Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27989.roa
File:                     AS27989.roa (raw, json)
Hash identifier:          VzluHYT6ZPkcBXGZpZHYBvpJ1/g0kr5p+UX4hQ6Ov+U=
Subject key identifier:   E0:4F:15:7B:05:61:13:13:E4:1E:CB:B1:FE:3A:01:20:2C:D6:7D:66
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       499DEA1921B684E3682D9B5732DCB6518584B041
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27989.roa
Signing time:             Fri 27 Mar 2026 21:05:01 +0000
ROA not before:           Fri 27 Mar 2026 21:00:01 +0000
ROA not after:            Fri 26 Mar 2027 21:05:01 +0000
asID:                     27989
IP address blocks:        190.216.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 17:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9d:ea:19:21:b6:84:e3:68:2d:9b:57:32:dc:b6:51:85:84:b0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:01 2026 GMT
            Not After : Mar 26 21:05:01 2027 GMT
        Subject: CN=E04F157B05611313E41ECBB1FE3A01202CD67D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:83:34:48:85:5e:17:26:09:05:36:f9:8e:
                    d3:b7:e0:57:98:ab:f3:b0:64:73:0a:65:7d:2e:94:
                    64:8a:80:e9:8a:1f:47:16:0b:2a:c5:db:96:e2:52:
                    f5:2a:b2:29:5a:96:f3:c2:f7:10:2c:f8:57:29:f6:
                    06:3e:7a:7e:40:ed:f3:24:41:8c:2e:ff:aa:45:eb:
                    94:ef:0a:64:73:e6:8e:02:07:c7:da:91:65:c9:3d:
                    55:6a:9e:e4:e9:c5:b4:d3:a4:0d:db:82:ca:d1:dc:
                    1a:3b:1e:4e:20:aa:02:39:6b:07:53:86:c7:a1:23:
                    bb:9e:b1:5d:28:6c:5e:5c:d7:b5:82:e3:8e:5b:b4:
                    46:16:09:c6:b5:79:35:46:e5:3c:cf:03:ae:d6:1e:
                    62:08:31:02:fb:d6:99:b5:49:f8:d9:87:ba:ab:9d:
                    31:f8:b4:fb:dc:be:f3:86:26:bb:77:8e:fd:fb:cd:
                    a9:d2:9e:78:83:95:d9:92:ee:23:57:35:63:1d:91:
                    aa:71:21:02:1a:88:b9:d2:14:d6:e3:34:14:5c:2f:
                    ca:0d:9b:81:aa:27:4a:a7:68:d4:43:0f:f1:87:cd:
                    9a:ac:ef:e2:83:52:c8:ff:f9:9c:89:35:b2:6c:20:
                    6a:36:8f:b8:b5:81:5d:af:71:d9:66:3b:35:12:2d:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4F:15:7B:05:61:13:13:E4:1E:CB:B1:FE:3A:01:20:2C:D6:7D:66
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27989.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:19:a7:79:a4:d6:fc:7d:43:dc:45:1d:87:c6:f0:52:35:
         fc:c6:67:2e:4e:38:1a:6b:5c:bb:1a:ad:df:f3:55:da:e3:47:
         ef:fe:6b:c3:55:b1:51:33:37:09:4f:b3:20:b0:76:84:3e:93:
         94:70:ad:b8:f1:49:4d:40:42:7f:d2:15:17:33:9f:68:3e:5b:
         ad:89:6c:35:da:4e:28:0a:03:34:7d:8b:69:08:44:96:68:54:
         bb:eb:b9:75:17:d3:31:53:0a:63:0b:c2:f7:0e:59:67:73:55:
         b7:4a:e0:b6:70:4a:94:4b:0b:fa:7a:3e:e2:20:65:a3:13:f5:
         c3:60:2a:c7:1b:70:c5:2e:dc:5f:e8:d0:e0:56:c6:48:ac:e4:
         e0:eb:bb:76:47:8e:0e:b4:b4:3d:68:ef:6c:08:d6:cb:89:79:
         cf:14:ab:e6:c4:a8:f4:ac:64:67:15:b1:23:c5:6a:a8:cc:29:
         1e:83:5c:28:0f:74:44:a3:e4:f1:96:72:77:4b:9f:0f:90:3c:
         5c:76:2e:00:91:10:84:bb:4f:a1:b4:8b:a4:e8:45:33:79:b0:
         17:5a:8a:92:eb:27:3d:ee:4d:5f:fc:80:d3:e9:9b:de:c1:1a:
         18:6b:70:05:71:72:6e:30:e5:db:6c:08:62:6a:32:11:14:bd:
         05:29:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:20 2026 by rpki-client