Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS27910.roa
File:                     AS27910.roa (raw, json)
Hash identifier:          8MCuNuui5/WGjrkLG6shc42z+4qEPxu+jb+110Hstxc=
Subject key identifier:   83:31:42:6D:38:7E:49:4F:19:25:98:9A:72:47:EB:7E:CC:89:4C:35
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       206BA0C0E122D4C48EEA2DBC4982C8F2B8201E0D
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS27910.roa
Signing time:             Tue 01 Jul 2025 17:24:20 +0000
ROA not before:           Tue 01 Jul 2025 17:19:20 +0000
ROA not after:            Tue 30 Jun 2026 17:24:20 +0000
asID:                     27910
IP address blocks:        190.242.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6b:a0:c0:e1:22:d4:c4:8e:ea:2d:bc:49:82:c8:f2:b8:20:1e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul  1 17:19:20 2025 GMT
            Not After : Jun 30 17:24:20 2026 GMT
        Subject: CN=8331426D387E494F1925989A7247EB7ECC894C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:c1:8f:13:e3:2b:5c:a1:f6:00:7e:8b:44:
                    b9:d3:57:7c:3c:b6:a8:2a:8a:32:45:4e:b3:4e:ff:
                    06:a4:d9:bb:a9:95:f5:6d:ff:cc:c2:38:f4:6d:84:
                    a4:79:1c:9d:31:ba:4a:3c:38:e5:84:7e:77:ea:0e:
                    32:79:36:af:26:86:e7:8f:13:8a:d6:97:cb:93:99:
                    f3:c7:05:ee:b7:d0:28:49:87:e2:9c:22:27:09:7e:
                    96:6b:fd:06:5f:3b:39:09:3b:52:4f:99:df:6a:6b:
                    72:a3:fb:32:eb:52:50:49:17:8c:ff:88:4f:e4:df:
                    b4:04:23:a5:bc:2d:58:3f:6b:27:63:74:69:3b:9e:
                    23:81:22:a4:1f:76:5c:42:9b:bd:43:10:65:91:84:
                    04:43:50:dd:2d:3c:f7:29:34:d2:cf:21:81:23:d5:
                    56:bd:42:b3:02:31:f6:97:29:91:ef:9e:1b:cd:5b:
                    60:17:eb:09:f3:70:0d:a6:4d:6c:20:ea:a6:88:15:
                    d8:33:e7:f1:82:26:03:0c:ad:ed:c7:3b:ce:aa:80:
                    a5:b6:ca:3a:ad:04:5e:7a:1d:07:aa:22:09:61:0e:
                    1e:c7:7f:6e:3b:ed:ec:24:f5:4a:32:ad:2a:5c:cd:
                    00:51:4f:f2:af:e8:33:9f:09:46:d4:51:a8:fe:a2:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:31:42:6D:38:7E:49:4F:19:25:98:9A:72:47:EB:7E:CC:89:4C:35
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS27910.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:54:c4:0c:93:20:3f:15:11:bc:55:df:c7:1c:5c:fc:89:
         38:47:84:e4:af:6f:22:4d:a3:2a:a8:cf:15:59:57:13:ef:cc:
         97:3f:cf:8a:05:d6:2c:91:f7:d8:a6:1b:70:bd:bf:1e:ca:55:
         dd:3d:2b:d3:6c:b9:aa:0c:85:24:49:41:bb:da:d0:34:08:1e:
         6f:2f:1d:82:6a:c2:40:eb:26:91:4c:80:cf:d2:b7:ea:c3:62:
         a7:cf:19:f1:51:c8:df:29:35:2e:3f:3d:93:e8:ca:ff:df:19:
         b3:85:6a:c7:45:e7:f6:f7:24:a3:51:16:4e:21:22:94:93:51:
         c2:2d:e4:6c:79:e1:58:0a:60:5a:99:d7:cd:2c:bb:85:a4:84:
         57:1e:cd:f4:4d:3c:af:65:b9:d4:b8:78:99:2f:a4:a2:8b:82:
         9b:36:52:f3:14:7d:54:e8:93:ee:34:5e:60:95:81:c6:31:46:
         32:70:10:f4:9c:06:7a:be:ca:b4:2e:c8:10:54:38:30:53:11:
         d9:62:0d:05:b6:25:ce:9c:8a:e4:eb:cc:2f:c5:3f:3d:51:df:
         20:e8:2a:60:d4:9a:09:10:c9:93:fb:60:84:57:4c:ae:52:68:
         bb:5a:96:df:be:81:60:dd:be:8b:73:8d:31:f6:30:6f:05:df:
         10:ce:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:13:11 2025 by rpki-client