Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32322e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e32322e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          wCpZ3pph/Zf3kEXo5cEHWbo6jnXVRF0QZl8eV+MrC6I=
Subject key identifier:   03:90:00:0C:F3:1B:C9:9F:30:C6:A9:1E:7E:58:13:33:C1:DA:10:3B
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       51CF96A6794EEAEC0B03B4B7AF02376C4FD36B13
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32322e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 12 May 2024 21:50:03 +0000
ROA not before:           Sun 12 May 2024 21:45:03 +0000
ROA not after:            Sun 11 May 2025 21:50:03 +0000
asID:                     52505
IP address blocks:        152.231.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:96:a6:79:4e:ea:ec:0b:03:b4:b7:af:02:37:6c:4f:d3:6b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: May 12 21:45:03 2024 GMT
            Not After : May 11 21:50:03 2025 GMT
        Subject: CN=0390000CF31BC99F30C6A91E7E581333C1DA103B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:da:6f:17:e4:04:ce:38:bc:8e:5f:9f:5d:
                    6f:0c:1d:f7:dd:8b:71:b1:eb:86:f8:10:c1:cd:c8:
                    1b:60:d1:97:32:63:ff:63:fa:a6:b6:25:d8:44:55:
                    21:62:ed:fb:11:87:37:10:9e:6e:57:26:30:00:b1:
                    ec:b0:b6:fc:84:dd:1b:0d:0c:0f:e3:66:ea:a4:b8:
                    63:f8:55:08:ef:a0:81:16:5c:e3:0d:fe:90:e5:26:
                    89:91:a9:2c:ef:ee:a3:66:b8:0f:93:11:3c:ed:c1:
                    22:b0:3a:95:f4:20:4e:37:7b:fd:26:1a:1e:46:6f:
                    27:87:17:b6:6b:04:d8:1b:12:31:65:da:ed:6b:84:
                    e4:62:2c:dd:50:c3:53:fc:9b:73:fe:b9:88:74:9e:
                    b2:79:c4:80:54:39:4d:c9:90:5c:e8:8f:51:83:4c:
                    8f:25:cc:29:31:73:23:6f:9c:0b:d2:cc:f0:f8:ea:
                    0e:02:73:37:40:4a:64:e0:e5:1c:9d:0f:e3:66:05:
                    74:3c:9e:61:16:1d:78:fa:ec:39:b0:7d:cd:66:86:
                    24:03:6c:92:10:33:4b:6e:a2:f1:53:16:0a:65:13:
                    95:84:0f:d8:b6:dc:0d:7c:8d:52:72:7f:14:44:25:
                    d8:83:48:c0:e9:cb:e8:4b:03:2e:ab:fe:5f:2c:26:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:00:0C:F3:1B:C9:9F:30:C6:A9:1E:7E:58:13:33:C1:DA:10:3B
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e32322e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:0d:ca:10:60:b3:58:2a:b8:1a:5c:6a:68:db:7e:a2:ca:
         de:c7:9b:6c:b7:12:0c:b5:6b:47:2a:21:5b:75:e2:1b:11:f2:
         c6:76:9a:af:86:d5:2c:c9:41:1a:cd:17:0c:f2:49:41:57:99:
         8d:26:89:84:7b:08:ce:2a:5b:e3:a4:4c:78:67:d2:1b:2d:c3:
         7d:b5:9a:88:02:f6:25:53:e6:45:16:3f:3f:7b:9a:a6:ad:c3:
         59:03:78:7f:05:21:b1:b7:9b:25:2a:2a:e5:6f:a7:ce:e9:eb:
         fa:fd:25:d3:cd:15:bb:7d:80:a1:46:32:df:61:6a:f7:c8:89:
         18:b5:db:bd:32:13:61:27:1c:1f:17:1f:23:a0:2f:ea:0e:28:
         4d:8b:33:bf:dc:b8:5a:69:89:ff:59:c7:59:f1:fa:51:32:11:
         7a:7d:80:4e:0b:30:d3:64:41:71:46:f7:20:ba:a4:d8:30:49:
         d5:5a:10:7b:8a:26:ad:a9:32:5d:56:80:09:54:4b:08:74:34:
         26:37:29:ba:bc:f0:ad:9f:14:e3:50:76:2e:3f:6d:ff:bd:4a:
         76:03:66:83:7a:3b:fb:29:b7:fc:33:59:23:f1:a4:99:57:7d:
         76:dc:06:36:56:a9:c3:cb:b6:ee:b6:d4:f6:ed:b5:22:44:1a:
         4f:d3:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:48 2024 by rpki-client on console-ams.rpki-client.org