Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e31382e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          MuAKM8g47vyJqn1rcUcxrWaKLx2kz1gsTrG216F8eAI=
Subject key identifier:   F7:FA:52:71:F0:EE:D1:2D:C2:A5:D5:7A:2C:CB:99:30:85:94:2C:11
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       7E068209AE1C2F21B867813B6B847F7E4CA0D0BD
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 12 May 2024 21:50:00 +0000
ROA not before:           Sun 12 May 2024 21:45:00 +0000
ROA not after:            Sun 11 May 2025 21:50:00 +0000
asID:                     52505
IP address blocks:        152.231.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:06:82:09:ae:1c:2f:21:b8:67:81:3b:6b:84:7f:7e:4c:a0:d0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: May 12 21:45:00 2024 GMT
            Not After : May 11 21:50:00 2025 GMT
        Subject: CN=F7FA5271F0EED12DC2A5D57A2CCB993085942C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:85:f8:d8:4d:b7:3f:3a:6c:9f:5d:de:42:
                    d4:a4:49:57:33:40:ab:eb:e5:b7:d6:7b:88:5e:c9:
                    11:9f:e5:d5:30:b0:42:65:5a:90:12:47:07:4c:c0:
                    3f:96:f3:d0:2f:2a:ff:fa:0e:98:08:30:6b:7d:6e:
                    b7:59:4e:05:6d:98:fc:9c:56:c5:7a:0f:73:fd:21:
                    ec:51:2f:f1:bf:c1:fe:59:ac:17:a6:ec:57:23:9b:
                    37:6c:df:c5:38:cb:1a:37:23:0d:42:ba:c4:46:23:
                    cf:74:f7:9d:15:9d:b5:ca:f1:f5:b5:0b:05:c0:13:
                    1c:51:55:71:78:6b:f9:24:e4:02:64:42:77:0a:95:
                    e7:20:4f:5d:e8:fc:d1:18:01:1c:b8:a1:e7:37:10:
                    6a:4f:70:c5:26:cc:a3:04:ea:ba:84:35:fd:a8:a0:
                    67:b9:92:5a:a1:c8:c8:ad:86:7b:d4:17:af:bc:ff:
                    e5:ae:59:ac:d7:9c:dd:c5:23:b2:0f:13:17:a5:9f:
                    d2:37:b5:86:dd:ad:5f:96:82:cf:57:a6:37:65:76:
                    f7:07:02:0a:f2:81:b9:07:62:fd:ea:09:1e:53:ea:
                    eb:72:c7:06:fd:ba:02:5b:1f:5d:17:96:cd:30:59:
                    7c:89:41:80:2d:1a:40:94:94:a4:fa:50:fa:10:93:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FA:52:71:F0:EE:D1:2D:C2:A5:D5:7A:2C:CB:99:30:85:94:2C:11
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:c5:42:a6:30:94:d8:0e:b0:67:9a:92:99:30:1d:2e:a3:
         52:94:3c:06:6f:69:9e:fd:eb:51:50:35:bd:57:31:e9:95:aa:
         64:77:5a:7b:28:0d:96:26:fe:2f:0f:eb:83:97:40:cf:eb:7d:
         de:c2:c4:b7:a8:89:d4:81:33:4f:59:8a:c9:9e:7e:50:f8:77:
         eb:5a:da:39:3c:94:7f:d9:4e:b2:d9:2c:5e:f5:9f:e5:00:a2:
         2b:25:47:97:cc:9d:96:a1:aa:23:5f:78:7e:dc:1d:31:34:54:
         71:07:fb:a5:f4:8b:6c:77:b5:32:1a:c6:33:b6:57:18:9c:b6:
         b4:23:99:f7:c2:36:00:f2:13:1c:fe:f2:78:ae:e7:48:a6:d1:
         de:0b:79:7f:36:b3:11:53:87:ee:a7:d5:ad:ac:c0:a1:e0:fe:
         32:19:86:d0:a8:77:32:5b:f7:17:16:67:8f:46:53:e3:70:d9:
         22:8e:53:87:a3:4c:68:78:e9:d5:4f:a7:24:98:4c:3a:de:ec:
         0a:f0:41:14:74:81:50:69:f5:d0:1c:39:2d:70:56:d0:d7:05:
         39:f2:a6:a6:d2:eb:81:bd:7d:95:f5:5d:88:d0:bf:ea:e6:78:
         6d:b7:c1:ef:55:18:e9:70:f9:f6:a5:f1:b9:80:2c:f5:66:55:
         11:b2:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 20:53:56 2024 by rpki-client on console-ams.rpki-client.org