Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e20323634363638.roa
File:                     3135372e3130302e37312e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          QuMWezVWyl1Mskozhgkh/Kx5DLyOvsj1vwFGDVsyAMQ=
Subject key identifier:   F8:23:07:5D:9E:F5:9D:28:65:A5:4D:EF:45:50:7C:32:B6:B8:09:7C
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       77CB9F3A1B0B23422E13DDBCAF191A6E68F8D65F
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:23:51 +0000
ROA not before:           Tue 05 Mar 2024 18:18:51 +0000
ROA not after:            Tue 04 Mar 2025 18:23:51 +0000
asID:                     264668
IP address blocks:        157.100.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:9f:3a:1b:0b:23:42:2e:13:dd:bc:af:19:1a:6e:68:f8:d6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:51 2024 GMT
            Not After : Mar  4 18:23:51 2025 GMT
        Subject: CN=F823075D9EF59D2865A54DEF45507C32B6B8097C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:e0:31:03:9e:2f:ab:68:77:69:21:b8:90:
                    ed:85:4d:f7:02:85:9b:58:b6:3d:83:eb:56:33:0c:
                    57:26:5c:c3:d0:cb:b7:f7:d6:43:3d:af:ce:16:8b:
                    86:f4:31:75:ac:bc:1f:6c:6b:e5:ce:7f:f7:91:cf:
                    f8:44:92:27:47:00:38:79:d8:b5:bc:74:c6:67:c7:
                    20:cf:e4:31:09:d7:d6:da:22:6f:1d:3f:14:4c:dd:
                    f7:40:c9:48:64:e0:06:58:86:6a:74:ca:5e:2b:6d:
                    d8:e7:dd:75:d7:c5:f0:d5:d0:6a:67:c7:41:6d:42:
                    29:15:fe:97:1c:8b:62:91:2d:1b:4d:3e:6c:97:d7:
                    5f:42:62:5e:33:69:48:c8:08:cc:27:bc:5f:78:b6:
                    c7:89:cf:38:f9:2d:db:35:b2:f8:5e:d0:3f:6e:2b:
                    66:e4:76:5d:09:da:92:bb:cd:dc:b1:1e:90:23:e4:
                    3d:5f:1e:05:61:2d:89:a6:da:96:fd:1e:35:b5:53:
                    af:aa:48:bb:ea:77:d5:ef:36:6f:5f:fc:ba:1b:40:
                    7e:7f:5d:ca:ed:32:b0:75:04:15:e5:ee:3d:9e:19:
                    a0:4e:56:40:f8:ad:da:ac:59:16:43:e9:78:07:75:
                    ae:11:88:7e:6e:76:98:46:13:ad:17:a1:9e:a4:03:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:07:5D:9E:F5:9D:28:65:A5:4D:EF:45:50:7C:32:B6:B8:09:7C
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:ec:f9:cc:23:16:93:4a:ec:83:9d:23:a4:1b:6e:b8:9f:
         cd:32:34:9a:98:78:94:ee:9c:2d:8d:a1:b0:5c:40:37:bd:cd:
         7d:b2:62:cf:57:94:59:d3:9b:c7:26:7b:30:30:84:a2:a6:68:
         fd:4e:3d:9b:17:73:3e:f1:ad:3f:42:1d:0a:bb:82:7f:c5:51:
         18:c2:bf:55:80:d2:59:8b:24:d4:83:c5:2e:78:07:df:1a:e6:
         18:38:7f:e4:bf:32:4c:57:d0:c5:5c:01:bf:4a:5b:62:1f:0b:
         f3:e9:87:39:8b:92:71:dd:26:b8:aa:41:9f:3f:30:ef:da:d2:
         84:02:d5:49:6e:51:1f:52:1f:a1:43:5f:ad:38:2b:ff:f4:9f:
         15:16:3d:8f:1a:0d:b2:aa:4f:e0:10:82:e4:bf:ed:83:1e:aa:
         e0:23:54:9f:12:67:48:7f:c0:5d:1c:d4:1d:62:bf:6a:6f:d9:
         54:4f:8f:04:78:2d:54:6f:32:9f:c5:6c:65:ef:27:00:90:d3:
         c1:8d:77:9d:82:d7:10:92:05:b4:d3:84:16:fc:cf:ef:1f:d5:
         70:68:95:15:60:5f:dd:bb:3e:1e:6b:45:f0:d2:4e:fe:23:1e:
         a3:b2:34:7c:c3:02:54:67:86:ad:e5:0f:62:f7:d6:89:67:c8:
         55:61:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org