Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e33352e302f32342d3234203d3e20323732303937.roa
File:                     3135372e3130302e33352e302f32342d3234203d3e20323732303937.roa (raw, json)
Hash identifier:          plI3NCwr+dQv+OS454ib0o1Fumm8FIC7OEJStTLKppA=
Subject key identifier:   87:CB:43:34:B5:E8:F6:77:9B:E9:FB:C6:61:04:0F:45:D8:43:D2:2A
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       28EDEC999DFD3A25CA8F617250520CE2AB0A5A12
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e33352e302f32342d3234203d3e20323732303937.roa
Signing time:             Tue 05 Mar 2024 18:23:54 +0000
ROA not before:           Tue 05 Mar 2024 18:18:54 +0000
ROA not after:            Tue 04 Mar 2025 18:23:54 +0000
asID:                     272097
IP address blocks:        157.100.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ed:ec:99:9d:fd:3a:25:ca:8f:61:72:50:52:0c:e2:ab:0a:5a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:54 2024 GMT
            Not After : Mar  4 18:23:54 2025 GMT
        Subject: CN=87CB4334B5E8F6779BE9FBC661040F45D843D22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:55:ca:b4:3e:ec:04:30:c9:ad:3e:73:be:f6:
                    db:7f:f6:7a:31:5d:47:ef:d8:0a:45:a7:e0:f7:7a:
                    b0:3b:3e:1c:8a:a9:b0:bc:99:7d:8d:25:69:cd:28:
                    ef:c2:7a:9b:85:f2:e3:09:d5:1a:59:33:1b:7b:8f:
                    7e:55:c0:bd:82:9f:d1:cd:7b:0c:09:29:5e:16:c6:
                    f4:93:41:99:0f:a7:10:b4:85:b1:20:16:fc:55:5d:
                    7b:3b:bb:09:6e:af:ee:81:bd:15:22:d6:c1:ca:d3:
                    ed:e9:dd:4a:b5:a5:5d:2c:66:2e:c2:f7:c0:8a:9e:
                    b7:65:9a:da:c1:f6:c1:5b:c0:a0:7a:48:6e:62:3b:
                    bf:8b:7b:57:96:1e:a7:3e:4d:9d:39:7f:74:56:c8:
                    e9:9e:07:7f:82:ec:73:6d:bd:2d:43:c1:c9:40:01:
                    7b:13:51:7a:b9:5b:1d:df:aa:b2:97:70:d1:64:ac:
                    60:e8:02:82:c3:7a:fd:e6:17:02:c8:4d:c5:f0:aa:
                    03:66:93:8b:9e:b0:c3:0e:d6:6d:29:04:27:a8:6c:
                    e3:97:8a:27:64:1e:79:e9:8b:fb:b5:24:4a:a8:55:
                    62:15:b6:f3:67:28:cf:81:56:45:8b:6d:d2:0a:08:
                    6c:b0:69:76:ba:63:b2:1e:7e:38:3f:d3:a5:40:20:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CB:43:34:B5:E8:F6:77:9B:E9:FB:C6:61:04:0F:45:D8:43:D2:2A
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e33352e302f32342d3234203d3e20323732303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:a8:10:fb:64:f2:d0:54:37:d8:8c:ec:85:98:2c:28:e9:7e:
         8f:88:c8:1d:85:89:0e:0b:43:8a:b1:30:1d:02:79:fe:6f:7e:
         02:0d:11:88:36:9d:bd:06:13:41:3a:e2:a9:64:2e:e0:c6:22:
         fa:c8:56:2a:ce:a9:73:02:93:45:fb:2b:9b:17:d6:22:2b:74:
         e0:b9:70:be:9d:88:fc:ca:15:d3:4c:89:00:c6:aa:77:6c:9b:
         5c:d5:8d:a1:bb:58:c9:91:e9:c5:8b:19:52:6e:13:a6:16:6e:
         4a:42:f3:29:6c:ad:a0:6a:b8:86:4c:b7:72:f0:1f:61:27:40:
         6a:eb:c3:bc:27:bd:9d:aa:78:9e:68:69:7a:c8:17:4d:d4:6f:
         28:5f:f2:79:b3:31:f6:9f:c4:ae:7e:67:f9:30:02:1c:12:ad:
         c6:e6:2d:7c:01:66:6c:ea:71:d0:cf:d2:19:64:81:fe:c3:be:
         90:d8:a7:49:20:13:94:1a:fd:35:0c:79:18:fe:cf:36:48:30:
         52:52:71:94:9d:a7:31:cc:98:30:00:9c:aa:c6:1b:c1:94:f4:
         af:5c:b2:74:58:bb:f6:6f:06:e3:6f:5e:5c:49:a3:72:20:b2:
         b9:47:f1:4f:41:e9:33:b3:d5:62:1d:f4:6b:a3:8d:3d:33:51:
         27:6f:b6:64
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKO3smZ39OiXKj2FyUFIM4qsKWhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNDAzMDUxODE4NTRaFw0yNTAzMDQxODIzNTRaMDMxMTAvBgNV
BAMTKDg3Q0I0MzM0QjVFOEY2Nzc5QkU5RkJDNjYxMDQwRjQ1RDg0M0QyMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDVcq0PuwEMMmtPnO+9tt/9nox
XUfv2ApFp+D3erA7PhyKqbC8mX2NJWnNKO/CepuF8uMJ1RpZMxt7j35VwL2Cn9HN
ewwJKV4WxvSTQZkPpxC0hbEgFvxVXXs7uwlur+6BvRUi1sHK0+3p3Uq1pV0sZi7C
98CKnrdlmtrB9sFbwKB6SG5iO7+Le1eWHqc+TZ05f3RWyOmeB3+C7HNtvS1DwclA
AXsTUXq5Wx3fqrKXcNFkrGDoAoLDev3mFwLITcXwqgNmk4uesMMO1m0pBCeobOOX
iidkHnnpi/u1JEqoVWIVtvNnKM+BVkWLbdIKCGywaXa6Y7Iefjg/06VAIPkvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUh8tDNLXo9neb6fvGYQQPRdhD0iowHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzMzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWQj
MA0GCSqGSIb3DQEBCwUAA4IBAQCpqBD7ZPLQVDfYjOyFmCwo6X6PiMgdhYkOC0OK
sTAdAnn+b34CDRGINp29BhNBOuKpZC7gxiL6yFYqzqlzApNF+yubF9YiK3TguXC+
nYj8yhXTTIkAxqp3bJtc1Y2hu1jJkenFixlSbhOmFm5KQvMpbK2gariGTLdy8B9h
J0Bq68O8J72dqnieaGl6yBdN1G8oX/J5szH2n8Sufmf5MAIcEq3G5i18AWZs6nHQ
z9IZZIH+w76Q2KdJIBOUGv01DHkY/s82SDBSUnGUnacxzJgwAJyqxhvBlPSvXLJ0
WLv2bwbjb15cSaNyILK5R/FPQekzs9ViHfRro409M1Enb7Zk
-----END CERTIFICATE-----
Generated at Thu May 2 00:09:50 2024 by rpki-client on console-ams.rpki-client.org