Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31362e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e31362e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          geclWrhCuRt9Ie8+L1rcfczEJoMf+k+nyq7LsMVxDK4=
Subject key identifier:   FC:B7:A6:FA:6F:94:D2:2A:13:EC:AE:55:18:8E:73:ED:3F:C1:8A:52
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       50F3AFDBA9E92CE17774BFAB8B6CF0F20E37E1A9
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31362e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 12 May 2024 21:50:02 +0000
ROA not before:           Sun 12 May 2024 21:45:02 +0000
ROA not after:            Sun 11 May 2025 21:50:02 +0000
asID:                     52505
IP address blocks:        152.231.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f3:af:db:a9:e9:2c:e1:77:74:bf:ab:8b:6c:f0:f2:0e:37:e1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: May 12 21:45:02 2024 GMT
            Not After : May 11 21:50:02 2025 GMT
        Subject: CN=FCB7A6FA6F94D22A13ECAE55188E73ED3FC18A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:84:3f:88:69:0c:f4:dc:11:fe:f1:1e:32:
                    b6:d8:a2:72:75:d8:00:64:23:d4:62:6d:25:46:5d:
                    ae:6c:83:82:fc:fc:c9:f3:b8:9e:52:b7:33:7a:ec:
                    47:12:c2:f9:f3:5c:0b:b6:7e:04:c6:8d:eb:60:cd:
                    78:af:c9:57:cc:cd:b5:91:e7:92:72:cd:27:00:86:
                    88:e1:2f:e8:20:31:aa:c5:d6:89:47:7c:af:c7:b6:
                    96:4d:3e:ea:f7:94:0a:1b:80:e8:60:10:e3:12:b0:
                    7b:0c:18:8a:c9:9a:13:7f:ac:09:de:9e:30:86:35:
                    2c:11:b5:e6:36:48:bf:70:03:e1:76:c1:33:24:f0:
                    eb:ac:aa:b7:68:ff:6a:fd:ab:ac:cc:c1:54:dd:65:
                    5c:f0:6d:66:85:87:0c:90:06:ee:e2:1a:87:59:60:
                    c8:38:dc:58:a2:56:88:40:a4:6c:51:78:22:e9:b0:
                    78:15:da:6c:d5:dd:e5:fb:54:79:ff:fb:96:d9:cb:
                    99:61:e5:5f:61:46:eb:fd:3b:48:00:5c:85:65:32:
                    e5:a8:70:a6:bc:f1:f5:c0:c7:9c:c8:d0:e0:3a:b4:
                    5c:ef:86:26:76:d4:b2:a3:c8:83:46:0e:b2:3a:21:
                    4c:1f:4f:38:8a:b8:bb:fe:73:39:a5:28:d9:aa:ff:
                    e5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:A6:FA:6F:94:D2:2A:13:EC:AE:55:18:8E:73:ED:3F:C1:8A:52
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31362e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:8f:71:c1:de:d3:e6:2b:a6:38:df:39:10:11:f4:3b:2c:c1:
         f7:ed:c8:b0:97:ce:79:4a:83:17:ca:ab:e6:f7:68:95:28:80:
         61:63:85:9c:84:ca:71:5b:22:93:db:75:d4:76:85:16:ae:07:
         0b:1a:36:92:b9:82:1c:67:cf:05:43:72:66:04:53:9b:8b:dc:
         5e:fa:a1:26:1d:c7:29:71:46:20:ba:b0:be:e6:8f:65:66:ee:
         c1:0f:01:f2:9d:fa:0d:ba:77:6a:55:be:e5:7b:0e:4d:22:20:
         c4:08:1c:4c:10:d7:cb:32:b1:e6:63:c6:3b:6d:8e:8b:30:3e:
         57:0d:9d:a8:62:2f:bd:94:12:8e:3e:b3:e3:3a:a2:83:b1:88:
         43:65:f9:53:d0:28:c3:db:b2:7f:f2:58:63:0f:87:76:23:9b:
         f2:39:be:c1:45:4d:9f:9b:63:bc:95:01:4d:15:8b:16:46:f9:
         5a:6a:74:a1:11:fa:ae:6e:01:f2:b3:23:9b:88:58:d5:3e:09:
         ba:d9:fd:5b:d6:32:37:f4:e9:84:41:09:37:51:1c:55:49:18:
         fb:99:9c:0d:80:fc:bb:6d:22:28:ec:48:c3:48:db:f4:2e:dd:
         0b:f5:ea:1a:48:2b:15:13:87:e9:93:b9:8f:a2:83:b0:c4:cd:
         d5:d7:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org