Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa
File:                     3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa (raw, json)
Hash identifier:          Gq/oyyqPvvEDiGYtWAB0LelgaLXQg4qzC1vmeUnqn3o=
Subject key identifier:   47:B8:37:90:F6:3A:14:42:43:CE:42:C7:89:86:EF:68:C8:57:74:46
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       2B4404B99840353B1AADF6300B0B40B987B5038C
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa
Signing time:             Tue 04 Feb 2025 18:01:49 +0000
ROA not before:           Tue 04 Feb 2025 17:56:49 +0000
ROA not after:            Tue 03 Feb 2026 18:01:49 +0000
asID:                     52228
IP address blocks:        152.231.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:44:04:b9:98:40:35:3b:1a:ad:f6:30:0b:0b:40:b9:87:b5:03:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Feb  4 17:56:49 2025 GMT
            Not After : Feb  3 18:01:49 2026 GMT
        Subject: CN=47B83790F63A144243CE42C78986EF68C8577446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:96:06:46:a2:9e:62:75:91:fb:e0:94:66:
                    f2:6d:32:c7:d5:cd:48:18:8c:57:dd:f4:ed:88:8e:
                    7f:7e:88:2d:cb:63:c7:2e:09:59:9f:28:a9:5a:ac:
                    10:da:6f:e9:95:ba:65:53:ed:9c:79:5b:22:e1:3e:
                    c9:68:1e:6d:42:56:07:a7:3a:74:a8:e7:c9:5f:06:
                    82:d9:82:62:0e:65:9e:d4:86:7f:c7:83:8e:6f:d2:
                    4a:26:a1:12:27:98:67:3c:22:b1:70:1d:55:83:9e:
                    b6:39:43:da:c3:b1:27:d7:ef:22:8e:1e:53:ac:f9:
                    4e:9c:1a:25:ae:c3:d5:ef:fb:a8:15:1c:26:bc:4f:
                    a1:7c:ef:db:0e:60:c7:8e:9a:dd:6a:e5:6d:5c:f4:
                    94:a1:fb:da:56:ba:b5:81:6d:8a:6c:ff:a6:c7:13:
                    43:78:c5:55:f3:67:3a:77:c9:7e:62:e5:4d:dc:31:
                    b1:f5:42:d5:12:b1:7f:00:a0:82:86:dd:d9:2b:4c:
                    60:af:d7:04:67:f1:7f:d1:3b:b5:d9:1e:d7:90:35:
                    4a:b6:91:fb:1b:00:41:69:2e:04:cc:05:9e:68:21:
                    46:11:d9:83:cc:22:27:ea:3d:00:9f:da:bc:fe:72:
                    63:e6:64:ff:4d:59:07:50:f6:f9:d5:ff:17:91:45:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:37:90:F6:3A:14:42:43:CE:42:C7:89:86:EF:68:C8:57:74:46
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         07:77:cd:f4:ab:cb:17:f7:65:9d:68:17:30:6e:dc:01:75:a7:
         22:79:09:87:63:3d:ba:f6:10:39:88:ce:81:65:83:ee:9f:a1:
         13:0d:e9:c8:84:02:58:90:eb:3d:6e:c2:bd:b0:ca:1e:a4:3e:
         76:54:8b:80:96:87:d0:78:04:1e:18:84:9d:2c:5c:fe:02:39:
         16:8d:f9:04:df:f3:46:63:77:c2:14:2c:76:77:2f:fa:14:9c:
         0f:ce:4d:17:0c:67:94:ea:d0:76:39:29:43:7f:0c:f9:5a:0d:
         78:17:e0:b0:c7:3d:e4:1f:c0:b1:a0:33:89:e5:43:a9:1c:95:
         2a:df:a3:31:03:8a:9c:dd:4b:43:7b:f6:39:3f:d8:bf:be:cd:
         71:e8:0a:34:98:71:13:f7:0d:e7:90:97:0b:50:fc:77:ca:76:
         10:4e:2a:6d:ad:d8:ff:32:52:ef:9c:20:77:7e:d0:1e:76:69:
         9c:e2:dd:77:63:ad:7a:47:0b:38:43:4f:5f:a3:bf:a7:dd:bb:
         e1:90:4e:54:b4:ec:15:9f:7d:e3:50:f9:87:45:11:85:06:87:
         42:46:c4:53:bb:08:b5:9c:f2:9e:84:68:34:a1:0d:38:d4:00:
         2d:95:89:fd:73:29:14:b1:f4:27:a3:65:b1:e6:33:f7:4a:c6:
         65:d9:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:53 2025 by rpki-client