Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e203532343638.roa
File:                     3135372e3130302e37312e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          4jR0Su6Q4rGgZ1+fjTF8zgW0xWf1bSFJt01Wc7fg6ZM=
Subject key identifier:   80:84:18:48:20:F2:A0:AB:A0:20:03:AC:2A:4E:5F:5A:5B:18:51:13
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       0524732488B69556778CEDBA68D1DF64D7EC56BB
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 20:08:30 +0000
ROA not before:           Tue 04 Feb 2025 20:03:30 +0000
ROA not after:            Tue 03 Feb 2026 20:08:30 +0000
asID:                     52468
IP address blocks:        157.100.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:73:24:88:b6:95:56:77:8c:ed:ba:68:d1:df:64:d7:ec:56:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Feb  4 20:03:30 2025 GMT
            Not After : Feb  3 20:08:30 2026 GMT
        Subject: CN=8084184820F2A0ABA02003AC2A4E5F5A5B185113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b2:ba:72:60:9b:e0:62:22:21:2e:0c:91:70:
                    78:66:70:0e:07:93:7d:8a:3b:f6:16:33:a3:21:1a:
                    3e:93:6c:12:9f:4a:8a:21:98:85:49:cc:eb:66:60:
                    16:00:84:40:2c:de:7e:38:25:d2:bd:54:39:a5:69:
                    71:42:18:95:19:44:37:b0:fc:3b:3f:22:e4:fe:64:
                    a8:98:67:69:08:3a:f3:5c:a8:56:6f:8c:09:6c:69:
                    0a:ef:67:1c:a5:ac:c4:ac:c5:8f:e4:1d:ea:2b:1a:
                    9f:04:92:d1:af:f2:e6:64:28:77:0b:8f:d0:32:3f:
                    b4:60:e1:67:64:76:26:82:0b:c6:57:bc:7d:61:15:
                    54:f0:f9:ca:03:c1:d9:74:ff:51:e8:04:86:e9:93:
                    60:56:e1:98:22:d5:de:ae:46:3d:59:ed:8d:46:0d:
                    cd:28:71:00:ce:32:0b:37:24:80:1d:25:2b:1a:16:
                    14:51:88:b5:c8:32:35:2a:45:2c:b7:49:fb:4b:66:
                    a8:53:a2:56:88:a7:d1:29:b9:70:76:a9:f7:c5:be:
                    0d:bf:4c:60:08:5b:db:fe:a3:2c:2f:43:fc:c2:3b:
                    fa:7f:1e:a8:8b:fb:af:20:3b:84:fe:cf:36:5c:40:
                    ed:0d:cb:80:3b:fd:1d:de:81:49:b6:a2:7b:f4:be:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:84:18:48:20:F2:A0:AB:A0:20:03:AC:2A:4E:5F:5A:5B:18:51:13
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:39:42:22:d2:bf:95:bb:b3:7d:98:7d:5d:a5:df:f0:db:b0:
         59:7d:bd:d1:88:e8:6a:04:73:81:7f:c3:61:4f:67:c1:26:d3:
         0b:8c:c8:82:1e:6b:c8:f2:4f:bf:7f:e3:be:a6:74:89:ae:2e:
         f3:b0:7c:d6:02:ca:81:90:d0:c2:47:2e:23:0b:e2:cb:ac:dd:
         3e:fd:6e:94:02:02:3d:7b:a0:a5:78:06:4d:1d:72:c0:0c:b0:
         ee:e6:d1:d1:20:36:30:e8:3b:4e:ff:bf:23:cc:62:a3:c6:b3:
         0f:b0:32:48:cd:26:aa:12:c8:fc:d2:21:f0:68:3f:f6:af:ee:
         b9:eb:85:54:3a:c5:cf:1d:7b:59:4a:c4:3d:40:58:63:e6:b6:
         15:72:96:ee:f7:25:d6:ba:c6:bc:b0:37:7f:db:f6:94:d9:0f:
         e0:c4:58:7f:82:1a:30:1a:f7:5d:a7:7b:4e:5f:b4:72:55:00:
         b2:3c:f8:6c:f1:e8:be:d1:d2:61:ed:a5:f8:a6:ed:10:d0:28:
         9b:d0:e2:3b:9c:b5:77:51:52:4c:ce:62:0f:09:eb:2c:e2:7a:
         fb:0e:e1:f8:a4:c0:7e:02:20:b3:38:4a:dc:f8:a1:d8:b6:73:
         d0:ba:f6:3b:5b:1f:e9:59:94:0a:8f:68:bc:8c:f2:d7:e6:c5:
         b9:40:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:55 2025 by rpki-client