Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e203532343638.roa
File:                     3135372e3130302e36382e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          j4twvOhfDnAtmYIvx61LJlCTW3V9fjSEl1dwXUPU/mY=
Subject key identifier:   54:4C:34:09:61:1C:9E:5B:3C:3C:4D:D3:B4:9A:36:33:BB:20:D5:7A
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       33E95163201A189BE3274C6645F03BD5F5BCED84
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:23:53 +0000
ROA not before:           Tue 05 Mar 2024 18:18:53 +0000
ROA not after:            Tue 04 Mar 2025 18:23:53 +0000
asID:                     52468
IP address blocks:        157.100.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e9:51:63:20:1a:18:9b:e3:27:4c:66:45:f0:3b:d5:f5:bc:ed:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:53 2024 GMT
            Not After : Mar  4 18:23:53 2025 GMT
        Subject: CN=544C3409611C9E5B3C3C4DD3B49A3633BB20D57A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:e3:96:b6:69:bf:63:1f:6a:c9:da:7b:75:
                    de:f4:99:7d:a8:93:48:95:19:18:06:77:01:f3:67:
                    90:d7:fb:c3:10:38:03:a5:06:06:c5:bf:ef:ae:56:
                    69:0f:c1:79:e2:a0:61:3c:1a:d4:b3:82:0b:f6:93:
                    9f:7b:38:d1:c5:51:63:2c:14:af:71:17:a4:63:27:
                    67:19:ed:f5:e7:90:d3:05:ef:09:b1:a8:70:06:88:
                    e4:4e:5e:11:fb:0c:45:38:b0:16:bc:2a:ae:b7:7f:
                    84:b5:47:dd:c7:b6:37:ca:e6:7d:a9:77:ef:17:72:
                    43:38:8e:4d:30:ed:3b:ab:c9:54:78:bb:18:a2:7d:
                    f4:2f:53:22:90:f6:3c:eb:15:25:a4:fe:65:12:9b:
                    d2:7a:65:9f:d0:ec:8b:b2:ff:95:9e:ce:1e:87:34:
                    23:1f:94:cf:ec:17:78:0f:10:f1:80:78:bf:1e:04:
                    3e:05:27:cc:98:63:de:fa:5c:d5:5e:b5:67:0b:53:
                    84:1b:94:cc:58:39:20:c9:b5:af:5f:bf:47:f8:b3:
                    28:34:e2:9a:19:74:f4:cb:bf:f6:75:37:e3:16:06:
                    b7:39:aa:4d:eb:67:37:ab:03:5c:9f:89:ca:bb:d3:
                    33:74:4d:87:c4:2b:e6:72:4a:b5:24:59:c7:9a:80:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4C:34:09:61:1C:9E:5B:3C:3C:4D:D3:B4:9A:36:33:BB:20:D5:7A
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:28:44:2c:23:01:79:9b:ae:0c:76:b7:c3:d7:5a:cf:3d:00:
         97:34:83:e6:ef:c2:ed:9d:c8:ac:fb:39:46:6b:72:5a:9a:fa:
         e4:1d:c8:be:68:fa:f5:ee:31:07:dd:c3:71:ba:f3:7f:bc:29:
         08:e2:b9:8a:81:37:ee:2a:97:0d:1e:8f:ab:1c:c2:3c:53:12:
         d7:cb:e3:ca:01:d2:af:aa:8b:ba:19:a3:86:84:ea:f5:fc:f9:
         43:00:e0:a6:4b:7e:38:aa:02:5e:81:6f:88:f5:78:f8:11:2c:
         86:86:2a:f0:31:ee:59:af:fb:26:dc:56:7a:86:c0:b6:6e:65:
         fc:5b:91:30:83:21:57:66:fd:f1:45:98:ed:66:d3:d6:f1:0b:
         e4:85:56:48:ff:e3:06:4a:66:a6:77:b9:8e:be:93:01:a3:ee:
         c9:3c:6c:0e:31:e4:79:30:47:a9:89:8e:1d:c1:16:5b:57:6b:
         b4:9c:f1:4c:e2:2d:56:98:b0:da:ae:36:e0:89:82:7c:e4:15:
         79:a4:2f:8f:63:8e:55:39:31:a9:01:b1:a9:ec:3e:69:36:19:
         0f:49:65:2b:a1:24:aa:cb:fc:8e:ba:80:60:9a:ee:62:81:94:
         95:29:45:45:10:d3:cc:d3:19:9a:f0:a7:f6:60:fd:5b:c0:05:
         82:59:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org