Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3235322e302f32342d3234203d3e203532323537.roa
File:                     3135372e3130302e3235322e302f32342d3234203d3e203532323537.roa (raw, json)
Hash identifier:          gXvLip0CyBqbIQtRKjgnJmoK1lDi0Rka8eP90kkCG24=
Subject key identifier:   D1:B3:1A:D5:B3:6A:28:CA:9D:88:A5:E3:DD:D1:5C:82:AF:A1:2C:B7
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       08BAC8C6A75D01D54079F7329357E593DA67A967
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3235322e302f32342d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:23:53 +0000
ROA not before:           Tue 05 Mar 2024 18:18:53 +0000
ROA not after:            Tue 04 Mar 2025 18:23:53 +0000
asID:                     52257
IP address blocks:        157.100.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ba:c8:c6:a7:5d:01:d5:40:79:f7:32:93:57:e5:93:da:67:a9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:53 2024 GMT
            Not After : Mar  4 18:23:53 2025 GMT
        Subject: CN=D1B31AD5B36A28CA9D88A5E3DDD15C82AFA12CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:9c:59:e8:0f:c6:ce:6c:36:25:a0:90:0e:
                    d9:13:ba:8d:75:7d:8e:d5:39:f7:cb:6f:60:f3:73:
                    1b:4e:47:55:08:33:6c:9b:7a:cd:18:dc:29:f1:ef:
                    0a:96:74:25:11:45:10:57:c4:40:fd:83:fa:36:ea:
                    53:5a:86:6a:a0:bf:41:44:22:b2:bc:92:68:9f:6c:
                    42:e5:b8:b4:87:8d:3d:b4:29:74:87:6a:fc:f6:d7:
                    09:f1:fa:de:16:7b:e0:f9:93:b1:71:64:98:7d:b5:
                    20:11:9d:47:10:96:a0:d1:68:a8:41:be:8d:36:99:
                    21:4a:9e:7b:25:03:f6:10:50:0a:b2:68:82:9e:f8:
                    96:f9:bb:f9:82:5f:89:2d:f0:70:cb:07:b5:80:05:
                    08:b7:be:2b:58:83:1e:ca:61:b9:5f:67:8d:db:da:
                    c9:64:fb:01:31:7a:0a:32:6f:61:a2:d3:0c:61:e8:
                    3a:b0:d6:1a:f1:a5:ea:0d:e2:64:3d:ee:6e:63:c8:
                    3f:cf:84:42:62:a9:72:a3:07:0d:9d:1c:e5:ee:31:
                    89:f0:85:40:f2:22:46:46:ea:cc:f4:15:de:89:bd:
                    bd:b4:f8:cb:1c:61:89:42:40:9b:0b:c2:5e:f2:51:
                    8b:28:42:09:d4:77:fa:4b:a4:09:4b:6c:ba:aa:2f:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:1A:D5:B3:6A:28:CA:9D:88:A5:E3:DD:D1:5C:82:AF:A1:2C:B7
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e3235322e302f32342d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b4:8a:6f:98:d9:d1:2f:2f:f6:ca:36:1f:d4:9d:7a:7b:f0:
         6f:4c:f8:3e:73:40:1e:13:13:48:69:b7:f7:70:d6:23:3f:b8:
         2c:b6:b3:39:04:72:d5:56:18:d6:25:43:2e:a3:85:0c:da:25:
         46:24:d3:3b:ac:da:2b:fa:fd:ed:d5:f8:6a:5d:41:42:f1:b2:
         db:0d:9e:ab:9c:ba:76:b0:9b:9d:b8:d7:ef:d2:cf:c1:4e:97:
         64:28:10:12:c5:57:e7:67:6a:2f:ca:82:66:9a:7a:cd:50:af:
         9a:a5:48:52:b2:ad:93:18:6a:88:f7:fb:0f:a1:46:e3:5e:a8:
         39:c5:54:17:3c:1e:eb:d5:9e:10:31:33:b4:7f:9a:4b:ec:6d:
         be:34:1f:74:86:4a:df:63:2f:c1:d0:92:01:7f:1f:d2:97:9a:
         4b:43:8f:91:31:b6:d4:4d:93:5c:2e:ef:f0:a3:16:aa:78:c7:
         14:9c:b7:96:ce:c4:9d:c6:77:d3:3a:9e:7c:5b:57:9d:fc:48:
         c7:50:74:9e:95:ea:dd:88:33:68:26:42:74:b0:e1:d4:fb:0e:
         a2:82:cd:5c:3f:a5:77:26:4a:52:18:e5:b1:b2:a2:8a:0e:c9:
         40:cd:31:f8:f7:83:7d:17:6e:52:06:8a:0d:de:6f:e8:d4:78:
         16:83:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:28:51 2024 by rpki-client on console-fra.rpki-client.org