Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31372e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e31372e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          b297S4rhVbS42cYFNtTSq1LaQNYxvqE7SYPWLhyo4WY=
Subject key identifier:   39:38:E4:9F:F8:32:7A:05:37:3C:30:A1:4A:4C:ED:01:A9:B6:63:1E
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       3614D917F2E4D283DEC3DC7C9D39AFF5B18EFFD7
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31372e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 13 Apr 2025 22:14:44 +0000
ROA not before:           Sun 13 Apr 2025 22:09:44 +0000
ROA not after:            Sun 12 Apr 2026 22:14:44 +0000
asID:                     52505
IP address blocks:        152.231.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:14:d9:17:f2:e4:d2:83:de:c3:dc:7c:9d:39:af:f5:b1:8e:ff:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Apr 13 22:09:44 2025 GMT
            Not After : Apr 12 22:14:44 2026 GMT
        Subject: CN=3938E49FF8327A05373C30A14A4CED01A9B6631E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:af:ec:94:9f:85:2c:d3:16:83:cd:97:05:b9:
                    22:25:d3:81:bd:39:3c:ce:60:17:22:06:d3:9b:9f:
                    25:d0:56:fc:29:14:98:23:cf:25:c6:1d:4e:26:b0:
                    50:41:17:04:36:d0:bc:55:c6:ea:6a:de:9f:18:4c:
                    11:05:d1:eb:17:df:49:77:86:ac:ac:9a:e0:0c:bb:
                    29:86:6d:33:e0:4e:90:0c:a5:aa:a8:9f:b8:8f:77:
                    c8:24:6f:50:cf:51:a2:95:70:6c:62:2a:2a:89:74:
                    92:86:0f:98:68:5e:e3:e9:90:e3:c1:65:11:4c:7c:
                    da:e7:51:37:37:b5:7c:e4:58:b6:d6:78:de:46:c5:
                    50:77:1f:1c:1d:85:21:56:69:08:06:6f:7a:09:00:
                    68:37:3b:56:35:51:5e:46:fc:b8:80:13:0b:58:e2:
                    04:0e:51:65:c8:5b:67:d4:4d:cc:a1:f1:db:dd:75:
                    0d:26:15:d3:be:80:e0:7b:99:79:8a:2e:f0:fe:b9:
                    19:e8:cd:39:5d:6e:7d:8f:3b:75:28:a3:e0:47:14:
                    4b:dc:38:43:6f:67:5a:df:9e:28:6b:60:a7:5e:ae:
                    55:f7:4c:7b:dd:9f:48:66:ed:83:3a:f5:6f:f2:7a:
                    ee:3d:63:ab:fe:cc:e2:15:92:aa:22:2c:c5:a3:eb:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:E4:9F:F8:32:7A:05:37:3C:30:A1:4A:4C:ED:01:A9:B6:63:1E
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31372e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:38:d7:2e:e5:a0:14:09:26:13:2a:ad:ad:d5:b9:41:f6:54:
         f6:16:d9:77:d1:19:f7:45:a5:86:5e:85:a5:8d:44:eb:53:a3:
         d1:32:39:6f:d4:59:9d:10:cd:9b:56:ba:b9:5c:e8:fc:3a:a7:
         f8:51:c1:c4:f5:d1:25:f8:c6:78:1a:c4:f9:06:ff:73:22:45:
         aa:83:a5:d7:3f:20:6d:02:ea:c9:c0:37:1f:8b:0f:21:ba:8b:
         da:2a:68:c3:58:17:bf:f9:d1:be:eb:e6:2a:ae:7d:95:ba:e0:
         0a:4a:51:17:49:71:e8:3c:66:46:7a:f7:b1:90:ac:8d:3f:12:
         89:12:11:71:a1:e3:81:ec:53:ca:5e:01:1e:02:40:78:c4:7e:
         b9:85:91:49:9a:46:c3:c0:fe:0a:a8:89:d2:2a:67:4e:53:65:
         5e:3e:56:3a:cc:76:42:3e:9c:d1:20:85:90:20:5b:80:22:5d:
         c9:5e:2c:b9:9b:03:3f:8c:ad:f8:21:f9:25:76:cd:6c:8d:77:
         86:0e:b3:4f:86:76:e8:81:f4:af:30:75:0d:71:0d:84:89:6a:
         97:37:b3:c3:82:ad:bb:e6:c2:b5:57:59:64:bf:ee:d5:80:e0:
         49:ad:d0:34:ef:7a:d3:f4:83:68:73:c1:28:d6:df:ea:97:f2:
         e9:1a:68:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:15 2025 by rpki-client on console.sobornost.net