Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e20323635383135.roa
File:                     3135372e3130302e37312e302f32342d3234203d3e20323635383135.roa (raw, json)
Hash identifier:          idcZsgHD5naoYzBUpNT8BNApguIEzddwb6mp2Auttds=
Subject key identifier:   45:E9:50:36:6D:95:B8:A6:20:D4:06:28:79:27:D6:60:82:29:61:E8
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       54AB04952E96AEBB1CA748E92705ADD18161AD94
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e20323635383135.roa
Signing time:             Wed 03 Jun 2026 19:25:00 +0000
ROA not before:           Wed 03 Jun 2026 19:20:00 +0000
ROA not after:            Wed 02 Jun 2027 19:25:00 +0000
asID:                     265815
IP address blocks:        157.100.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ab:04:95:2e:96:ae:bb:1c:a7:48:e9:27:05:ad:d1:81:61:ad:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Jun  3 19:20:00 2026 GMT
            Not After : Jun  2 19:25:00 2027 GMT
        Subject: CN=45E950366D95B8A620D406287927D660822961E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:de:d0:85:4c:d2:d1:7e:b0:09:3c:d6:72:
                    35:7c:8a:a2:2f:03:00:41:84:02:b7:0d:0a:9c:34:
                    a7:68:39:90:23:b8:96:f1:12:37:58:ba:be:0f:e2:
                    23:c9:2d:a9:98:d0:3d:98:19:29:9f:e9:56:76:c5:
                    fd:2c:ed:88:b6:71:b7:f9:b2:23:a2:1c:ff:48:b7:
                    c1:a7:51:4d:8a:0f:81:f4:49:83:dd:37:14:a5:f0:
                    ff:d3:ef:bd:59:4f:2b:a1:39:91:66:db:7a:ec:f1:
                    0f:2a:a7:ac:43:ad:e7:82:24:84:c6:58:e7:73:fa:
                    8b:b8:52:03:44:24:90:12:d2:76:8d:3a:7d:9c:5f:
                    ca:9e:a4:39:96:7f:4b:ed:37:94:af:42:17:e7:f4:
                    1a:eb:2a:e9:ce:e0:09:9d:fc:8d:27:38:f2:d1:7e:
                    7f:63:7e:5a:8f:58:b2:02:9a:bd:71:ef:5a:5a:d2:
                    7f:29:7d:81:a5:48:e2:80:18:69:5c:e1:66:a6:93:
                    3b:ec:09:49:38:4e:9a:1d:66:27:1a:f2:d9:55:bf:
                    4e:08:b2:6b:de:76:0c:77:80:9c:15:14:fc:4e:8e:
                    bf:d4:81:b3:18:dc:02:e7:15:bb:74:f0:e6:7a:42:
                    a2:67:98:01:44:49:e7:e6:f6:a3:03:e7:d1:d8:13:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E9:50:36:6D:95:B8:A6:20:D4:06:28:79:27:D6:60:82:29:61:E8
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37312e302f32342d3234203d3e20323635383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:59:a9:f0:85:9b:43:81:16:fe:e2:ae:79:16:95:d7:ad:fc:
         b8:cb:47:04:c4:d3:20:64:35:44:8f:09:9f:7c:5b:a1:3b:ca:
         53:74:6e:e1:25:75:17:95:1b:5a:10:f1:6f:28:28:33:a9:26:
         66:19:83:6f:99:d6:8a:13:73:c3:b0:3c:b6:a2:7d:19:c2:e0:
         c7:24:0c:56:85:2b:bf:61:d2:de:ad:28:1b:26:a4:ed:9a:3c:
         94:8e:59:39:50:a5:82:04:6b:e6:85:f3:1f:cb:05:36:ed:fd:
         91:f4:8a:aa:3e:4e:75:b6:11:c6:af:bc:3e:ca:21:23:56:a7:
         16:ff:da:79:cf:3d:69:78:a1:f4:b2:0e:ec:68:75:13:2b:ed:
         f9:6e:54:68:77:78:17:f5:af:79:6e:66:cf:89:62:a5:3c:84:
         a0:3e:9e:4a:d0:3f:0f:66:dc:f2:7c:38:7c:04:bb:d9:bb:2d:
         36:ec:12:dd:ed:41:fc:21:76:85:fa:bf:b3:a9:43:0f:de:1c:
         bd:cf:5b:a7:42:aa:db:11:bd:15:dc:73:a5:39:68:0d:0f:cd:
         09:25:a2:e4:4e:98:5e:60:d0:09:af:18:05:87:23:80:e5:2f:
         c7:d3:9b:7b:55:cd:38:f2:57:c0:3a:22:3d:f3:9c:42:97:96:
         e1:0f:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:50:08 2026 by rpki-client