C6A6594773E9F9B6A5BE6D991397A93904
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27951.roa
Signing time:             Fri 27 Mar 2026 21:05:00 +0000
ROA not before:           Fri 27 Mar 2026 21:00:00 +0000
ROA not after:            Fri 26 Mar 2027 21:05:00 +0000
asID:                     27951
IP address blocks:        190.217.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:99:63:c6:a6:59:47:73:e9:f9:b6:a5:be:6d:99:13:97:a9:39:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:00 2026 GMT
            Not After : Mar 26 21:05:00 2027 GMT
        Subject: CN=4179220A1159EF19973775A7D1B9D94FD54E9AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:54:d3:13:3c:c8:ed:c2:36:e0:fd:18:4c:
                    0b:24:b3:e3:75:08:5e:25:63:5b:7b:9d:39:d1:9a:
                    d6:72:9b:c9:53:d5:58:00:f8:56:95:c9:27:5b:5c:
                    f7:7e:d0:eb:af:97:83:ec:5a:13:0d:fd:2d:3a:5f:
                    1a:f3:75:c8:aa:cd:36:d7:64:25:4a:19:7d:e9:4e:
                    a4:b1:a8:d6:86:39:f8:dc:2f:ea:7c:c7:6f:c4:08:
                    6f:5c:d5:1b:ef:b2:c4:92:ab:1b:5b:dd:8b:40:bf:
                    7d:96:d1:9e:81:8d:4e:c6:22:02:bf:eb:67:4c:bf:
                    ac:80:05:b1:01:2a:66:a6:7b:74:c5:c6:09:4e:0e:
                    68:a2:ba:a2:1c:dc:1f:5b:04:7d:72:f4:6c:b5:94:
                    4a:c5:6b:91:27:01:c4:7b:cb:fb:4e:69:6c:e1:2b:
                    f4:29:e9:86:32:2a:7e:06:b5:f2:61:f1:63:d6:36:
                    d2:b4:d6:cb:06:63:3b:56:0a:a3:14:29:d5:a1:0c:
                    26:58:ba:7d:83:4b:b5:fc:73:a8:2c:0e:17:0d:b5:
                    e3:ba:e9:ae:e9:8f:24:7f:44:cc:d0:be:f5:2c:f4:
                    26:05:2c:43:83:f6:49:1d:1a:b7:2b:49:89:27:ce:
                    a6:74:99:d7:05:85:80:76:e2:ab:75:52:13:13:6c:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:79:22:0A:11:59:EF:19:97:37:75:A7:D1:B9:D9:4F:D5:4E:9A:EF
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27951.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:49:02:38:0e:e7:a6:70:c7:38:f5:64:aa:73:9d:36:05:27:
         9e:73:2b:f2:ea:0c:cf:ca:08:48:dd:f9:57:59:3b:5f:21:46:
         4e:fb:bc:b9:39:d5:25:dd:53:74:22:b1:58:b7:e5:7c:49:64:
         33:37:e3:fa:a2:67:a8:07:0d:65:d2:01:8e:58:91:1a:9a:e7:
         43:40:e7:83:91:b6:d1:8e:10:3d:48:84:41:d6:ca:cc:0d:69:
         64:24:3e:88:68:c2:10:19:9a:6e:19:2b:44:fe:2a:89:42:c0:
         73:04:c2:84:84:a7:5f:b0:48:37:54:13:95:b1:24:e6:36:04:
         77:a7:aa:0c:69:98:b7:88:fa:b8:86:83:0f:24:6d:6c:38:35:
         ef:5b:af:15:be:24:3e:b6:1b:4a:4c:7b:0f:d7:7a:80:03:99:
         37:9d:4d:e7:f5:29:9c:fb:68:1d:69:1b:56:65:27:3d:32:67:
         62:c7:15:26:8e:b6:46:3b:af:ce:03:c1:12:8f:e8:8c:b0:4e:
         7b:29:11:77:01:c0:21:80:f2:da:ee:40:53:92:a7:92:be:05:
         c5:7f:83:3a:cc:9f:8d:76:c6:d7:dd:ee:4d:39:3f:3c:c5:03:
         39:29:f3:1e:ca:19:3d:9b:f4:37:5d:b4:6a:9f:91:3c:a1:e8:
         37:37:73:e0
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUJ5ljxqZZR3Pp+balvm2ZE5epOQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAzMjcyMTAwMDBaFw0yNzAzMjYyMTA1MDBaMDMxMTAvBgNV
BAMTKDQxNzkyMjBBMTE1OUVGMTk5NzM3NzVBN0QxQjlEOTRGRDU0RTlBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPVTTEzzI7cI24P0YTAsks+N1
CF4lY1t7nTnRmtZym8lT1VgA+FaVySdbXPd+0Ouvl4PsWhMN/S06XxrzdciqzTbX
ZCVKGX3pTqSxqNaGOfjcL+p8x2/ECG9c1RvvssSSqxtb3YtAv32W0Z6BjU7GIgK/
62dMv6yABbEBKmame3TFxglODmiiuqIc3B9bBH1y9Gy1lErFa5EnAcR7y/tOaWzh
K/Qp6YYyKn4GtfJh8WPWNtK01ssGYztWCqMUKdWhDCZYun2DS7X8c6gsDhcNteO6
6a7pjyR/RMzQvvUs9CYFLEOD9kkdGrcrSYknzqZ0mdcFhYB24qt1UhMTbHGBAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUQXkiChFZ7xmXN3Wn0bnZT9VOmu8wHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1ODBGQjIwMzgz
QjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQVMyNzk1MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7ZdDAN
BgkqhkiG9w0BAQsFAAOCAQEAdEkCOA7npnDHOPVkqnOdNgUnnnMr8uoMz8oISN35
V1k7XyFGTvu8uTnVJd1TdCKxWLflfElkMzfj+qJnqAcNZdIBjliRGprnQ0Dng5G2
0Y4QPUiEQdbKzA1pZCQ+iGjCEBmabhkrRP4qiULAcwTChISnX7BIN1QTlbEk5jYE
d6eqDGmYt4j6uIaDDyRtbDg171uvFb4kPrYbSkx7D9d6gAOZN51N5/UpnPtoHWkb
VmUnPTJnYscVJo62RjuvzgPBEo/ojLBOeykRdwHAIYDy2u5AU5Knkr4FxX+DOsyf
jXbG193uTTk/PMUDOSnzHsoZPZv0N120ap+RPKHoNzdz4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:10 2026 by rpki-client