Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e20323634363638.roa
File:                     3135372e3130302e37322e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          O6k7dMwQBTsE/Xsya4OgO0Y4caBuPfFKnkpbDSBsZFw=
Subject key identifier:   A1:5B:1D:F9:59:B3:63:1A:CD:03:87:C5:6C:AC:08:E3:54:56:07:DB
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       7887E96B24331D3B86CA5FD37C66740C905F3AED
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:23:55 +0000
ROA not before:           Tue 05 Mar 2024 18:18:55 +0000
ROA not after:            Tue 04 Mar 2025 18:23:55 +0000
asID:                     264668
IP address blocks:        157.100.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:87:e9:6b:24:33:1d:3b:86:ca:5f:d3:7c:66:74:0c:90:5f:3a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Mar  5 18:18:55 2024 GMT
            Not After : Mar  4 18:23:55 2025 GMT
        Subject: CN=A15B1DF959B3631ACD0387C56CAC08E3545607DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:db:7b:6f:60:d0:36:9f:e3:a6:72:cf:db:
                    03:fc:09:86:11:74:2c:f6:6f:ab:a7:e6:9a:2e:5a:
                    3a:ce:ea:4b:eb:fb:16:8a:66:63:9a:ea:36:2f:9a:
                    8e:f6:2b:7c:b1:e5:70:f0:7e:3f:32:8d:0d:9b:dc:
                    26:3b:63:d7:dc:cd:5b:0c:0a:f1:21:f5:cd:fa:f5:
                    5f:58:5e:3b:74:fe:c7:b5:60:05:ce:35:c8:86:29:
                    e1:fb:31:98:78:b2:4a:32:d2:dd:5b:6d:02:a3:61:
                    b7:74:0e:10:b8:7e:04:25:bd:db:c3:98:de:68:4d:
                    31:e1:dd:fa:20:2f:79:94:71:40:24:59:f6:55:d3:
                    fe:e8:51:22:ae:9c:b7:1f:a7:2e:95:08:9f:95:53:
                    2b:7b:65:e6:08:ae:fc:fc:60:1f:8d:b0:b8:a9:ad:
                    bd:51:dd:f5:a5:06:ae:97:6d:75:d7:48:cf:2b:92:
                    b9:e4:7e:68:45:f8:1f:f9:24:2d:dd:19:f7:30:7c:
                    7e:95:35:0c:74:e0:e7:8b:bb:83:85:ac:7b:6e:ab:
                    25:60:81:4b:98:76:e7:2a:cc:3d:b1:98:e1:1d:d9:
                    87:b4:83:7d:8e:ef:53:4d:f0:bf:c1:8f:9a:ac:fc:
                    f0:f8:d3:30:ed:b0:e7:d1:2b:2e:cb:35:2c:84:14:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:1D:F9:59:B3:63:1A:CD:03:87:C5:6C:AC:08:E3:54:56:07:DB
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:d0:96:e6:24:0c:d9:6e:0d:4f:b7:5f:47:5d:1d:fe:6d:
         26:a8:20:e0:f3:09:84:0a:83:7c:e4:8a:76:d7:2a:83:c3:62:
         d0:74:26:48:e1:62:6d:93:58:88:18:6b:47:d5:af:f3:b8:53:
         03:f2:74:9a:3d:0e:fb:79:dd:ed:75:7e:18:8d:f6:62:a4:cb:
         0d:1e:2c:15:fb:e1:8f:50:97:e9:ac:c4:53:9b:d1:73:fb:27:
         83:a7:0c:a3:a8:5a:f4:6d:92:77:22:e3:3a:28:07:ea:dc:82:
         29:c2:2b:45:52:b5:c2:d5:0a:5d:85:a1:22:d9:ad:b5:47:b7:
         87:54:a2:6d:d7:c5:e7:88:2b:19:c8:9b:ce:74:72:3d:58:c9:
         2a:64:27:92:07:32:3f:38:6b:98:02:29:54:f7:25:d6:30:0a:
         cf:b7:76:a6:7c:7a:aa:c3:20:38:73:8d:16:e0:00:75:ff:e5:
         c6:28:82:47:ef:83:76:2f:10:68:e2:d4:2b:b9:ee:42:d7:e8:
         eb:38:b1:bf:ea:8c:f4:85:16:ab:f4:67:53:8f:e0:88:e7:fa:
         a1:d5:80:6f:1f:7c:b9:1b:ef:1a:40:20:27:2c:f1:af:ea:94:
         ae:85:12:07:86:bc:9d:4d:65:4c:69:be:d6:cf:dc:96:9d:84:
         47:08:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org