Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35322e302f32322d3234203d3e203532343638.roa
File:                     3135372e3130302e35322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          XSx40e8t7KzvRsQpm5CgwnGyJpQEfFgKkw84cL7VEvE=
Subject key identifier:   39:A7:50:40:F2:18:4A:4F:03:33:2D:86:6D:E9:86:F3:73:2D:D2:4A
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       4A446572B777AF455EE47A8596DBFD69830CA5B5
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35322e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 20:08:29 +0000
ROA not before:           Tue 04 Feb 2025 20:03:29 +0000
ROA not after:            Tue 03 Feb 2026 20:08:29 +0000
asID:                     52468
IP address blocks:        157.100.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:44:65:72:b7:77:af:45:5e:e4:7a:85:96:db:fd:69:83:0c:a5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Feb  4 20:03:29 2025 GMT
            Not After : Feb  3 20:08:29 2026 GMT
        Subject: CN=39A75040F2184A4F03332D866DE986F3732DD24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:95:8a:43:d0:2f:e6:65:62:64:3b:ab:91:
                    44:9b:95:33:a7:0d:33:b0:1d:20:7b:24:8a:7f:79:
                    fc:7b:c9:79:ba:f8:73:94:5f:3d:80:d3:5b:de:ff:
                    bf:b5:f5:20:46:e3:40:af:52:45:bd:70:06:8a:9d:
                    9d:f3:b3:0c:f6:59:d4:08:f2:43:54:b6:32:cd:5f:
                    c9:be:6e:01:d1:bf:ee:11:5b:9d:28:80:5b:c0:3f:
                    33:4e:27:e6:77:a6:78:0f:5f:53:a6:3d:1a:61:49:
                    d5:f4:d2:94:69:31:e6:9c:89:3b:2d:9a:f6:bc:c8:
                    6a:37:fa:29:0b:24:db:4f:96:30:31:09:6d:6d:4b:
                    ef:27:d6:d5:ac:f7:f5:04:5d:f1:52:c6:04:7e:a9:
                    9a:03:b9:05:84:be:0f:25:94:bf:4e:6c:e1:4f:00:
                    c5:0b:f0:02:03:26:ae:ee:ef:ce:1f:13:66:16:71:
                    e5:04:b7:86:a4:c1:74:bc:70:ec:7c:22:13:52:98:
                    3e:60:86:fc:b0:be:31:e4:fb:06:ed:bb:c5:1f:8d:
                    e8:5f:f4:83:b8:4f:37:43:19:14:22:66:b3:1c:98:
                    27:a5:db:cb:05:86:45:9f:48:ff:d2:92:83:f5:bb:
                    a7:a4:93:be:1f:aa:37:20:a7:a5:6c:e4:be:0f:08:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A7:50:40:F2:18:4A:4F:03:33:2D:86:6D:E9:86:F3:73:2D:D2:4A
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35322e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:fc:c1:c1:a8:52:ba:12:05:d5:13:22:c7:3a:81:81:2a:85:
         c1:f3:bc:47:82:3d:75:b2:37:95:59:20:4c:92:70:4a:7f:9e:
         53:21:c4:f6:90:0a:89:c3:22:50:74:67:e2:ae:9a:d4:94:84:
         a3:83:c1:cd:ac:3f:e7:0b:e7:2d:e6:5f:b7:6b:1e:ce:3e:c5:
         9d:32:b3:44:8f:8c:02:1d:5c:33:73:a0:e2:41:8d:86:a5:15:
         77:83:6d:5e:ee:a7:98:67:cf:ff:f4:31:22:1d:f6:fd:ba:a5:
         c4:72:c3:1e:6b:49:14:4d:f4:67:e7:56:35:63:e6:21:de:cf:
         e1:3f:b9:bb:02:0a:02:4c:12:d4:ef:17:83:73:71:fe:26:2d:
         b1:df:07:e4:3c:a2:24:12:3a:eb:0b:4c:5a:49:e6:6b:aa:8a:
         e3:dd:0f:2b:dd:39:f2:11:cb:1c:f0:b7:17:9d:05:d3:a7:45:
         8e:d7:33:08:e5:e2:09:18:e2:47:f0:24:56:a7:2c:2a:9a:92:
         28:b7:3d:d5:ba:dd:ad:67:d0:df:da:cb:0a:f6:fe:a0:ab:b1:
         2b:5e:fa:bd:7d:9f:7a:a7:ed:88:33:8b:5f:4c:66:85:fc:d2:
         88:8f:7e:ec:11:0b:6a:49:c0:40:48:1e:71:2f:17:ec:95:63:
         eb:ca:29:41
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSkRlcrd3r0Ve5HqFltv9aYMMpbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNTAyMDQyMDAzMjlaFw0yNjAyMDMyMDA4MjlaMDMxMTAvBgNV
BAMTKDM5QTc1MDQwRjIxODRBNEYwMzMzMkQ4NjZERTk4NkYzNzMyREQyNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzpWKQ9Av5mViZDurkUSblTOn
DTOwHSB7JIp/efx7yXm6+HOUXz2A01ve/7+19SBG40CvUkW9cAaKnZ3zswz2WdQI
8kNUtjLNX8m+bgHRv+4RW50ogFvAPzNOJ+Z3pngPX1OmPRphSdX00pRpMeaciTst
mva8yGo3+ikLJNtPljAxCW1tS+8n1tWs9/UEXfFSxgR+qZoDuQWEvg8llL9ObOFP
AMUL8AIDJq7u784fE2YWceUEt4akwXS8cOx8IhNSmD5ghvywvjHk+wbtu8Ufjehf
9IO4TzdDGRQiZrMcmCel28sFhkWfSP/SkoP1u6ekk74fqjcgp6Vs5L4PCBtLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOadQQPIYSk8DMy2GbemG83Mt0kowHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp1kNDAN
BgkqhkiG9w0BAQsFAAOCAQEACfzBwahSuhIF1RMixzqBgSqFwfO8R4I9dbI3lVkg
TJJwSn+eUyHE9pAKicMiUHRn4q6a1JSEo4PBzaw/5wvnLeZft2sezj7FnTKzRI+M
Ah1cM3Og4kGNhqUVd4NtXu6nmGfP//QxIh32/bqlxHLDHmtJFE30Z+dWNWPmId7P
4T+5uwIKAkwS1O8Xg3Nx/iYtsd8H5DyiJBI66wtMWknma6qK490PK9058hHLHPC3
F50F06dFjtczCOXiCRjiR/AkVqcsKpqSKLc91brdrWfQ39rLCvb+oKuxK176vX2f
eqftiDOLX0xmhfzSiI9+7BELaknAQEgecS8X7JVj68opQQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:55 2025 by rpki-client