Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32302e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e32302e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          9rKOFPZdZ4dM3IhhhKarZT0p/9FScTe/8R9DjuqAXQY=
Subject key identifier:   21:0C:B2:5E:95:8B:BC:4F:66:D3:42:42:3C:51:1D:9A:03:7C:6F:2E
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       09E3927AF96BE86CEE93B1837B17FA0F1FD6612A
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32302e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 13 Apr 2025 22:14:44 +0000
ROA not before:           Sun 13 Apr 2025 22:09:44 +0000
ROA not after:            Sun 12 Apr 2026 22:14:44 +0000
asID:                     52505
IP address blocks:        152.231.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e3:92:7a:f9:6b:e8:6c:ee:93:b1:83:7b:17:fa:0f:1f:d6:61:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Apr 13 22:09:44 2025 GMT
            Not After : Apr 12 22:14:44 2026 GMT
        Subject: CN=210CB25E958BBC4F66D342423C511D9A037C6F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:ba:b9:82:9e:20:8a:ed:ee:7e:ab:cd:58:
                    30:93:c0:87:2c:fc:34:d3:8d:c9:79:39:4f:32:58:
                    e2:81:5a:0b:68:78:9c:aa:6e:6a:19:46:b3:92:0c:
                    1c:4e:cd:da:56:77:14:b8:8d:ac:19:97:07:86:02:
                    02:6c:fb:7e:f3:cf:c4:1e:87:c7:79:eb:28:7e:67:
                    9d:95:ec:cb:71:10:62:32:70:cd:9b:d4:4e:30:85:
                    a6:c7:46:27:5b:73:d7:5f:17:e7:00:1e:18:e2:9c:
                    0a:fa:11:e9:83:e2:f0:87:f1:65:f5:2c:8a:1c:69:
                    90:4a:ef:f5:b1:f5:d4:8f:df:a9:d6:06:cf:5c:c6:
                    f3:d8:57:dc:b7:fb:ad:a3:d1:44:d7:93:2e:07:60:
                    d6:6b:fe:c4:63:93:b9:11:6a:0f:7c:17:ca:cd:ad:
                    47:8f:5f:f1:b7:63:ee:6c:2b:7a:54:e9:73:85:3f:
                    e5:5a:2c:21:8e:8a:6c:72:a1:71:ad:02:2c:d7:d1:
                    ec:37:06:28:44:e6:9c:28:26:27:17:b4:0c:84:36:
                    ff:1c:16:7b:bf:99:44:01:02:b2:92:61:25:d3:43:
                    9b:7f:3d:9c:2a:19:6d:87:f2:6d:31:66:cf:52:23:
                    66:3f:b3:67:f2:b4:99:9a:b5:87:e5:8f:15:14:09:
                    01:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:B2:5E:95:8B:BC:4F:66:D3:42:42:3C:51:1D:9A:03:7C:6F:2E
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32302e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:4b:58:c5:db:e5:c8:5b:59:aa:c5:e7:5f:94:33:62:2e:
         17:38:31:92:66:6a:ea:a6:a3:09:a0:ee:62:cf:02:d2:c5:e8:
         21:cd:f2:96:94:52:f3:c9:87:72:2a:0c:0d:f3:84:b9:82:32:
         5c:be:19:95:52:15:09:c2:cc:b0:3f:27:e8:5a:7f:5a:0d:59:
         07:b4:34:04:31:3d:8a:2b:1c:c6:b4:85:88:65:a3:b7:7e:22:
         49:8a:1e:6b:6e:54:78:7e:10:46:5f:89:98:c2:3d:b3:73:50:
         be:ec:af:41:7d:fd:d9:62:dd:2e:b4:de:4e:3d:f9:c2:a8:85:
         ce:b9:af:a1:6e:4f:5f:df:23:58:9e:82:a6:91:22:d7:8b:ec:
         de:02:e9:d3:55:e4:89:68:6f:8f:cf:88:2a:46:e0:31:73:6a:
         e0:85:ab:77:ca:f9:c3:0b:49:d6:bc:14:40:18:c1:26:43:eb:
         13:1d:41:00:5f:fc:a2:3d:da:ba:fe:94:10:96:f7:76:94:59:
         6e:8d:0c:a5:15:0a:19:10:a2:c1:72:10:5f:24:ab:c4:d3:b2:
         f2:86:dc:06:60:73:18:7a:82:0d:f0:2d:70:b9:4a:aa:9f:09:
         6a:21:34:80:bb:08:77:79:41:af:27:0d:2b:64:19:ad:80:93:
         0e:ba:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:15 2025 by rpki-client on console.sobornost.net