Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35322e302f32322d3234203d3e203532343638.roa
File:                     3135372e3130302e35322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          h2H1eayPVB38ud/+7HfjEYeM7uR3rOLxw5VOwLT532M=
Subject key identifier:   99:D7:F7:54:9A:48:FD:78:E0:16:90:BE:68:63:7C:0A:CE:55:41:4E
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       2D935E3FEA3B88D35786EA16AE08CC09873F59C9
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35322e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:23:53 +0000
ROA not before:           Tue 05 Mar 2024 18:18:53 +0000
ROA not after:            Tue 04 Mar 2025 18:23:53 +0000
asID:                     52468
IP address blocks:        157.100.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:93:5e:3f:ea:3b:88:d3:57:86:ea:16:ae:08:cc:09:87:3f:59:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:53 2024 GMT
            Not After : Mar  4 18:23:53 2025 GMT
        Subject: CN=99D7F7549A48FD78E01690BE68637C0ACE55414E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:e7:ad:ea:ef:26:a5:c7:e8:3d:a7:f1:c3:
                    00:42:57:1d:77:74:7d:91:8c:5d:59:67:2a:21:87:
                    d2:77:d5:d3:51:9f:ad:18:a8:59:0b:bc:a7:60:f9:
                    20:7b:c2:1d:b6:fe:86:95:76:cb:eb:66:57:04:87:
                    67:62:3d:bc:f5:6f:68:e7:e4:b1:c0:6c:93:5d:aa:
                    f5:ee:97:e8:0a:b6:41:6e:4e:53:07:39:5b:d2:3a:
                    2e:fe:0d:d7:e8:a1:68:94:c1:fa:55:3c:f3:d8:75:
                    f6:f5:2a:7d:17:df:24:ab:38:0f:e9:d4:66:1d:49:
                    cc:c2:cc:bb:0b:46:7c:36:a6:03:07:b8:16:36:e2:
                    a0:16:68:ba:46:c0:54:61:85:2c:53:fd:d3:c1:fb:
                    18:73:97:77:d7:c4:39:04:98:5b:ea:17:b4:2a:1c:
                    91:1f:97:23:bc:9f:a8:37:f5:fd:63:64:74:8d:fb:
                    0b:13:79:58:6c:a4:82:38:81:91:de:5a:6f:f0:f8:
                    ef:e6:66:b7:1f:67:86:14:91:8a:9f:e2:72:fb:fd:
                    67:d0:bb:35:01:ea:a3:7f:52:ad:4a:c3:59:b2:d5:
                    ab:dc:53:f0:c4:0c:2d:9b:39:0b:8b:01:98:1b:e5:
                    ff:35:a9:e1:dd:eb:c0:57:bb:b8:ea:8f:7a:1d:ed:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:F7:54:9A:48:FD:78:E0:16:90:BE:68:63:7C:0A:CE:55:41:4E
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35322e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:42:d4:82:8e:a7:43:08:d3:19:02:18:f1:a3:03:10:9d:cd:
         dd:41:46:f9:b7:48:2d:69:a7:2d:cc:62:41:c2:75:4b:8f:c4:
         90:f7:25:b7:9c:95:e6:2f:a2:a8:0c:a9:24:0c:05:31:c9:5f:
         e4:c3:40:4e:b7:70:71:e9:64:57:4f:8e:aa:e0:78:a2:a0:4b:
         e8:5e:a2:f9:ad:94:9c:3b:2b:c9:1c:d6:36:be:4d:65:89:c8:
         5e:c7:23:72:58:9d:27:1f:f8:ad:60:c8:77:e3:56:0a:c0:db:
         a7:73:b1:77:26:a6:b7:4c:a7:87:d6:77:a0:03:ef:4e:00:01:
         5e:be:1b:35:41:de:ef:2d:cf:2c:44:19:17:e5:05:2f:d2:82:
         6d:b5:7b:8a:a8:40:2b:7f:aa:f5:63:ac:38:8c:4a:f5:ed:24:
         a6:a2:b2:5d:b3:bb:b5:cc:0e:8f:ea:77:c8:95:db:58:03:07:
         c2:a5:31:41:99:18:44:da:15:77:4f:3d:1d:ec:35:69:de:28:
         8a:3f:54:78:20:fe:8d:65:ae:e1:5d:d7:fc:29:71:5c:18:69:
         8d:ee:ce:bf:d8:a2:f8:14:2f:b6:b2:4a:13:83:5f:78:2a:b1:
         36:55:5e:6b:53:48:e6:0d:9c:58:14:a4:0a:de:9a:5f:1f:e0:
         5c:f9:62:75
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULZNeP+o7iNNXhuoWrgjMCYc/WckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNDAzMDUxODE4NTNaFw0yNTAzMDQxODIzNTNaMDMxMTAvBgNV
BAMTKDk5RDdGNzU0OUE0OEZENzhFMDE2OTBCRTY4NjM3QzBBQ0U1NTQxNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDha+et6u8mpcfoPafxwwBCVx13
dH2RjF1ZZyohh9J31dNRn60YqFkLvKdg+SB7wh22/oaVdsvrZlcEh2diPbz1b2jn
5LHAbJNdqvXul+gKtkFuTlMHOVvSOi7+DdfooWiUwfpVPPPYdfb1Kn0X3ySrOA/p
1GYdSczCzLsLRnw2pgMHuBY24qAWaLpGwFRhhSxT/dPB+xhzl3fXxDkEmFvqF7Qq
HJEflyO8n6g39f1jZHSN+wsTeVhspII4gZHeWm/w+O/mZrcfZ4YUkYqf4nL7/WfQ
uzUB6qN/Uq1Kw1my1avcU/DEDC2bOQuLAZgb5f81qeHd68BXu7jqj3od7TH3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmdf3VJpI/XjgFpC+aGN8Cs5VQU4wHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp1kNDAN
BgkqhkiG9w0BAQsFAAOCAQEASULUgo6nQwjTGQIY8aMDEJ3N3UFG+bdILWmnLcxi
QcJ1S4/EkPclt5yV5i+iqAypJAwFMclf5MNATrdwcelkV0+OquB4oqBL6F6i+a2U
nDsryRzWNr5NZYnIXscjclidJx/4rWDId+NWCsDbp3Oxdyamt0ynh9Z3oAPvTgAB
Xr4bNUHe7y3PLEQZF+UFL9KCbbV7iqhAK3+q9WOsOIxK9e0kpqKyXbO7tcwOj+p3
yJXbWAMHwqUxQZkYRNoVd089Hew1ad4oij9UeCD+jWWu4V3X/ClxXBhpje7Ov9ii
+BQvtrJKE4NfeCqxNlVea1NI5g2cWBSkCt6aXx/gXPlidQ==
-----END CERTIFICATE-----
Generated at Sun May 5 16:43:21 2024 by rpki-client on console-ams.rpki-client.org