Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa
File:                     3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          oqKXVPrNc0V81RwcQ3nIU5Z/N/nv0G43+HPKtNECBgY=
Subject key identifier:   7D:E0:D1:5D:CA:E2:FA:7B:C8:4F:E7:D4:EC:D6:0B:E4:9E:39:AC:97
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       42BE54ACFAD7B3BC3F3C2ECE6752C3FE00B40A72
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 20:08:26 +0000
ROA not before:           Tue 04 Feb 2025 20:03:26 +0000
ROA not after:            Tue 03 Feb 2026 20:08:26 +0000
asID:                     264668
IP address blocks:        157.100.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:be:54:ac:fa:d7:b3:bc:3f:3c:2e:ce:67:52:c3:fe:00:b4:0a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Feb  4 20:03:26 2025 GMT
            Not After : Feb  3 20:08:26 2026 GMT
        Subject: CN=7DE0D15DCAE2FA7BC84FE7D4ECD60BE49E39AC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:66:b1:68:60:8b:22:fe:6b:4e:d3:13:9f:
                    59:31:28:7e:cb:0d:69:f7:58:f8:3c:d7:85:77:c6:
                    33:05:3b:43:cf:9b:72:85:6e:91:56:bf:fb:04:c9:
                    6b:19:61:6a:92:f0:7f:a0:b2:3a:53:93:fa:e9:d3:
                    1c:78:e8:62:44:34:3a:2a:2d:9e:aa:0f:a3:1d:ae:
                    88:e9:dd:b2:bf:df:7a:e1:98:aa:6a:1a:06:85:f7:
                    45:f2:0a:be:f0:5d:d8:0c:6c:d5:4b:84:bb:ab:70:
                    c1:07:9a:3b:c8:db:d6:84:07:20:2e:4e:fa:8c:cf:
                    2f:27:bb:29:ae:2f:cb:b5:0e:94:56:df:90:77:ac:
                    9a:d7:66:2a:64:91:2c:eb:cd:42:00:7f:f7:b5:16:
                    6b:b7:bc:a1:3c:1f:94:9b:42:3f:85:a9:d2:0d:52:
                    e0:d0:e9:25:9f:64:0d:59:50:4e:9c:f4:44:f3:79:
                    4e:e9:57:e2:92:5f:c2:3e:b1:cc:ac:1d:a5:d7:54:
                    84:d1:2d:95:bf:5d:51:bd:5d:08:de:8c:0e:3d:7a:
                    86:e7:ae:30:e5:4f:d1:e8:1b:ba:bf:bc:8b:2f:88:
                    b9:a1:ab:ea:9e:f3:52:e3:98:ef:0b:f0:6d:25:07:
                    e9:e1:76:1d:84:6a:ae:d9:a3:fc:76:34:07:1e:02:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E0:D1:5D:CA:E2:FA:7B:C8:4F:E7:D4:EC:D6:0B:E4:9E:39:AC:97
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:f7:fb:3b:58:0c:d0:38:82:01:af:dd:82:45:cb:7d:50:fb:
         a3:99:aa:44:8e:7e:99:4f:56:c2:f8:dd:3d:26:43:7b:d9:c9:
         26:25:cb:4a:a3:35:ad:af:6d:4c:40:46:c0:df:02:8e:c2:ad:
         55:e4:67:1b:33:5f:a0:21:ad:95:91:a5:6a:4d:cd:6c:ee:a4:
         1f:87:67:95:b9:9c:11:34:3d:03:0e:48:33:b3:5a:a2:51:30:
         49:c0:44:f2:b3:cc:94:c8:87:d4:dc:e7:fa:62:a0:d3:44:c5:
         6b:7c:d1:c3:10:c6:ff:a7:e6:29:a8:ee:63:f3:e5:ad:dd:94:
         5a:eb:63:08:5a:5a:b9:b5:08:33:bd:b0:58:ee:96:e0:f6:cd:
         51:e2:cf:56:df:92:71:80:6b:49:6d:cc:d8:10:8c:2b:90:65:
         92:9c:e9:b2:5d:5f:11:eb:74:9a:2b:f3:7a:38:61:a8:6c:8f:
         79:25:c4:34:91:7c:3b:94:bc:fb:db:36:3d:7c:48:65:8b:ed:
         91:c8:a6:57:4e:97:74:2f:6c:82:f9:87:42:62:3c:14:1b:ad:
         28:7b:2f:83:71:2e:55:54:59:4b:71:6d:59:d3:5d:3c:72:76:
         97:09:9a:f2:94:bc:d0:50:2e:42:8a:77:2e:73:20:39:3d:10:
         a2:c1:9a:93
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQr5UrPrXs7w/PC7OZ1LD/gC0CnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNTAyMDQyMDAzMjZaFw0yNjAyMDMyMDA4MjZaMDMxMTAvBgNV
BAMTKDdERTBEMTVEQ0FFMkZBN0JDODRGRTdENEVDRDYwQkU0OUUzOUFDOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Z2axaGCLIv5rTtMTn1kxKH7L
DWn3WPg814V3xjMFO0PPm3KFbpFWv/sEyWsZYWqS8H+gsjpTk/rp0xx46GJENDoq
LZ6qD6Mdrojp3bK/33rhmKpqGgaF90XyCr7wXdgMbNVLhLurcMEHmjvI29aEByAu
TvqMzy8nuymuL8u1DpRW35B3rJrXZipkkSzrzUIAf/e1Fmu3vKE8H5SbQj+FqdIN
UuDQ6SWfZA1ZUE6c9ETzeU7pV+KSX8I+scysHaXXVITRLZW/XVG9XQjejA49eobn
rjDlT9HoG7q/vIsviLmhq+qe81LjmO8L8G0lB+nhdh2Eaq7Zo/x2NAceAivhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfeDRXcri+nvIT+fU7NYL5J45rJcwHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNjM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnWRE
MA0GCSqGSIb3DQEBCwUAA4IBAQBU9/s7WAzQOIIBr92CRct9UPujmapEjn6ZT1bC
+N09JkN72ckmJctKozWtr21MQEbA3wKOwq1V5GcbM1+gIa2VkaVqTc1s7qQfh2eV
uZwRND0DDkgzs1qiUTBJwETys8yUyIfU3Of6YqDTRMVrfNHDEMb/p+YpqO5j8+Wt
3ZRa62MIWlq5tQgzvbBY7pbg9s1R4s9W35JxgGtJbczYEIwrkGWSnOmyXV8R63Sa
K/N6OGGobI95JcQ0kXw7lLz72zY9fEhli+2RyKZXTpd0L2yC+YdCYjwUG60oey+D
cS5VVFlLcW1Z0108cnaXCZrylLzQUC5CincucyA5PRCiwZqT
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:12:32 2025 by rpki-client