Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa
File:                     3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          9Ehs+ieWI4aIPKvGVnNrNIPJrmDKaF6nklpkdHmj+Lk=
Subject key identifier:   B8:25:20:2D:03:0E:B6:C5:40:B9:44:AE:7A:E5:5F:F1:5F:AA:16:33
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       3D6FD7F5A5C63C16D7D36AA44291CB9B4570C9D8
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:23:55 +0000
ROA not before:           Tue 05 Mar 2024 18:18:55 +0000
ROA not after:            Tue 04 Mar 2025 18:23:55 +0000
asID:                     264668
IP address blocks:        157.100.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6f:d7:f5:a5:c6:3c:16:d7:d3:6a:a4:42:91:cb:9b:45:70:c9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:55 2024 GMT
            Not After : Mar  4 18:23:55 2025 GMT
        Subject: CN=B825202D030EB6C540B944AE7AE55FF15FAA1633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5c:09:f1:70:f2:f7:24:f0:6c:b8:2d:48:c8:
                    cd:0e:4b:4b:a8:15:bf:ae:33:e1:5e:77:04:6e:15:
                    a1:94:e7:7f:f8:d5:89:ae:88:e4:1f:28:d9:f6:37:
                    ff:8e:a9:fe:ad:e6:75:3b:14:06:7c:d7:2d:35:f1:
                    9a:f9:52:0e:03:dc:5b:82:15:c0:05:6b:39:ad:b5:
                    ad:6b:94:85:1c:46:c9:22:df:9e:43:fd:cb:0f:1b:
                    1e:49:10:2d:4f:1f:27:b5:52:f9:cf:b4:d8:fd:14:
                    dd:54:00:d2:65:65:65:f4:ab:c8:f8:23:f0:5d:11:
                    f3:7d:27:d6:88:d2:93:8e:70:55:8e:20:81:cf:67:
                    69:77:df:52:98:ee:cc:c6:24:f5:59:01:31:c2:00:
                    12:8f:4f:be:04:c1:c9:f3:66:70:8e:7e:0e:13:01:
                    6d:54:de:b8:b1:83:7e:3f:e7:0b:00:e9:1e:ac:ab:
                    a7:6d:4a:36:f7:7d:03:56:0c:1e:b0:fb:fd:e2:a7:
                    1e:bb:36:05:c0:69:11:09:f2:c9:a2:11:42:3b:b6:
                    c8:8b:21:4d:1f:97:66:e0:88:7f:13:1e:8e:0b:9c:
                    da:fd:14:0a:9c:f2:ed:97:13:9c:5c:36:ee:c1:f9:
                    9a:06:f9:45:71:e2:16:9a:98:a8:2b:19:5f:cf:e8:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:20:2D:03:0E:B6:C5:40:B9:44:AE:7A:E5:5F:F1:5F:AA:16:33
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:84:32:1c:06:7f:41:49:83:f6:f9:90:0f:aa:d5:69:84:
         45:8a:bf:23:87:ab:b7:39:cd:5a:eb:ba:67:fe:af:3b:0b:0e:
         b4:41:0d:68:a5:96:ac:ff:c3:c7:b7:97:1c:24:4f:bf:70:1d:
         ba:92:31:c7:4b:3a:86:2c:1e:f8:ad:38:66:71:7e:51:de:34:
         d0:c9:42:f4:17:53:3b:71:c8:f0:9c:77:46:a9:35:70:11:a5:
         45:da:bf:59:83:ca:60:e5:bf:4e:ea:e8:34:66:66:da:70:a7:
         08:66:11:97:50:38:a8:b9:79:67:fd:fc:b0:3e:ac:d7:f2:ac:
         63:6b:77:4f:7e:04:b5:b9:f7:61:8d:7b:b3:58:19:15:e7:e8:
         fe:5b:ac:04:79:24:fd:3b:e8:ed:23:04:26:05:03:f3:73:c3:
         3e:e7:5d:1a:1d:a0:a4:74:d6:89:9a:09:66:fa:81:2b:d9:17:
         91:56:f2:1a:ee:97:33:86:02:ef:1f:2f:ee:eb:d0:38:17:4e:
         94:3e:e5:d4:f5:e1:fe:62:4c:90:4a:4c:7e:d7:75:fc:d8:43:
         06:d1:67:1f:c3:4e:3f:dc:79:57:8b:7d:18:a5:c3:c4:6c:06:
         38:f1:be:98:c9:be:44:8f:fe:1c:8b:93:34:ac:07:bd:8a:ad:
         f5:ff:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:29 2024 by rpki-client on console-fra.rpki-client.org