Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32382e302f32342d3234203d3e20323636383737.roa
File:                     3135322e3233312e32382e302f32342d3234203d3e20323636383737.roa (raw, json)
Hash identifier:          HNwkvdlygyHOyScJwVNp8r+DmAJkI8lgiKW9hQy21Ps=
Subject key identifier:   17:74:0C:E8:05:A1:CA:AC:0C:81:C3:39:1E:64:9D:78:93:8A:D3:94
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       494D9B081285139FAC501408A84D0208D98FABB8
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32382e302f32342d3234203d3e20323636383737.roa
Signing time:             Fri 11 Jul 2025 21:25:04 +0000
ROA not before:           Fri 11 Jul 2025 21:20:04 +0000
ROA not after:            Fri 10 Jul 2026 21:25:04 +0000
asID:                     266877
IP address blocks:        152.231.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 19:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:9b:08:12:85:13:9f:ac:50:14:08:a8:4d:02:08:d9:8f:ab:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Jul 11 21:20:04 2025 GMT
            Not After : Jul 10 21:25:04 2026 GMT
        Subject: CN=17740CE805A1CAAC0C81C3391E649D78938AD394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:63:2f:de:56:3c:a0:96:64:98:69:f4:37:
                    88:08:68:04:a3:f1:b5:87:81:4f:61:1f:0e:3b:de:
                    2d:5f:eb:ab:e8:72:d0:61:30:1d:18:6f:5d:4d:6a:
                    07:3e:b1:dd:1b:4b:11:07:25:e1:a5:50:99:c9:1f:
                    95:59:23:5b:4f:34:71:eb:3e:37:a9:77:fa:ea:89:
                    d7:0a:40:ab:c8:de:8d:e4:b7:be:81:47:2e:90:64:
                    39:d3:65:6b:c2:3b:92:2d:76:35:36:17:ba:66:25:
                    f2:13:aa:86:6a:d8:3d:3e:24:94:5b:dd:8f:d0:72:
                    bd:0f:1b:d7:39:93:de:b0:2d:d8:46:d1:77:1d:4b:
                    48:1a:d4:11:d0:10:9e:13:84:9a:ea:48:ca:10:b5:
                    cf:6d:cd:14:6d:05:b6:29:bc:b4:c9:37:08:67:72:
                    23:54:ca:a5:e8:fc:17:ab:d8:e0:8f:71:8d:77:21:
                    df:d8:7f:68:aa:f8:d5:58:4f:74:96:64:b9:f2:09:
                    0c:22:e7:b0:01:49:dc:73:f4:ae:00:19:e3:c2:80:
                    70:e8:33:b6:bc:6b:d4:b3:dd:a5:ae:44:69:d7:5e:
                    33:1a:f1:9b:d5:93:bc:f6:80:66:4c:d6:a4:d3:0d:
                    d5:67:e1:20:88:6a:ea:17:52:c7:77:7c:18:f5:a6:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:74:0C:E8:05:A1:CA:AC:0C:81:C3:39:1E:64:9D:78:93:8A:D3:94
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32382e302f32342d3234203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:ab:a6:0b:80:cb:7b:89:b8:0a:63:3b:b5:d5:27:9f:1b:
         c8:fc:e3:37:c1:73:ca:2a:25:5e:9e:4f:68:4a:ac:da:02:3a:
         f3:9f:36:c0:b7:f0:09:e7:a4:da:b0:da:cc:13:84:30:38:14:
         f4:a9:d9:c7:6e:e5:d4:5e:aa:10:c7:13:7a:18:4c:c9:ca:e4:
         87:81:02:d5:e3:d1:4a:5b:1e:8a:40:19:2d:1d:7d:c9:ed:af:
         32:d0:2d:2a:d6:00:64:9a:b2:52:0f:a1:15:da:3f:5e:8c:36:
         14:68:49:84:91:14:71:8a:8b:c8:c9:02:1f:c5:2e:10:cc:60:
         fe:8e:e9:42:d4:a2:7f:1f:03:fb:b2:31:f7:92:5d:e6:76:da:
         01:37:0f:9d:2b:5a:7c:60:fe:ca:99:b7:fb:84:1c:ec:d5:b2:
         41:4f:78:35:81:5f:b7:ae:90:ce:30:06:81:82:ca:aa:5a:fa:
         9e:d4:9e:91:c6:91:4a:8e:5a:01:fa:de:ec:9e:6e:c7:b0:4e:
         62:6e:a4:43:f9:f8:40:81:26:c8:25:cc:3b:08:4b:c1:55:c9:
         d8:ef:7e:e6:76:1f:64:60:91:00:7f:db:4c:aa:18:73:47:e8:
         a2:35:3f:d7:05:51:01:5a:c8:f1:6f:83:ac:23:c9:00:78:82:
         b1:d4:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:48:36 2025 by rpki-client