Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3230342e302f32342d3234203d3e20323731393336.roa
File:                     3135372e3130302e3230342e302f32342d3234203d3e20323731393336.roa (raw, json)
Hash identifier:          zaDPeT99aivLmNchKHXTm3K5PAo49p5YkpauKuA5XH4=
Subject key identifier:   0B:5F:F2:5A:2A:EC:34:57:60:7D:84:2E:43:99:01:4C:9D:1F:EB:9B
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       0A7A18C60AAFF39AFA087654AA995891881D3C53
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3230342e302f32342d3234203d3e20323731393336.roa
Signing time:             Tue 05 Mar 2024 18:23:53 +0000
ROA not before:           Tue 05 Mar 2024 18:18:53 +0000
ROA not after:            Tue 04 Mar 2025 18:23:53 +0000
asID:                     271936
IP address blocks:        157.100.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7a:18:c6:0a:af:f3:9a:fa:08:76:54:aa:99:58:91:88:1d:3c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:53 2024 GMT
            Not After : Mar  4 18:23:53 2025 GMT
        Subject: CN=0B5FF25A2AEC3457607D842E4399014C9D1FEB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:98:74:f1:cf:f6:0c:c7:bc:e6:f2:63:81:
                    4c:ba:ee:eb:30:5b:5e:92:86:f8:ff:34:8d:20:16:
                    f9:87:61:50:63:7e:bc:44:7f:c7:cd:73:e4:53:cb:
                    ba:e6:35:9e:df:25:c7:61:2a:24:89:74:5b:1f:01:
                    2b:8b:33:d2:64:dc:01:30:09:55:87:a4:10:5d:bc:
                    53:f1:95:9c:ec:68:71:74:9f:14:39:d6:3f:4c:52:
                    95:a7:ad:34:19:1d:87:18:a0:c7:7e:71:61:36:5f:
                    43:36:d8:53:6d:2b:c3:f4:9f:f6:5f:ac:63:53:c2:
                    a7:3f:5c:84:eb:09:ef:ad:77:ba:67:b8:ab:ee:48:
                    f6:3a:49:94:29:ad:ed:4f:d4:d3:9e:28:af:43:b9:
                    2c:01:0c:9f:3e:15:82:b7:66:0a:e8:1f:61:8a:ad:
                    b7:c5:94:d8:1f:4c:3d:64:bb:86:f6:e0:5e:19:78:
                    b5:8b:c1:d3:a3:59:54:dc:76:b8:05:b2:d7:dd:1a:
                    5d:25:20:a7:d3:d7:7b:2a:31:0f:d4:0b:86:c2:be:
                    07:dd:74:d6:19:87:16:7d:29:5b:1d:d3:2e:9c:e1:
                    e3:28:1b:44:a7:ec:a0:d2:99:2e:fd:fc:e8:5a:fe:
                    e0:bc:37:4c:e3:03:7c:e2:bc:c1:ef:6c:fe:32:13:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5F:F2:5A:2A:EC:34:57:60:7D:84:2E:43:99:01:4C:9D:1F:EB:9B
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3230342e302f32342d3234203d3e20323731393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:a9:16:91:a8:d0:a8:43:8f:80:5c:26:ba:d4:ba:16:a6:
         7c:c4:2b:a3:2b:37:a8:d8:d9:d0:f5:fc:13:8a:88:2d:1e:35:
         6c:c6:47:c3:7c:63:5e:3b:74:4a:94:66:cc:9c:16:2d:8b:38:
         92:18:32:07:4c:f7:ec:30:05:89:2c:60:de:d1:c2:07:01:c2:
         62:88:0c:13:a9:9f:cc:2a:d1:ed:79:9b:d3:b2:ba:e2:55:22:
         10:40:25:d8:f8:a1:22:d5:ec:d7:a6:24:a8:c9:2e:21:0f:e0:
         8f:ce:4c:f1:3e:5c:4f:0f:4c:00:b2:60:c2:7c:89:bb:5a:6f:
         c9:f9:3a:0f:5b:b0:15:22:51:ed:2a:bf:31:cc:d6:bd:6c:29:
         75:23:de:12:95:37:c0:34:e9:fd:57:f0:a8:8b:dc:98:3d:63:
         10:61:3c:88:17:13:f6:e9:55:63:21:48:db:ea:1e:b8:e9:e0:
         57:26:d7:04:6e:73:2d:55:eb:c9:1c:57:9a:47:4d:9f:97:1f:
         e1:3b:36:8a:11:b0:21:25:64:17:dc:44:a4:75:66:1d:e2:c3:
         51:87:ef:29:46:32:d8:ef:52:d6:ce:50:73:db:74:13:d8:74:
         ad:ef:a6:6e:89:f6:d2:5e:9e:c9:f4:42:5b:f8:7f:f5:dd:7a:
         4a:af:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org