Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e20323635383135.roa
File:                     3135372e3130302e37322e302f32342d3234203d3e20323635383135.roa (raw, json)
Hash identifier:          d4iIVGnGXRyCLqldFpEn48iSHadMXvnXfkBzcwp1G2Y=
Subject key identifier:   C3:06:80:2B:75:5E:52:A6:86:01:25:9E:E4:8E:09:67:96:6A:64:98
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       5E09F81C20CD17E1932E4F7489E8EA1145DD471B
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e20323635383135.roa
Signing time:             Wed 03 Jun 2026 19:25:00 +0000
ROA not before:           Wed 03 Jun 2026 19:20:00 +0000
ROA not after:            Wed 02 Jun 2027 19:25:00 +0000
asID:                     265815
IP address blocks:        157.100.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:09:f8:1c:20:cd:17:e1:93:2e:4f:74:89:e8:ea:11:45:dd:47:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Jun  3 19:20:00 2026 GMT
            Not After : Jun  2 19:25:00 2027 GMT
        Subject: CN=C306802B755E52A68601259EE48E0967966A6498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:74:d8:47:1d:0d:05:d5:28:34:ef:c8:35:
                    64:2b:f2:7b:4f:07:a1:f1:23:9b:09:ad:ed:57:64:
                    ca:ae:0d:7b:0e:bc:0c:39:c6:b9:e9:30:65:22:6b:
                    a8:34:97:7e:ff:d9:2b:e4:39:a6:78:10:3a:c5:e5:
                    56:3a:64:87:8d:bf:7e:23:b6:7f:84:6f:4c:62:94:
                    e6:4f:15:2e:ed:c0:d3:13:8d:0f:5b:0a:d4:bc:70:
                    a6:39:3a:60:cb:49:1b:a0:4b:31:ce:c7:35:75:3a:
                    35:b4:d1:ee:d7:dd:4c:90:a4:fa:25:6e:df:5a:09:
                    23:ae:93:08:8a:9d:11:3f:7a:90:e8:d5:8c:d3:da:
                    9e:05:72:e9:15:e3:72:9b:da:72:89:3b:ef:7c:67:
                    33:4d:d7:5a:7e:bc:1d:03:c3:26:3a:18:2b:34:9f:
                    46:d6:f2:fa:32:8a:b3:6e:22:10:6d:7e:90:56:9a:
                    87:2f:d7:5e:94:e0:52:4d:3a:ff:7e:8b:4e:bf:3c:
                    a3:0e:9c:7e:f0:b9:c5:13:09:5b:fe:60:4d:19:3d:
                    15:9f:fc:9f:9d:55:14:c1:4e:c3:40:2c:74:e4:1c:
                    74:ed:67:37:68:c7:da:bc:c1:c6:b8:ab:53:ef:62:
                    b2:dd:28:71:04:c7:9a:01:1e:e0:04:ab:47:e5:a3:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:06:80:2B:75:5E:52:A6:86:01:25:9E:E4:8E:09:67:96:6A:64:98
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37322e302f32342d3234203d3e20323635383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:6e:2f:b0:cd:64:c9:26:9e:e9:36:c0:b5:0b:0b:f3:bd:b7:
         d8:7e:dc:81:63:b4:22:7e:29:88:fa:c4:7b:22:70:f9:94:71:
         d7:51:8b:7b:6b:ce:7a:27:3d:17:23:9d:5b:86:5d:57:d0:ff:
         73:81:57:65:91:9d:f7:a3:1d:82:88:ed:73:bd:2d:3b:bf:e6:
         79:83:05:50:a4:66:64:04:5b:d8:40:44:3d:7b:47:85:5f:70:
         c0:a9:7a:36:fe:3b:97:89:36:87:35:66:1a:6f:88:44:a6:93:
         c4:b8:25:d2:9e:dc:45:fd:cd:37:b4:98:04:07:53:50:73:90:
         f2:d3:10:17:8f:5a:2b:42:c3:4b:af:86:24:a3:4d:1c:c6:e0:
         a0:75:b9:84:b0:7c:a5:33:a8:e8:00:19:80:f5:ea:3b:16:b6:
         6a:09:ed:de:5a:69:2d:d4:d3:b9:df:f9:98:64:76:26:6c:12:
         ab:de:12:88:16:88:35:65:fc:5f:bb:1d:ed:d6:b7:bb:c7:70:
         f9:e1:d5:14:48:9f:68:be:d2:bb:9c:7f:75:48:21:14:95:d2:
         33:c6:c6:ee:7a:37:e1:71:7d:1d:2b:7d:c7:f5:35:ba:3a:2c:
         8f:42:04:38:ae:32:53:85:ba:67:a3:9a:b4:9e:c9:f1:15:68:
         58:db:79:d3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXgn4HCDNF+GTLk90iejqEUXdRxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNjA2MDMxOTIwMDBaFw0yNzA2MDIxOTI1MDBaMDMxMTAvBgNV
BAMTKEMzMDY4MDJCNzU1RTUyQTY4NjAxMjU5RUU0OEUwOTY3OTY2QTY0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4nTYRx0NBdUoNO/INWQr8ntP
B6HxI5sJre1XZMquDXsOvAw5xrnpMGUia6g0l37/2SvkOaZ4EDrF5VY6ZIeNv34j
tn+Eb0xilOZPFS7twNMTjQ9bCtS8cKY5OmDLSRugSzHOxzV1OjW00e7X3UyQpPol
bt9aCSOukwiKnRE/epDo1YzT2p4FcukV43Kb2nKJO+98ZzNN11p+vB0DwyY6GCs0
n0bW8voyirNuIhBtfpBWmocv116U4FJNOv9+i06/PKMOnH7wucUTCVv+YE0ZPRWf
/J+dVRTBTsNALHTkHHTtZzdox9q8wca4q1PvYrLdKHEEx5oBHuAEq0flowW/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwwaAK3VeUqaGASWe5I4JZ5ZqZJgwHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzMTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWRI
MA0GCSqGSIb3DQEBCwUAA4IBAQCebi+wzWTJJp7pNsC1CwvzvbfYftyBY7QifimI
+sR7InD5lHHXUYt7a856Jz0XI51bhl1X0P9zgVdlkZ33ox2CiO1zvS07v+Z5gwVQ
pGZkBFvYQEQ9e0eFX3DAqXo2/juXiTaHNWYab4hEppPEuCXSntxF/c03tJgEB1NQ
c5Dy0xAXj1orQsNLr4Yko00cxuCgdbmEsHylM6joABmA9eo7FrZqCe3eWmkt1NO5
3/mYZHYmbBKr3hKIFog1Zfxfux3t1re7x3D54dUUSJ9ovtK7nH91SCEUldIzxsbu
ejfhcX0dK33H9TW6OiyPQgQ4rjJThbpno5q0nsnxFWhY23nT
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:50:04 2026 by rpki-client