Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e203532343638.roa
File:                     3135372e3130302e37322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          zqOnCXPAGBC6GEvu7/M+y1+1QLtcmMDxUidp7fUV8cU=
Subject key identifier:   7E:0C:DE:6A:D3:26:52:20:90:16:43:97:2D:7B:1E:C3:B2:4F:25:FB
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       0B9BC869D8601F9C3C4BEE81C3EF2C1132F0DF98
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 20:08:31 +0000
ROA not before:           Tue 04 Feb 2025 20:03:31 +0000
ROA not after:            Tue 03 Feb 2026 20:08:31 +0000
asID:                     52468
IP address blocks:        157.100.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9b:c8:69:d8:60:1f:9c:3c:4b:ee:81:c3:ef:2c:11:32:f0:df:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Feb  4 20:03:31 2025 GMT
            Not After : Feb  3 20:08:31 2026 GMT
        Subject: CN=7E0CDE6AD3265220901643972D7B1EC3B24F25FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:cc:a5:6f:67:93:3b:46:78:23:a7:aa:ae:
                    11:35:1b:5c:b4:64:12:b5:f1:99:aa:98:3a:8b:29:
                    b2:f9:68:41:28:be:d0:82:b4:73:93:8d:dc:cb:12:
                    bc:1d:48:b6:a5:d4:e0:ce:29:52:f0:45:02:89:aa:
                    db:eb:6a:d2:86:82:b6:85:0b:ed:7d:4f:fa:d8:79:
                    fa:53:d1:60:4d:30:4d:42:3c:64:2e:a1:07:f9:47:
                    28:63:b8:24:3c:c5:53:aa:50:19:34:9c:7f:ee:39:
                    84:ef:a9:7a:7c:b0:11:ae:c2:3d:a6:c0:bd:49:b7:
                    4a:f1:80:d2:85:1a:32:1c:5e:73:65:f1:67:63:e8:
                    77:39:48:28:3e:d5:26:69:68:f7:5a:77:be:69:28:
                    47:f8:f4:f8:ce:fa:e7:f0:04:9a:f8:24:31:58:84:
                    1f:19:11:8c:b0:08:40:e2:af:88:45:b5:81:ff:d2:
                    76:93:ad:41:d4:c6:51:34:43:49:05:5c:6c:55:2c:
                    86:c8:e8:5f:b5:8c:52:a9:a1:68:6f:98:f9:bf:b8:
                    a5:85:ae:e0:13:b7:07:5f:75:f3:15:43:54:16:0a:
                    14:8c:26:a0:e1:ad:f1:ee:a4:44:84:99:72:ad:74:
                    5a:6d:8e:c4:99:a6:e9:24:f7:91:f7:93:d8:42:b6:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:DE:6A:D3:26:52:20:90:16:43:97:2D:7B:1E:C3:B2:4F:25:FB
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:14:f1:8d:18:ca:e1:5e:a8:50:aa:29:1f:80:9f:f3:dd:01:
         a7:d8:74:56:87:70:eb:0e:44:82:a7:ed:9e:55:c4:cd:65:67:
         7c:6b:48:00:7c:37:ec:24:95:bc:d1:b0:0c:6f:0e:29:f5:ab:
         b1:39:71:6b:a0:35:43:f8:95:9e:2a:8d:89:47:7a:e3:09:af:
         a4:9e:52:a5:3e:a7:fb:50:d1:03:ef:46:7a:4f:bb:5d:40:57:
         67:75:8a:b2:6c:fe:47:34:e8:9e:6e:73:19:e0:06:27:67:e5:
         96:e1:04:a1:62:d9:68:49:dc:4c:69:63:73:cd:8e:b1:a1:60:
         41:a2:a1:20:70:c3:f9:e1:6e:34:cf:f2:b3:a8:1b:e3:ad:77:
         7a:bc:b5:79:51:1b:75:24:7d:eb:02:5d:4e:b8:b7:61:fa:c9:
         99:8b:d6:65:60:db:93:ae:07:aa:1a:7b:48:79:6c:15:b9:6f:
         d6:4f:ca:42:86:fa:7a:68:cc:90:38:58:41:5d:a7:0a:8c:4b:
         2b:0c:55:40:c7:6a:ce:80:bf:1e:3e:1f:a9:16:e8:b2:ac:ba:
         36:6c:6e:86:99:1e:a7:c4:f4:fb:d1:16:67:af:5f:75:80:be:
         07:b5:68:ae:1a:fb:33:3b:27:5c:c4:93:73:36:1d:e3:99:62:
         a7:37:90:ad
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC5vIadhgH5w8S+6Bw+8sETLw35gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNTAyMDQyMDAzMzFaFw0yNjAyMDMyMDA4MzFaMDMxMTAvBgNV
BAMTKDdFMENERTZBRDMyNjUyMjA5MDE2NDM5NzJEN0IxRUMzQjI0RjI1RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dMylb2eTO0Z4I6eqrhE1G1y0
ZBK18ZmqmDqLKbL5aEEovtCCtHOTjdzLErwdSLal1ODOKVLwRQKJqtvratKGgraF
C+19T/rYefpT0WBNME1CPGQuoQf5RyhjuCQ8xVOqUBk0nH/uOYTvqXp8sBGuwj2m
wL1Jt0rxgNKFGjIcXnNl8Wdj6Hc5SCg+1SZpaPdad75pKEf49PjO+ufwBJr4JDFY
hB8ZEYywCEDir4hFtYH/0naTrUHUxlE0Q0kFXGxVLIbI6F+1jFKpoWhvmPm/uKWF
ruATtwdfdfMVQ1QWChSMJqDhrfHupESEmXKtdFptjsSZpukk95H3k9hCtuLXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfgzeatMmUiCQFkOXLXsew7JPJfswHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1kSDAN
BgkqhkiG9w0BAQsFAAOCAQEAWBTxjRjK4V6oUKopH4Cf890Bp9h0Vodw6w5Egqft
nlXEzWVnfGtIAHw37CSVvNGwDG8OKfWrsTlxa6A1Q/iVniqNiUd64wmvpJ5SpT6n
+1DRA+9Gek+7XUBXZ3WKsmz+RzTonm5zGeAGJ2flluEEoWLZaEncTGljc82OsaFg
QaKhIHDD+eFuNM/ys6gb4613ery1eVEbdSR96wJdTri3YfrJmYvWZWDbk64Hqhp7
SHlsFblv1k/KQob6emjMkDhYQV2nCoxLKwxVQMdqzoC/Hj4fqRbosqy6Nmxuhpke
p8T0+9EWZ69fdYC+B7Vorhr7MzsnXMSTczYd45lipzeQrQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:48 2025 by rpki-client