Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa
File:                     3135322e3233312e34382e302f32302d3234203d3e203532343230.roa (raw, json)
Hash identifier:          xTMNKZjsILSeSY+Tx6+a8pMfHzNt1GtDLwNjO/5iJas=
Subject key identifier:   ED:AA:D7:47:5C:5F:00:D8:43:4F:98:90:E2:D8:82:20:72:D8:05:BB
Certificate issuer:       /CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
Certificate serial:       0D4A96EF58F29FA25E213E2905824F791A40A7CE
Authority key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa
Signing time:             Tue 04 Feb 2025 18:40:20 +0000
ROA not before:           Tue 04 Feb 2025 18:35:20 +0000
ROA not after:            Tue 03 Feb 2026 18:40:20 +0000
asID:                     52420
IP address blocks:        152.231.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4a:96:ef:58:f2:9f:a2:5e:21:3e:29:05:82:4f:79:1a:40:a7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
        Validity
            Not Before: Feb  4 18:35:20 2025 GMT
            Not After : Feb  3 18:40:20 2026 GMT
        Subject: CN=EDAAD7475C5F00D8434F9890E2D8822072D805BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:92:a6:47:fe:90:2b:d0:5f:f5:b4:5e:5c:
                    7d:41:4e:08:5a:25:3d:51:c1:56:ce:9f:73:a4:f9:
                    92:98:c4:9a:81:8b:0d:a6:5f:10:dd:aa:1d:6e:c4:
                    7a:48:84:0d:66:43:6b:39:50:d5:49:26:07:1d:30:
                    df:26:66:89:b4:47:dc:50:65:13:e6:4f:cb:b3:39:
                    35:e8:92:dd:af:8a:81:d1:6f:dc:1d:7b:b1:55:3d:
                    25:96:ee:8b:27:33:91:2d:ab:cb:9e:b9:25:ee:ca:
                    85:77:a1:5c:97:4b:be:91:dd:e9:01:e8:a5:7c:79:
                    46:c0:ed:18:61:ca:8c:5f:cb:84:18:8b:a0:c5:9d:
                    bd:e4:b5:f5:ee:8f:ad:f2:51:b0:c8:7e:ad:45:ac:
                    58:01:1b:87:c0:67:f6:ac:c4:b0:7e:75:cd:64:03:
                    3b:5f:f3:7b:e3:be:ee:5e:f9:28:3f:40:8e:1e:3a:
                    01:01:d9:27:68:56:d6:93:e4:2a:11:fe:60:15:69:
                    cd:23:82:4e:b3:01:90:ef:21:4b:62:e4:4d:1a:cf:
                    0d:87:47:82:6c:81:be:9a:a6:1e:75:33:00:dc:b7:
                    90:f2:e3:18:14:c7:f5:99:43:ff:6d:25:42:08:94:
                    d2:6d:c0:89:fd:02:0c:7c:ea:7c:95:cd:f9:4d:0b:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:D7:47:5C:5F:00:D8:43:4F:98:90:E2:D8:82:20:72:D8:05:BB
            X509v3 Authority Key Identifier:
                keyid:5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:91:58:ae:50:0f:a7:7f:2a:0f:8b:46:79:24:65:9e:50:d3:
         ca:b6:1a:62:55:b9:1a:d3:d8:cc:75:c1:68:cf:5c:6a:9e:46:
         a2:dc:79:9a:35:73:73:52:17:48:50:b8:ee:12:38:a9:02:fc:
         c7:7c:f8:16:49:6f:d4:ca:3e:6a:a9:46:8c:45:2c:00:89:56:
         ba:1d:aa:2a:65:17:92:43:df:4b:b6:42:0d:e1:31:c8:ab:63:
         d8:ad:d5:8b:a7:96:52:ba:13:06:74:4c:04:b9:c9:ed:ce:fc:
         3a:52:84:07:16:e0:7a:92:df:4d:c7:9d:02:53:9e:47:39:b5:
         1c:a3:0c:f7:58:c6:6b:4a:75:be:8a:15:1a:77:dc:f5:c8:63:
         6e:5b:55:0a:c2:1a:bb:5c:9c:aa:b3:2b:74:ca:ce:52:d8:c1:
         96:8b:6e:6a:e1:51:cb:59:26:bc:95:fb:a6:e0:1e:37:8d:c4:
         4b:40:3f:47:13:25:7a:b3:b0:96:39:65:2b:d8:1e:28:83:aa:
         f1:68:73:4b:bc:ee:aa:ac:b6:73:00:2e:ab:d0:11:c1:46:3a:
         75:f9:68:fa:44:24:1d:a4:d2:f8:6c:87:a5:f5:4a:3c:25:65:
         13:c8:82:61:a4:64:a6:21:4c:ba:6b:1e:48:0d:7b:49:3d:8f:
         c0:52:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:29 2025 by rpki-client