Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e31382e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          /T4bPn7lN5h5Ze5pI9LfF2SwAq8q9eFhnxPYDX+REB4=
Subject key identifier:   68:C0:EA:9D:A1:7B:C4:ED:0D:16:2D:6A:E3:8E:BC:C2:12:E6:F6:45
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       64BC2EC319E81BFC47865AF2F3F247616C74D747
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 13 Apr 2025 22:14:43 +0000
ROA not before:           Sun 13 Apr 2025 22:09:43 +0000
ROA not after:            Sun 12 Apr 2026 22:14:43 +0000
asID:                     52505
IP address blocks:        152.231.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bc:2e:c3:19:e8:1b:fc:47:86:5a:f2:f3:f2:47:61:6c:74:d7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Apr 13 22:09:43 2025 GMT
            Not After : Apr 12 22:14:43 2026 GMT
        Subject: CN=68C0EA9DA17BC4ED0D162D6AE38EBCC212E6F645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:2b:62:8f:b7:84:3a:4e:ac:ec:3f:e1:b5:
                    1e:48:08:e2:dc:cb:59:7c:65:46:6a:68:0a:24:d1:
                    b4:ba:c1:7b:c4:77:78:cc:78:06:cb:1c:0f:5a:0f:
                    4a:e7:34:95:63:de:aa:32:f8:55:8a:ca:ac:62:57:
                    e4:4a:b7:d0:76:de:c7:4f:4f:9a:47:81:9d:c4:0f:
                    bf:27:9e:27:0a:ca:d1:e0:da:a5:26:a3:f2:16:3f:
                    93:ba:eb:12:74:51:2f:39:4d:0a:1d:9a:bf:48:8a:
                    19:be:8f:33:ad:18:13:da:21:71:f7:4f:10:63:13:
                    c7:9a:e2:2a:3d:d1:d7:7a:d0:71:9f:17:a7:ff:af:
                    33:14:eb:e4:60:9f:6a:16:4f:a0:4c:26:f2:94:f2:
                    ff:3d:13:67:0d:df:39:a8:5e:c3:b8:cb:97:68:15:
                    14:71:22:86:29:19:1b:13:d5:a1:13:ac:90:0b:0a:
                    04:58:ea:89:fd:44:7b:85:37:b0:14:ba:eb:e1:af:
                    f5:dd:90:5c:94:ee:5f:ea:fc:c0:b9:1e:ae:1d:73:
                    06:2e:e6:c2:80:f7:54:f4:2f:33:9e:a0:26:48:1f:
                    4f:65:20:16:1b:bf:6a:e0:be:1a:72:79:82:c7:32:
                    6e:e5:59:68:ad:e5:54:5c:a8:c6:36:2a:72:d4:ba:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C0:EA:9D:A1:7B:C4:ED:0D:16:2D:6A:E3:8E:BC:C2:12:E6:F6:45
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:87:e4:a9:67:77:8f:c5:e6:78:e0:43:3b:26:3f:14:da:55:
         f3:69:79:8f:e6:7b:19:b1:e2:83:0b:c8:1d:1a:63:90:71:2e:
         2a:70:49:fc:41:fb:e3:ca:39:c6:d4:3d:1a:41:13:dd:e2:7b:
         43:8e:0f:98:6a:45:e0:2c:f8:63:46:a5:b2:d4:f9:a2:2f:91:
         2b:42:d5:a5:64:dc:d4:85:93:d1:15:6d:d0:04:80:95:d1:e9:
         a5:b8:5c:2c:21:75:6e:ea:63:02:46:0d:4e:bf:39:c1:86:1d:
         c8:71:8e:1a:0d:4c:f5:1d:c9:78:5b:5f:d0:7e:ab:03:fd:49:
         af:45:1c:cc:9b:50:78:b7:86:e4:b9:eb:db:e1:bd:dc:11:fe:
         8e:d2:24:1e:0f:e0:53:a2:b3:d9:33:78:9d:e4:51:ce:a9:1a:
         f6:d4:84:f7:09:95:bf:61:61:b6:24:ea:56:eb:2c:c2:e9:77:
         47:08:1c:ec:f5:e6:f1:1b:44:e2:8b:70:da:4d:a5:90:70:b4:
         c0:db:eb:ae:56:31:67:63:77:45:a2:06:df:1b:7a:47:0b:d2:
         6c:2d:a5:05:72:55:8a:8a:20:e6:35:de:e3:79:f8:6a:66:b2:
         93:32:4f:27:3e:66:c7:11:c8:36:f2:c1:70:40:c7:d8:ac:5b:
         1f:c3:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:15 2025 by rpki-client on console.sobornost.net