Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27998.roa
File:                     AS27998.roa (raw, json)
Hash identifier:          gRdfQ3rOUfdt2lhQmcEMtLs8bDkK90NiNAX/bsNTJlI=
Subject key identifier:   D8:AD:3A:1E:2E:D2:A8:20:5F:25:6A:2D:AF:0C:F2:A9:46:22:80:C2
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       720BE86F58DBD2EF1ADD180118901DCFCF80796C
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27998.roa
Signing time:             Fri 27 Mar 2026 21:05:08 +0000
ROA not before:           Fri 27 Mar 2026 21:00:08 +0000
ROA not after:            Fri 26 Mar 2027 21:05:08 +0000
asID:                     27998
IP address blocks:        190.216.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0b:e8:6f:58:db:d2:ef:1a:dd:18:01:18:90:1d:cf:cf:80:79:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:08 2026 GMT
            Not After : Mar 26 21:05:08 2027 GMT
        Subject: CN=D8AD3A1E2ED2A8205F256A2DAF0CF2A9462280C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:0a:ab:1c:e0:c1:c8:14:a4:0b:fa:de:ac:
                    22:c1:ee:fa:7b:ed:c4:fd:98:77:ca:91:c9:29:b5:
                    8b:df:42:49:53:95:63:ee:c0:bc:56:42:72:20:da:
                    f0:57:40:9f:c9:1a:6c:7f:ed:ea:07:fa:4a:01:9e:
                    cd:6b:38:95:16:b0:4e:5a:75:7f:ec:0a:ba:4e:4d:
                    a7:42:c5:89:4f:54:2b:e8:01:20:5c:5e:b1:ac:39:
                    8d:66:03:4d:1f:e1:53:97:b8:04:aa:33:68:ae:d2:
                    d8:67:1f:53:9d:28:23:57:fa:47:9f:16:84:0a:e2:
                    c9:38:3c:78:13:11:6d:2d:42:46:21:f9:3f:5d:8a:
                    5b:a8:47:df:bf:a7:06:23:33:1f:3c:ab:1f:c9:90:
                    03:6d:af:ab:ca:1b:6e:be:dd:1f:3b:4b:6a:5b:67:
                    af:33:24:58:20:4d:99:eb:88:48:0a:58:89:64:1e:
                    a6:0f:a5:6b:fb:e1:ab:75:d9:e1:15:2f:4e:53:6a:
                    bc:4d:27:fd:28:39:fb:2d:30:b7:bf:f2:5c:4c:03:
                    cf:ba:4f:7d:72:c8:a4:fa:29:b9:c8:8e:32:9a:ed:
                    ff:e9:e5:92:4e:a4:38:29:56:28:61:14:b7:e8:0a:
                    67:c9:ef:ea:3e:be:75:33:35:a4:bc:60:8b:b8:f0:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:3A:1E:2E:D2:A8:20:5F:25:6A:2D:AF:0C:F2:A9:46:22:80:C2
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS27998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d2:f4:1c:b8:ee:5f:d7:d2:02:b4:ba:c0:dc:bd:c3:93:f0:
         3b:5c:e4:3a:cc:27:0b:18:c3:33:e4:de:a5:29:7b:7d:36:30:
         ce:7b:f0:eb:e3:ea:22:f1:7f:f1:7a:25:c8:71:20:2e:74:33:
         35:f2:63:fa:8e:53:c5:f7:23:d1:34:91:c7:9e:b4:1a:85:c1:
         eb:fb:5a:75:fc:28:be:32:a5:f9:0f:17:9c:61:c7:3b:04:1b:
         15:ee:59:74:c2:aa:13:79:9a:2d:77:19:67:f9:94:5a:f4:27:
         64:fe:a9:69:ec:88:68:8f:70:04:63:7b:d2:e3:ab:b3:67:9e:
         0e:d2:bc:f1:4f:f3:84:17:69:0e:24:22:f1:5f:3f:64:86:8e:
         5e:73:39:a8:c7:be:e9:fa:e0:a4:8b:18:f3:fd:a3:9c:9e:c7:
         bc:91:5e:39:4b:f5:73:9e:b9:b0:61:c0:e6:d3:45:8e:dc:ec:
         61:89:63:d4:c4:31:4d:aa:98:6b:91:9c:ba:ea:49:07:40:58:
         b8:34:53:2c:e7:42:4c:b4:ac:8b:74:8d:db:ae:d1:4b:63:f8:
         19:a9:a1:a1:31:90:80:cb:c0:c0:a2:96:ab:14:c4:56:c3:19:
         b2:31:9f:d6:e9:15:66:37:18:99:8b:b9:f2:0a:a4:0b:33:8d:
         d6:3c:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:25 2026 by rpki-client