Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa
File:                     3135372e3130302e35362e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          xGztR9ljssJu5z0hDxvQ+mrB4M08GThXZGUP6IUWwGk=
Subject key identifier:   05:42:A2:7B:98:D9:59:44:13:53:95:CF:EE:26:8C:A3:44:8C:69:63
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       5985A74F31A845B691ADDF2B96DB3443008B0397
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:23:56 +0000
ROA not before:           Tue 05 Mar 2024 18:18:56 +0000
ROA not after:            Tue 04 Mar 2025 18:23:56 +0000
asID:                     52468
IP address blocks:        157.100.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:85:a7:4f:31:a8:45:b6:91:ad:df:2b:96:db:34:43:00:8b:03:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:56 2024 GMT
            Not After : Mar  4 18:23:56 2025 GMT
        Subject: CN=0542A27B98D95944135395CFEE268CA3448C6963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:54:97:d0:a7:c2:a4:ac:26:7e:d2:db:55:
                    af:2b:6b:e4:49:b0:5b:d6:c4:d6:fc:b5:0a:ab:a4:
                    f5:db:8d:4b:7e:90:a4:24:aa:c2:76:7e:0c:d7:85:
                    70:4f:a6:d5:49:d7:ff:94:3a:25:18:4a:14:4b:98:
                    cb:33:78:5a:cf:a0:ec:14:4e:a6:8a:80:44:e2:58:
                    ae:ad:6f:bd:62:e1:4c:88:74:ac:8e:5a:25:07:6a:
                    86:b2:1f:af:dc:94:b3:7f:2a:73:a5:60:b4:28:4f:
                    6f:ac:d4:15:4c:19:81:b1:c1:59:f2:a7:69:34:ea:
                    47:01:ce:ab:0f:e3:ba:84:35:5e:91:15:30:de:46:
                    28:14:c4:4c:4b:4a:3f:9d:37:88:f0:02:0f:fb:fc:
                    ae:5b:69:4a:16:0b:ad:ea:b1:c1:28:64:db:16:56:
                    f7:e8:74:a2:df:a7:55:7f:d5:d2:ab:d9:59:d3:9b:
                    27:96:7f:a5:ca:48:b4:f6:84:20:e7:6e:a2:4a:3a:
                    36:97:55:7f:59:7c:59:47:21:05:b1:ca:76:2a:e9:
                    9b:1e:74:c2:02:21:36:f4:fb:fa:f7:7f:20:5c:e5:
                    fc:d8:0f:8f:ee:d0:09:2b:69:1d:77:af:7c:1d:b6:
                    3b:2f:6a:68:24:18:d9:1f:ba:ec:cf:19:c7:d1:d7:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:42:A2:7B:98:D9:59:44:13:53:95:CF:EE:26:8C:A3:44:8C:69:63
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:09:53:d1:cf:b4:d0:9a:7c:93:e2:7b:a8:44:88:2c:a5:f3:
         e4:64:61:34:2f:8b:f3:89:b6:a1:98:8d:f3:b6:f0:0d:1f:43:
         48:67:ed:98:59:23:e0:0b:e7:c1:c9:70:68:34:14:90:95:a2:
         e3:04:a4:20:fc:1e:56:28:c8:8d:c7:aa:45:68:3f:90:2d:0a:
         6f:28:f7:ef:ff:d1:d7:78:96:59:f5:ba:07:db:62:10:4e:60:
         22:49:53:da:c8:2e:bb:54:85:b4:71:dc:48:16:96:90:8b:3c:
         ac:ff:40:72:ad:f8:fd:84:6b:42:8b:f0:04:e3:be:e2:bf:55:
         bf:b9:f2:37:07:de:62:0d:f7:e7:4e:64:a2:d3:44:c4:97:8d:
         88:a7:5a:d9:26:12:3f:31:72:7d:77:2d:65:e1:81:03:22:40:
         85:5a:d6:61:3b:42:1d:0e:d7:19:29:54:86:ff:35:ce:ca:a8:
         be:28:b6:d5:b2:66:6b:36:f5:54:c7:38:40:5e:a1:e2:4f:3f:
         0f:46:bd:5d:57:33:d7:f0:df:49:75:0c:eb:55:e7:76:d1:6d:
         f9:a4:41:5a:e1:70:03:0b:6d:5e:62:1d:df:56:a0:e7:cb:fc:
         8f:29:90:18:d3:ed:5a:39:4e:6d:e7:d5:84:cc:50:04:8e:3b:
         78:cb:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org