Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
File:                     AS27672.roa (raw, json)
Hash identifier:          gl0ooHMWeMZ5bmhn6Jo46oDVTz2nEpp+gpChvdNtj+A=
Subject key identifier:   EA:59:D2:B7:15:21:18:29:D2:25:F7:A6:98:6B:D4:AD:7E:D1:B5:D5
Certificate issuer:       /CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
Certificate serial:       3150140D28570A658AA5A2F5F95AC2AE36394CF2
Authority key identifier: D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
Signing time:             Fri 18 Sep 2026 07:40:01 +0000
ROA not before:           Fri 18 Sep 2026 07:35:01 +0000
ROA not after:            Fri 17 Sep 2027 07:40:01 +0000
asID:                     27672
IP address blocks:        177.224.176.0/21 maxlen: 21
                          177.240.128.0/19 maxlen: 19
                          189.195.160.0/23 maxlen: 23
                          189.199.0.0/16 maxlen: 24
                          200.77.124.0/22 maxlen: 22
                          2806:260:1009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 Oct 2026 11:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:14:0d:28:57:0a:65:8a:a5:a2:f5:f9:5a:c2:ae:36:39:4c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
        Validity
            Not Before: Sep 18 07:35:01 2026 GMT
            Not After : Sep 17 07:40:01 2027 GMT
        Subject: CN=EA59D2B715211829D225F7A6986BD4AD7ED1B5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:23:de:bc:05:c8:4b:d2:d2:4b:38:c2:ab:
                    40:98:61:1d:64:cb:fd:38:6d:a3:58:67:2c:96:9c:
                    09:1d:cb:f0:42:57:d0:11:f9:17:80:6c:74:05:f4:
                    6b:c0:13:6a:84:b9:e1:41:c2:c2:31:af:5e:7c:3e:
                    2c:4a:42:27:03:98:16:01:85:cb:fb:0e:59:02:21:
                    7e:f6:8e:46:3c:6b:3e:35:93:4f:50:82:4a:0a:53:
                    45:dd:01:cd:64:52:48:ed:f0:d8:6c:a9:ea:11:62:
                    a4:75:83:a5:45:97:dd:fd:69:05:72:81:1c:a8:e8:
                    ae:85:2f:76:7d:a8:77:70:aa:da:b0:a8:59:3e:0b:
                    71:5f:5a:d6:de:67:84:a6:f9:b2:4a:c3:af:20:1a:
                    2a:70:86:7f:e5:85:b5:2d:19:ef:96:32:8b:55:55:
                    cd:ca:28:4c:39:a8:26:05:b6:6a:5c:6f:3b:85:88:
                    a7:0a:b3:5b:88:6a:4a:3b:a9:6c:02:1c:e1:a3:5c:
                    d1:00:e8:d5:a2:bb:0f:43:11:51:fc:27:af:21:86:
                    b9:81:c2:c6:13:3a:71:a0:7e:c7:db:40:31:42:cc:
                    76:09:fa:57:3b:36:ec:a0:06:98:37:b0:38:f7:9a:
                    68:92:20:e8:e0:31:12:2d:93:6d:78:c9:05:b6:ab:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:D2:B7:15:21:18:29:D2:25:F7:A6:98:6B:D4:AD:7E:D1:B5:D5
            X509v3 Authority Key Identifier:
                keyid:D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.224.176.0/21
                  177.240.128.0/19
                  189.195.160.0/23
                  189.199.0.0/16
                  200.77.124.0/22
                IPv6:
                  2806:260:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:79:79:ad:fe:e5:c7:ca:fe:ad:ff:a6:0c:35:f7:f6:30:0c:
         79:9c:45:03:de:f5:85:29:bf:cf:5f:e9:fc:f2:c6:c3:80:00:
         54:00:2d:76:2d:9b:dc:47:dd:41:08:06:d4:e1:08:23:52:c3:
         36:c0:c8:65:1e:b6:f7:e8:05:52:21:5a:89:fb:31:d1:da:3e:
         c5:54:f1:eb:91:da:5e:f1:b8:ec:eb:06:83:c0:fc:91:86:96:
         57:fb:03:46:b6:10:73:62:24:c1:11:93:e1:57:26:8a:59:76:
         17:67:6f:d9:80:c0:cf:5a:2d:81:94:30:a3:de:b9:29:cb:a0:
         54:7a:be:2a:4d:d6:90:75:bb:84:cb:ca:0f:02:c1:a8:44:5b:
         4e:32:d4:64:08:0f:1c:1c:b1:7b:5a:ec:f7:08:18:e2:db:51:
         82:70:00:ed:79:ad:d4:e5:f2:d8:cc:c2:4a:d4:c9:f8:eb:a8:
         24:88:cf:d3:d9:a2:cf:c0:e2:a7:3f:c3:8d:30:1c:01:ca:48:
         5d:7a:25:a3:4e:d8:a6:5f:b0:1d:e9:e5:5a:89:94:4f:8f:cc:
         b3:53:0b:9e:26:79:6e:86:1d:53:5a:c7:66:5b:54:fd:c8:cc:
         e3:71:9c:18:e4:61:86:82:0e:44:a0:8a:e6:f5:85:ce:47:b1:
         da:42:e3:bb
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUMVAUDShXCmWKpaL1+VrCrjY5TPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCQjA5NkVFODIwQ0M3RjE4QTFCNDU2QzYzNTlCQ0VC
NENEQThEQjAeFw0yNjA5MTgwNzM1MDFaFw0yNzA5MTcwNzQwMDFaMDMxMTAvBgNV
BAMTKEVBNTlEMkI3MTUyMTE4MjlEMjI1RjdBNjk4NkJENEFEN0VEMUI1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiNyPevAXIS9LSSzjCq0CYYR1k
y/04baNYZyyWnAkdy/BCV9AR+ReAbHQF9GvAE2qEueFBwsIxr158PixKQicDmBYB
hcv7DlkCIX72jkY8az41k09QgkoKU0XdAc1kUkjt8NhsqeoRYqR1g6VFl939aQVy
gRyo6K6FL3Z9qHdwqtqwqFk+C3FfWtbeZ4Sm+bJKw68gGipwhn/lhbUtGe+WMotV
Vc3KKEw5qCYFtmpcbzuFiKcKs1uIako7qWwCHOGjXNEA6NWiuw9DEVH8J68hhrmB
wsYTOnGgfsfbQDFCzHYJ+lc7NuygBpg3sDj3mmiSIOjgMRItk214yQW2q7ZZAgMB
AAGjggLAMIICvDAdBgNVHQ4EFgQU6lnStxUhGCnSJfemmGvUrX7RtdUwHwYDVR0j
BBgwFoAU2LsJbuggzH8YobRWxjWbzrTNqNswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvRDhCQjA5NkVFODIwQ0M3
RjE4QTFCNDU2QzYzNTlCQ0VCNENEQThEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEJCMDk2RUU4MjBDQzdGMThB
MUI0NTZDNjM1OUJDRUI0Q0RBOERCLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD
N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQVMyNzY3Mi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBHBggrBgEFBQcBBwEB/wQ4MDYwIwQCAAEwHQMEA7HgsAME
BbHwgAMEAb3DoAMDAL3HAwQCyE18MA8EAgACMAkDBwAoBgJgEAkwDQYJKoZIhvcN
AQELBQADggEBAK55ea3+5cfK/q3/pgw19/YwDHmcRQPe9YUpv89f6fzyxsOAAFQA
LXYtm9xH3UEIBtThCCNSwzbAyGUetvfoBVIhWon7MdHaPsVU8euR2l7xuOzrBoPA
/JGGllf7A0a2EHNiJMERk+FXJopZdhdnb9mAwM9aLYGUMKPeuSnLoFR6vipN1pB1
u4TLyg8CwahEW04y1GQIDxwcsXta7PcIGOLbUYJwAO15rdTl8tjMwkrUyfjrqCSI
z9PZos/A4qc/w40wHAHKSF16JaNO2KZfsB3p5VqJlE+PzLNTC54meW6GHVNax2Zb
VP3IzONxnBjkYYaCDkSgiub1hc5HsdpC47s=
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:05:35 2026 by rpki-client