Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32322e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e32322e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          dYW6nshVPOwOdsdlbRHxH/Q68ZplobopNmiiJ82kqCw=
Subject key identifier:   86:2C:51:D9:C1:21:32:69:08:02:58:C5:CE:85:1A:72:8F:2F:31:D0
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       0C02B71C87D6E5692A8D1200857CF9BEFEBD62D9
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32322e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 13 Apr 2025 22:14:44 +0000
ROA not before:           Sun 13 Apr 2025 22:09:44 +0000
ROA not after:            Sun 12 Apr 2026 22:14:44 +0000
asID:                     52505
IP address blocks:        152.231.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 10:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:02:b7:1c:87:d6:e5:69:2a:8d:12:00:85:7c:f9:be:fe:bd:62:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Apr 13 22:09:44 2025 GMT
            Not After : Apr 12 22:14:44 2026 GMT
        Subject: CN=862C51D9C1213269080258C5CE851A728F2F31D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:29:11:f6:ae:87:fb:86:95:cf:bf:19:8d:
                    cc:f2:2f:c2:45:18:3d:cd:c6:a0:e8:91:4c:05:71:
                    59:78:a0:f4:b0:be:7d:37:09:ec:8d:7b:1c:91:31:
                    3d:88:fa:34:4f:88:27:cf:8a:28:31:18:bc:2a:80:
                    8c:79:91:23:06:87:6c:5f:25:e6:95:9b:02:87:2b:
                    73:64:9f:94:4f:e7:ed:fa:aa:82:1f:b4:3b:43:ca:
                    d3:7d:c2:82:f8:aa:7a:ad:2b:dc:33:d3:ce:d1:7d:
                    cb:bd:fb:1f:d0:49:8a:59:2d:3e:ec:65:96:55:57:
                    31:2a:96:2a:c6:72:55:a1:e4:7d:94:c9:45:d4:2a:
                    48:28:30:8c:8a:fd:a0:54:f9:c8:bb:4c:66:69:0b:
                    3b:1f:35:c0:54:52:13:58:2e:b4:e6:ef:33:f9:d8:
                    36:98:01:80:b7:e0:a7:26:23:34:21:a3:4a:c1:60:
                    1c:0e:b8:28:3a:6d:aa:87:cb:28:ea:cf:26:4a:ae:
                    cc:ea:b1:b3:df:98:1a:10:e0:05:fe:37:e9:27:ef:
                    39:03:7b:ba:78:a7:3d:2b:2a:c9:36:88:87:36:30:
                    bd:c2:10:15:98:9a:2f:a1:a4:4a:7b:ce:69:b9:35:
                    0a:3d:4a:01:5f:d7:68:1c:06:f5:e6:88:65:32:64:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2C:51:D9:C1:21:32:69:08:02:58:C5:CE:85:1A:72:8F:2F:31:D0
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32322e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:f2:40:b0:a7:f3:ac:0b:8c:70:c3:0b:b4:1e:b6:8e:5b:
         55:78:3b:bb:8d:d3:df:f7:fb:ea:86:72:97:32:51:05:b0:aa:
         58:fe:c3:01:2d:25:b8:74:10:f0:50:87:d9:12:7e:bd:b7:da:
         54:19:45:30:af:2c:06:a2:34:19:1e:e2:27:13:c4:35:40:ea:
         4b:7d:73:9c:7b:74:a9:fd:a8:03:58:99:1a:c8:15:11:50:0f:
         50:71:e1:0e:d6:ba:07:a0:38:40:54:7e:58:9e:2f:e0:41:b6:
         e4:e9:d9:24:4b:52:a5:b9:e9:4e:f6:35:d2:45:0c:94:ba:6f:
         02:4a:43:85:14:d3:f4:e1:f3:4b:8c:49:17:bc:9b:4a:ed:2f:
         7a:97:52:ba:96:28:1b:ca:df:92:79:24:a4:dd:d0:3f:81:b1:
         6c:2e:81:c0:66:92:1f:eb:a9:eb:7f:19:3d:27:ee:f1:52:23:
         c3:c5:27:27:80:55:40:36:a2:99:b6:93:4d:3a:b7:84:08:3e:
         51:0a:27:2f:0f:b8:62:71:15:76:72:68:83:d6:40:e3:4b:70:
         9d:6b:e4:28:63:9a:ef:6b:65:08:4a:d8:5d:aa:ac:9b:9b:ca:
         07:9d:6e:52:18:bc:77:6e:a1:4a:df:08:01:74:71:2a:8c:a4:
         87:ca:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:45:15 2025 by rpki-client