Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa
File:                     3135372e3130302e35362e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          20AvvubrtksHWVz/chRtBWOgh5ZRMpfU42UqqHjvUHA=
Subject key identifier:   08:10:29:0B:FA:FB:58:1C:B9:88:D6:96:54:08:94:D5:2C:34:B4:10
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       682F81A001E7DE83B1991511CF1B3F2BB5A4B365
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 20:08:28 +0000
ROA not before:           Tue 04 Feb 2025 20:03:28 +0000
ROA not after:            Tue 03 Feb 2026 20:08:28 +0000
asID:                     52468
IP address blocks:        157.100.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2f:81:a0:01:e7:de:83:b1:99:15:11:cf:1b:3f:2b:b5:a4:b3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Feb  4 20:03:28 2025 GMT
            Not After : Feb  3 20:08:28 2026 GMT
        Subject: CN=0810290BFAFB581CB988D696540894D52C34B410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:f9:78:ec:7f:f1:9c:a2:fa:aa:38:d4:29:
                    b2:55:2e:9d:03:4c:35:dc:11:b2:2b:67:af:e9:55:
                    61:64:89:c5:ec:ba:d6:8a:a9:fc:4a:64:05:d8:5d:
                    cd:b8:f7:74:aa:cb:cd:68:28:02:97:b8:45:06:2b:
                    00:61:7c:e6:c4:b8:22:83:b9:e9:de:ac:85:19:6f:
                    35:95:83:ee:ed:79:cf:59:af:66:20:26:5e:45:cb:
                    81:87:c3:e1:ce:6b:c3:b4:66:6b:d1:d3:e2:c2:15:
                    ef:a3:c5:ec:df:0b:5b:43:a4:0a:47:e2:6f:f6:de:
                    06:21:a3:46:0c:07:12:fd:0c:98:6a:c7:d5:67:be:
                    19:5c:7c:6d:c6:b9:26:87:17:ea:ec:1a:56:34:35:
                    ef:78:85:1d:2d:4f:b3:e0:d7:2b:23:cc:21:1e:d7:
                    cc:58:ca:db:45:7c:a9:58:a9:7b:ad:8d:e6:c3:cc:
                    9b:b5:53:29:f8:56:0a:73:78:84:30:7d:f5:8b:25:
                    c1:b4:9c:34:8b:be:e9:e5:95:d7:4c:d6:c8:08:50:
                    d1:b1:1c:2b:11:3a:b3:a1:6d:c8:f9:b8:10:37:39:
                    d4:d0:a1:1e:92:ba:d5:11:9b:31:c5:f6:eb:f2:e3:
                    9e:f5:3c:33:2b:f4:4b:14:d2:2a:c1:a5:2d:df:19:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:10:29:0B:FA:FB:58:1C:B9:88:D6:96:54:08:94:D5:2C:34:B4:10
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:fd:e3:73:56:bf:f5:fc:6e:e5:0f:d4:00:25:83:b8:9e:
         e5:93:c0:68:23:7a:64:40:6a:c9:7a:79:26:a9:45:bd:80:56:
         e5:87:f7:ec:98:d2:73:e6:e8:82:b9:b2:89:64:c2:fd:5a:63:
         64:b0:b1:0e:bc:67:f2:ae:d2:f7:a4:f1:f2:cc:5d:41:f3:82:
         b9:00:16:d9:1a:cd:52:b4:51:85:fc:73:21:89:de:ad:4b:c9:
         ce:69:a3:39:82:43:09:b3:ed:14:ad:ca:26:36:91:ac:a3:d4:
         ee:9e:ca:9e:ce:6f:2b:f1:42:be:11:73:e6:3f:49:25:48:f0:
         c0:df:3c:c5:20:7a:91:ae:50:f7:c7:99:52:9c:0d:ff:67:c1:
         f4:fd:3c:52:02:05:f9:96:89:89:a6:6c:31:82:76:0a:54:4d:
         00:ad:1f:2e:20:10:54:bc:f7:1b:bc:fa:29:ad:04:59:f8:4b:
         48:d8:55:5b:b9:c1:75:7c:85:dd:01:61:3f:5a:71:df:62:f4:
         cb:97:5a:2d:a5:d6:5c:b0:ec:b3:0f:2f:60:4e:30:02:16:a6:
         50:83:66:13:39:b1:d0:ee:32:38:33:28:08:97:2b:dc:21:3a:
         77:f3:50:22:4a:76:d4:e0:4a:d0:22:ed:01:13:1e:0b:23:71:
         5f:23:45:7e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaC+BoAHn3oOxmRURzxs/K7Wks2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNTAyMDQyMDAzMjhaFw0yNjAyMDMyMDA4MjhaMDMxMTAvBgNV
BAMTKDA4MTAyOTBCRkFGQjU4MUNCOTg4RDY5NjU0MDg5NEQ1MkMzNEI0MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKfl47H/xnKL6qjjUKbJVLp0D
TDXcEbIrZ6/pVWFkicXsutaKqfxKZAXYXc2493Sqy81oKAKXuEUGKwBhfObEuCKD
uenerIUZbzWVg+7tec9Zr2YgJl5Fy4GHw+HOa8O0ZmvR0+LCFe+jxezfC1tDpApH
4m/23gYho0YMBxL9DJhqx9VnvhlcfG3GuSaHF+rsGlY0Ne94hR0tT7Pg1ysjzCEe
18xYyttFfKlYqXutjebDzJu1Uyn4VgpzeIQwffWLJcG0nDSLvunllddM1sgIUNGx
HCsROrOhbcj5uBA3OdTQoR6SutURmzHF9uvy4571PDMr9EsU0irBpS3fGT+BAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCBApC/r7WBy5iNaWVAiU1Sw0tBAwHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA51kODAN
BgkqhkiG9w0BAQsFAAOCAQEAOkv943NWv/X8buUP1AAlg7ie5ZPAaCN6ZEBqyXp5
JqlFvYBW5Yf37JjSc+bogrmyiWTC/VpjZLCxDrxn8q7S96Tx8sxdQfOCuQAW2RrN
UrRRhfxzIYnerUvJzmmjOYJDCbPtFK3KJjaRrKPU7p7Kns5vK/FCvhFz5j9JJUjw
wN88xSB6ka5Q98eZUpwN/2fB9P08UgIF+ZaJiaZsMYJ2ClRNAK0fLiAQVLz3G7z6
Ka0EWfhLSNhVW7nBdXyF3QFhP1px32L0y5daLaXWXLDssw8vYE4wAhamUINmEzmx
0O4yODMoCJcr3CE6d/NQIkp21OBK0CLtARMeCyNxXyNFfg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:59 2025 by rpki-client