Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32332e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e32332e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          QWO5MTTLJIpLtOhWiCM/mrzah8hCHHnK9UWasJqYEwM=
Subject key identifier:   CA:B0:9A:38:0E:16:56:60:43:A0:68:29:41:FF:21:2E:BE:92:DB:1D
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       1BF39DEEDB039B8AE3590803009C4F15A86A5252
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32332e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 13 Apr 2025 22:14:46 +0000
ROA not before:           Sun 13 Apr 2025 22:09:46 +0000
ROA not after:            Sun 12 Apr 2026 22:14:46 +0000
asID:                     52505
IP address blocks:        152.231.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:9d:ee:db:03:9b:8a:e3:59:08:03:00:9c:4f:15:a8:6a:52:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Apr 13 22:09:46 2025 GMT
            Not After : Apr 12 22:14:46 2026 GMT
        Subject: CN=CAB09A380E16566043A0682941FF212EBE92DB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:ef:73:de:1a:fb:41:d1:e4:fc:dc:d1:d9:
                    a8:3f:b0:d9:79:8d:2d:de:34:89:3c:43:77:8a:c6:
                    d7:29:77:55:c2:4b:95:ad:19:5e:94:78:9a:1e:ba:
                    f5:6d:10:24:1a:05:da:83:f5:44:0b:f0:c5:b0:91:
                    a2:cc:12:2f:69:49:36:6c:6d:82:a2:df:c3:e7:8c:
                    b8:0f:4c:27:85:37:cf:dd:52:bd:e2:fb:91:f5:5b:
                    f7:a6:43:a6:fa:f9:51:ac:74:a0:a8:0a:7c:67:62:
                    3f:09:cd:63:2f:12:15:1d:cf:4c:ed:f9:8b:b9:97:
                    41:17:d1:f0:2c:eb:9c:65:63:14:d1:11:94:5a:e8:
                    bc:a7:e1:10:58:04:c6:0d:52:e8:6b:33:f7:cd:5f:
                    04:eb:68:fb:74:ef:4f:f2:e6:da:88:ee:45:d2:cf:
                    8b:78:a4:a6:a4:42:c3:b2:33:5b:df:66:87:ba:81:
                    25:44:c0:ec:2b:14:5b:4b:47:7a:e3:24:1b:9c:05:
                    26:74:e2:d3:6f:d4:50:c2:08:f0:79:39:50:2a:4c:
                    76:b1:ce:59:1f:ca:3f:92:f5:b9:2d:d6:e8:a1:e4:
                    73:92:a9:32:90:76:c2:db:1f:98:df:f2:6e:0e:f8:
                    80:e6:26:5a:ea:de:0d:31:e2:49:7f:93:19:bb:72:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:9A:38:0E:16:56:60:43:A0:68:29:41:FF:21:2E:BE:92:DB:1D
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32332e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:8a:40:ef:b9:f9:21:e6:86:b3:a7:7a:14:f2:33:70:c6:
         69:fa:81:0a:e2:90:58:45:ca:43:2e:72:82:51:27:d9:a7:d7:
         e7:7b:09:c3:f6:ca:81:ee:fc:5c:86:6a:3a:9a:be:fb:21:cc:
         5d:5d:4a:d5:f6:55:07:fe:c8:71:57:23:a9:14:38:af:f9:7a:
         18:69:f5:6d:a7:84:b7:ce:98:1e:40:51:ba:db:2b:dc:ab:b4:
         58:87:7f:8c:8a:cb:3a:1c:26:37:e8:5e:b7:5f:3b:33:bb:fa:
         5c:92:c5:d7:cd:c4:4c:60:86:67:33:7a:2f:b1:c7:6a:19:83:
         7e:72:eb:91:55:24:4b:46:92:61:12:30:d2:f2:3a:ba:c4:7a:
         15:36:27:de:66:6c:d6:00:9b:79:7f:a1:d1:73:3f:24:51:f9:
         a0:a2:b7:51:55:ec:50:67:38:f8:f8:9c:1b:3d:e8:4d:29:5b:
         35:0a:1a:e4:75:69:f8:db:cf:74:5e:78:80:b4:08:30:db:66:
         36:75:37:27:2e:f7:0b:ee:0b:a3:51:51:23:74:c5:b8:ea:2e:
         d6:e9:69:ab:01:72:37:22:a5:64:7c:86:42:44:f9:1a:41:0e:
         c5:cf:2b:1e:6c:80:f8:86:54:78:f5:b3:86:b4:54:f9:79:9f:
         f3:4c:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:15 2025 by rpki-client on console.sobornost.net