Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e34362e302f32332d3234203d3e20323732383833.roa
File:                     3135372e3130302e34362e302f32332d3234203d3e20323732383833.roa (raw, json)
Hash identifier:          TCjCsK1gYTt6dBYrkLMGf9GJ/Zl7WrnIHP8ixm69fJM=
Subject key identifier:   DE:FD:DE:CE:8C:76:2C:C3:7B:52:0A:16:9C:EC:66:49:7D:A2:AE:DE
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       5E4A6562D1B0F4A6E6749C829377681D6299F5DE
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e34362e302f32332d3234203d3e20323732383833.roa
Signing time:             Tue 05 Mar 2024 18:23:56 +0000
ROA not before:           Tue 05 Mar 2024 18:18:56 +0000
ROA not after:            Tue 04 Mar 2025 18:23:56 +0000
asID:                     272883
IP address blocks:        157.100.46.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4a:65:62:d1:b0:f4:a6:e6:74:9c:82:93:77:68:1d:62:99:f5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:56 2024 GMT
            Not After : Mar  4 18:23:56 2025 GMT
        Subject: CN=DEFDDECE8C762CC37B520A169CEC66497DA2AEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:a5:f7:64:38:cf:ae:e1:2b:bd:d5:32:41:
                    87:74:b1:56:38:8a:a5:50:c9:a7:ce:e5:c6:61:81:
                    7e:36:d6:24:9b:c7:de:53:45:f5:b5:dc:56:10:91:
                    dc:40:c4:b5:8c:57:10:45:42:46:c3:da:3f:b1:42:
                    a8:83:78:e3:2e:bd:d3:62:21:3d:a9:20:50:66:94:
                    45:07:c8:7b:ce:ac:93:70:8d:33:37:74:65:61:8d:
                    8b:6c:5c:1e:26:02:87:fd:81:80:35:d6:59:61:2e:
                    2d:2f:b7:28:5f:39:27:33:db:17:a4:28:c0:0c:2a:
                    e9:ac:b0:34:7d:a7:6a:fb:bd:bd:86:58:98:c7:8a:
                    04:7b:a9:f8:66:d2:79:4d:95:c1:74:76:32:58:b6:
                    b2:b7:7c:c9:4f:f6:24:b2:54:a7:24:66:57:ea:55:
                    17:60:c3:20:af:02:6d:38:69:d4:7a:86:19:6e:87:
                    87:af:d1:b8:13:dd:4a:1a:b6:5e:6a:64:bb:57:94:
                    75:92:1d:16:ba:e9:24:cf:e3:21:3b:24:8d:fa:b5:
                    2e:4c:4b:6f:18:0e:cb:ca:ed:f5:ac:cd:e8:e7:bd:
                    22:fd:8b:65:ae:c9:c3:ac:2a:76:82:1d:eb:0f:49:
                    15:87:9b:3e:da:18:d7:e0:6b:9b:bc:c9:32:45:9a:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FD:DE:CE:8C:76:2C:C3:7B:52:0A:16:9C:EC:66:49:7D:A2:AE:DE
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e34362e302f32332d3234203d3e20323732383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:d8:1a:18:f4:92:2e:d3:0d:1c:75:d3:a2:f9:d6:60:ea:14:
         a9:aa:45:77:df:ee:b7:3b:c0:39:48:1e:10:fc:29:4e:8d:f8:
         17:73:61:40:dc:6b:20:20:85:30:90:60:c7:98:a1:89:80:d1:
         8b:dd:4a:44:ce:43:27:2a:f3:99:70:02:e0:13:d3:66:dd:2d:
         2d:be:b3:20:5a:85:45:98:4e:8f:30:4c:ef:1e:e1:09:26:c8:
         6c:d0:4b:87:0b:65:24:26:5d:ee:e9:bf:e3:b5:a7:39:ab:02:
         f8:d3:8c:e1:36:13:53:cb:ed:89:c8:bd:93:fa:41:84:c0:b7:
         b1:40:dc:4e:4e:53:6f:a0:54:0e:63:b6:82:45:81:5a:73:d2:
         ce:18:68:a6:29:c4:a9:06:02:5f:e3:6f:c5:87:23:21:e5:55:
         76:fc:c9:82:60:e2:3d:c4:a3:26:91:50:30:db:96:bf:e4:2f:
         79:ab:7a:ed:c7:9f:7f:d0:3d:7d:34:ca:f3:40:47:0f:b3:e1:
         ad:25:ea:2c:26:c2:d2:67:75:4f:4c:e1:16:fe:78:e8:8e:e1:
         3e:91:79:ca:62:6b:3d:2a:16:35:91:8d:ec:76:fe:46:af:3c:
         84:c5:82:a7:65:c0:9c:1d:90:8a:c4:a2:e8:08:21:76:6c:86:
         c0:b3:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org