Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32382e302f32342d3234203d3e20323632313836.roa
File:                     3135322e3233312e32382e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          sOJn4rc2OrUB1KnRxDFGW658KJp1bvYdna3CXsO3rlw=
Subject key identifier:   F5:49:D9:28:6F:65:B4:E5:44:D8:7C:D4:19:CF:20:90:61:36:B6:AF
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       07CA6C994262F28BDA676423F3B572CDE8429C59
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32382e302f32342d3234203d3e20323632313836.roa
Signing time:             Fri 23 May 2025 01:15:00 +0000
ROA not before:           Fri 23 May 2025 01:10:00 +0000
ROA not after:            Fri 22 May 2026 01:15:00 +0000
asID:                     262186
IP address blocks:        152.231.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 05:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ca:6c:99:42:62:f2:8b:da:67:64:23:f3:b5:72:cd:e8:42:9c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: May 23 01:10:00 2025 GMT
            Not After : May 22 01:15:00 2026 GMT
        Subject: CN=F549D9286F65B4E544D87CD419CF20906136B6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:c7:2a:0b:ec:35:0e:6e:f0:b5:63:26:59:
                    4b:d9:43:96:7d:99:05:5a:19:53:96:0d:74:26:86:
                    25:90:ba:6f:d0:67:0a:b0:7c:19:90:c0:b9:64:f7:
                    5b:d4:ab:d0:87:89:59:ac:f5:96:20:07:eb:d5:08:
                    bf:03:e7:7e:d4:a0:72:d2:25:6f:7a:ff:4a:b0:8f:
                    25:04:85:96:a2:52:e5:26:54:85:aa:c6:db:ce:2b:
                    49:6d:7f:53:33:22:9e:6e:5c:cc:c5:c8:bf:45:c4:
                    5b:ad:54:9b:49:94:c2:4d:d2:89:43:1b:8e:dc:ec:
                    b6:08:5c:c2:12:31:95:8b:6a:d7:d8:d8:51:cf:52:
                    5e:4f:d4:33:eb:f3:5b:bd:15:7c:4f:3c:b6:f1:2e:
                    50:46:2b:ba:4b:16:e3:c8:b7:dd:1d:c5:6a:76:0c:
                    5b:01:57:80:f4:56:13:04:47:4e:92:b6:7d:7e:73:
                    87:c8:7b:7e:55:e3:70:60:36:43:3c:68:ba:00:88:
                    ac:d8:00:cc:d6:da:0a:9e:d8:02:bb:d8:da:c5:70:
                    62:ca:63:0e:88:95:f0:74:c3:13:72:f7:56:83:a0:
                    b1:92:b8:61:61:fb:a1:63:70:e3:6e:ac:e9:0a:c9:
                    46:a6:63:94:b4:1d:03:0a:c2:84:b6:4e:2f:04:22:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:D9:28:6F:65:B4:E5:44:D8:7C:D4:19:CF:20:90:61:36:B6:AF
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32382e302f32342d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:2d:2c:c6:e4:03:e5:e6:88:84:a5:f8:2d:3e:e2:f8:2f:
         a9:bc:51:31:d8:a2:de:43:d7:7f:e9:a4:b2:6a:86:b1:ed:6c:
         50:c7:97:15:9f:3c:f7:30:5a:8c:ff:39:be:1f:98:61:71:e9:
         f7:01:05:35:68:26:49:bb:bd:c9:ad:e7:e6:09:25:69:3f:a5:
         c8:b8:04:0a:db:1c:14:5f:13:2d:e5:3f:c0:c9:f1:6e:d9:f8:
         fc:ad:88:f6:5e:6d:6f:fa:d5:4b:e6:2b:8b:ff:c9:ab:0e:49:
         2c:a9:0b:cb:7f:89:de:49:6c:ee:ea:39:ce:b7:fc:38:9b:3f:
         cc:a1:9f:af:66:6d:0a:f3:6c:db:12:d8:61:73:20:fe:77:4c:
         6f:c7:82:a4:40:3b:2a:40:bf:08:32:6c:97:ff:de:3d:df:db:
         a9:16:3b:f1:6e:65:89:01:b2:11:85:2e:b7:79:7d:f6:8c:9f:
         e8:81:cf:24:b2:7d:b1:35:57:03:8b:d1:17:fb:15:f3:1d:27:
         bb:07:ee:97:a1:a8:d6:59:78:9d:1d:98:21:6c:32:88:38:2d:
         f3:9b:a3:d9:0a:ab:b3:db:2e:6a:ff:d9:63:25:4c:d7:c1:79:
         2c:7f:0f:b1:4b:13:e5:42:00:4a:23:3b:d7:6b:f0:5f:95:34:
         9d:d8:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:04:07 2025 by rpki-client