Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3136312e32322e34382e302f32332d3234203d3e203238303634.roa
File:                     3136312e32322e34382e302f32332d3234203d3e203238303634.roa (raw, json)
Hash identifier:          BtmoLPChGRJSJo3bg2BXcTApMuSUjGOajjeVOB7IZm8=
Subject key identifier:   10:E5:2E:10:79:6B:77:D4:C6:5E:E7:78:FE:50:F4:29:7A:DC:BE:BF
Certificate issuer:       /CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
Certificate serial:       5DEE474414F62AE8D70FA9968FFE2CFBED52060E
Authority key identifier: 40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3136312e32322e34382e302f32332d3234203d3e203238303634.roa
Signing time:             Tue 24 Jun 2025 16:23:33 +0000
ROA not before:           Tue 24 Jun 2025 16:18:33 +0000
ROA not after:            Tue 23 Jun 2026 16:23:33 +0000
asID:                     28064
IP address blocks:        161.22.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 16:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ee:47:44:14:f6:2a:e8:d7:0f:a9:96:8f:fe:2c:fb:ed:52:06:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
        Validity
            Not Before: Jun 24 16:18:33 2025 GMT
            Not After : Jun 23 16:23:33 2026 GMT
        Subject: CN=10E52E10796B77D4C65EE778FE50F4297ADCBEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:50:d6:0b:69:13:ba:ec:71:8a:b5:7c:ec:
                    ac:d4:0c:6b:8b:ff:7e:5b:3b:02:ac:0a:1d:17:dc:
                    cd:24:92:9c:95:f0:5f:97:44:08:2a:e1:c2:a0:43:
                    76:d1:92:b6:d8:d7:a0:bc:c3:38:cd:c8:69:fb:21:
                    79:25:2f:d4:a7:35:82:43:7d:14:8a:5c:68:be:8c:
                    75:9e:79:fb:2d:b0:20:17:40:8b:ae:10:a3:d7:c3:
                    56:b0:3a:86:b1:bc:ae:9a:03:aa:a2:43:fe:7d:7a:
                    3f:48:c2:1b:c5:27:ea:08:11:fd:16:d2:ba:19:b6:
                    83:60:9a:3f:fe:e3:90:6f:88:3d:06:9c:cb:7f:ab:
                    f4:c2:30:59:09:a9:a1:b8:c3:39:04:32:77:78:aa:
                    72:08:5a:f2:7b:9b:00:66:a1:c9:ee:ff:2d:05:4b:
                    8f:af:ce:1e:d8:d0:e6:c8:ad:ce:dc:13:3d:66:b1:
                    76:8b:a9:7e:5b:ef:48:11:46:21:e5:83:4a:07:ad:
                    a8:7c:b8:4e:40:3d:73:e2:94:99:9b:e4:60:26:6d:
                    e2:3f:ab:68:8f:65:7d:17:0a:3e:17:b4:a0:fb:2f:
                    b8:55:46:5b:3c:08:8e:dc:d3:6e:5f:ca:88:bb:f4:
                    24:8e:57:9a:c5:6e:4b:30:24:82:bf:f3:80:7d:a1:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:2E:10:79:6B:77:D4:C6:5E:E7:78:FE:50:F4:29:7A:DC:BE:BF
            X509v3 Authority Key Identifier:
                keyid:40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3136312e32322e34382e302f32332d3234203d3e203238303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:81:af:ec:68:68:05:81:9b:76:52:cc:87:21:4f:db:4d:
         aa:ed:50:67:f8:cb:85:04:a9:23:95:ae:e5:99:95:e3:0e:ee:
         55:70:8b:3b:3e:9b:1a:8a:02:6c:57:c7:44:e6:03:fd:20:8e:
         ca:48:d6:26:74:9b:2a:a6:6e:f5:c3:f5:07:c2:98:79:aa:49:
         82:0b:dd:94:b0:43:12:5a:bf:b2:bb:b1:7f:2f:40:2c:91:fb:
         92:7b:4f:73:3e:a4:9c:4d:25:0f:d9:ef:34:72:82:8d:c5:d4:
         40:60:26:a0:6c:f6:51:78:d9:e9:b5:66:0d:7a:6a:30:e1:65:
         9f:da:2d:04:ce:ff:a0:cf:0f:46:39:5f:49:61:52:75:ee:62:
         03:38:71:de:16:17:87:5a:e3:c3:71:ce:a0:ba:16:b0:15:7a:
         9d:2f:3a:bc:9c:1e:89:22:0d:ad:82:32:60:f4:b8:4e:6d:f9:
         7e:92:51:26:33:ba:1c:90:8f:3d:a5:bd:90:cb:9f:ae:a4:d6:
         e3:ae:95:98:b3:4f:73:2a:77:92:a7:c0:a2:a9:40:a2:ad:f0:
         38:9f:1c:47:d6:5e:92:40:47:c3:22:a7:bf:b2:8d:c5:e2:bc:
         70:35:8b:f9:68:b3:9a:16:88:bd:df:32:3d:8a:43:e1:6c:29:
         a5:76:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:30:03 2025 by rpki-client