Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31362e302f32322d3232203d3e203532353035.roa
File:                     3135322e3233312e31362e302f32322d3232203d3e203532353035.roa (raw, json)
Hash identifier:          we8cLNQee505uotQqqHQSyFKFCHGJ/6Wg+F3neuQzX0=
Subject key identifier:   FC:F1:FD:E6:3A:34:7B:5C:39:99:ED:9E:AD:9E:9B:87:B4:27:BE:88
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       14A5021D229B912CC79552DA3F1546CB208D9009
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31362e302f32322d3232203d3e203532353035.roa
Signing time:             Sun 13 Apr 2025 22:14:45 +0000
ROA not before:           Sun 13 Apr 2025 22:09:45 +0000
ROA not after:            Sun 12 Apr 2026 22:14:45 +0000
asID:                     52505
IP address blocks:        152.231.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a5:02:1d:22:9b:91:2c:c7:95:52:da:3f:15:46:cb:20:8d:90:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Apr 13 22:09:45 2025 GMT
            Not After : Apr 12 22:14:45 2026 GMT
        Subject: CN=FCF1FDE63A347B5C3999ED9EAD9E9B87B427BE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:2e:1b:ee:4d:0d:c0:a2:6e:b4:b5:52:3c:
                    c5:cd:e2:15:5c:02:b5:c6:47:d4:54:4b:a0:9c:39:
                    55:d7:38:b2:07:86:83:74:f8:dc:9d:43:de:c9:ba:
                    92:40:8b:f7:49:2f:f7:9e:41:3a:28:a9:4e:ec:d6:
                    cc:07:cc:66:07:53:ed:33:ff:9d:d5:02:65:a5:ff:
                    98:d9:3d:f7:6e:63:4e:92:fd:d6:c5:46:c3:08:bd:
                    21:f2:d5:db:69:a5:d9:f3:fb:01:8f:3d:11:b9:c0:
                    3d:7a:75:33:b2:33:f2:64:ab:de:b6:c4:9c:a4:56:
                    40:63:4a:32:6f:bb:5c:66:d7:45:7f:1b:bb:5a:bc:
                    e2:8b:9c:fa:3f:80:5a:bb:bd:02:e6:0f:8f:36:24:
                    5f:09:3e:a3:87:b9:32:e4:cf:c7:1e:72:7e:50:8f:
                    1d:f8:4a:04:79:13:14:2b:98:63:ce:95:77:8b:08:
                    f9:86:6c:fd:18:fb:b9:93:4b:7d:bd:08:2e:be:68:
                    8a:9a:dd:eb:9b:cc:96:04:a1:36:f9:e6:d8:52:02:
                    8c:36:46:81:b0:6f:07:60:f3:9e:25:33:29:57:1f:
                    2e:d7:9e:05:7c:63:cb:3e:81:9a:ea:de:36:2c:1a:
                    76:11:5d:48:ad:11:62:e3:ed:cb:d5:09:0c:65:2b:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:FD:E6:3A:34:7B:5C:39:99:ED:9E:AD:9E:9B:87:B4:27:BE:88
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31362e302f32322d3232203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:44:49:4b:f8:93:f4:06:fa:ab:24:f9:03:32:8f:d7:64:86:
         22:f5:20:6f:58:c1:a9:dc:f9:6c:8c:da:88:9d:b7:7e:94:c5:
         85:2f:25:f4:a0:9c:80:31:05:48:ec:0f:2c:98:2c:7d:b6:6b:
         8a:d3:91:67:12:42:60:3a:3e:67:bc:57:69:b5:58:c3:74:69:
         ed:b0:4e:57:92:0e:c1:d9:df:8c:39:a3:49:3f:38:dd:d5:d9:
         2b:3d:da:fc:a1:f4:96:31:03:7d:3f:f3:b1:a7:88:33:62:57:
         af:0b:70:45:66:4a:ea:c0:f4:19:02:9c:16:96:88:1e:e7:16:
         f2:d2:d7:3b:cd:1b:5e:de:c9:6c:45:dd:59:93:42:37:29:f8:
         d6:75:8e:b1:5d:40:da:07:07:6b:92:4a:54:4d:7b:99:8c:d0:
         fa:4e:ca:a6:6b:f1:fb:bf:38:f3:0f:2a:c9:74:ab:a3:f1:39:
         6c:96:ac:04:4d:ef:e9:9a:93:65:36:23:a5:b9:7f:ee:c0:c8:
         c9:34:1e:36:c7:ac:cd:c4:ce:c7:14:28:6f:fe:83:55:0e:d8:
         80:f1:3d:48:67:7d:76:93:df:3a:31:da:57:b6:64:33:ab:ea:
         98:dc:f3:bc:ca:b5:ed:24:c8:cb:b2:9d:36:0d:51:93:c5:ce:
         f0:b3:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:15 2025 by rpki-client on console.sobornost.net