Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS28048.roa
File:                     AS28048.roa (raw, json)
Hash identifier:          QhtzWZbn9a7T8jN/Aru6ewIHRz7FU8wj6wW5uQncKok=
Subject key identifier:   CC:8D:38:53:4A:FF:75:4E:C3:AC:07:FD:B6:BE:0D:52:0D:6F:17:A7
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       286CB18B4ED93B2362E5355F6CBB41254E288374
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS28048.roa
Signing time:             Tue 04 Feb 2025 18:13:40 +0000
ROA not before:           Tue 04 Feb 2025 18:08:40 +0000
ROA not after:            Tue 03 Feb 2026 18:13:40 +0000
asID:                     28048
IP address blocks:        201.254.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6c:b1:8b:4e:d9:3b:23:62:e5:35:5f:6c:bb:41:25:4e:28:83:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:40 2025 GMT
            Not After : Feb  3 18:13:40 2026 GMT
        Subject: CN=CC8D38534AFF754EC3AC07FDB6BE0D520D6F17A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:2d:20:88:64:ce:14:33:18:29:3b:29:ae:
                    1e:ca:cd:90:92:3e:f2:4b:18:2a:dc:81:39:1e:88:
                    ad:b3:08:3d:6f:34:38:f8:e0:c1:be:79:34:5d:a9:
                    20:30:57:9d:37:f4:f6:b3:84:17:7e:42:e1:c6:42:
                    c3:73:95:38:25:4b:25:94:91:96:47:2c:7d:4e:b9:
                    7d:49:65:54:94:1d:22:cd:47:72:74:1f:65:3d:4c:
                    61:82:84:22:9a:e3:6e:3a:c5:eb:3a:40:dd:de:94:
                    64:90:65:dd:7a:2f:ba:4d:ae:e9:93:07:3b:98:e2:
                    8a:84:a5:46:90:6e:f9:ae:b4:38:10:6d:1f:4c:3c:
                    27:d6:69:6d:ad:45:65:01:0f:6e:5c:19:84:cc:5e:
                    d9:bb:a6:6d:df:36:a1:4b:05:8d:8d:b8:24:a0:21:
                    92:ec:3c:23:a8:3c:3c:c4:25:27:80:87:10:da:c5:
                    b4:2a:99:69:1e:2c:52:85:a5:3a:f9:19:e1:ce:f7:
                    85:5b:0c:87:0b:4f:9c:61:a4:25:94:ad:2a:5f:dc:
                    90:fe:fd:99:db:bd:6d:a7:c7:84:fe:ed:16:12:da:
                    7f:8a:49:31:ab:d5:a3:11:31:ff:da:22:4b:5a:c7:
                    6f:0b:4d:cf:72:bc:02:b2:0a:99:80:64:4e:dd:99:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8D:38:53:4A:FF:75:4E:C3:AC:07:FD:B6:BE:0D:52:0D:6F:17:A7
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS28048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:fe:88:90:7e:0a:27:fd:67:52:1d:e5:4e:6a:6f:48:71:81:
         be:cd:e8:95:24:83:17:c0:1a:e8:64:32:cc:72:ad:56:ff:b5:
         df:b2:5d:61:7e:18:bf:2f:d6:66:22:53:a9:20:b7:3e:16:0e:
         51:be:6f:81:65:b4:3c:71:1f:2c:f8:9e:05:d6:8a:12:28:74:
         f7:1a:38:8d:5c:10:a8:e7:c2:7e:31:11:79:61:3f:c3:ff:c4:
         50:8e:e0:5e:0f:64:4a:8a:e6:6d:6e:43:f2:b2:c7:47:26:62:
         f3:be:61:d2:03:af:8a:cc:09:61:20:fd:7b:85:06:9b:d6:f8:
         10:01:f1:b7:78:cb:93:50:2c:d1:cb:e0:0f:03:17:11:2d:0a:
         d6:ad:1e:3a:a9:09:e9:ab:ef:0e:9b:f6:6d:0c:e3:55:5c:dd:
         49:56:e2:fb:88:f2:31:a4:52:d4:0f:64:55:52:a9:d6:8a:6d:
         36:96:d3:1d:7b:e3:39:3c:4f:57:50:2e:f1:10:0c:4a:c7:08:
         fc:94:2b:e1:ca:3f:4f:84:54:5b:62:45:34:e0:10:98:3f:f4:
         a1:49:f5:01:f8:16:24:db:d5:69:f4:f6:1f:cf:d2:86:fe:29:
         92:04:38:15:3f:cd:dc:b8:74:f4:c0:cb:b7:6a:94:a9:c2:be:
         40:df:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:59 2025 by rpki-client