Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33302e302f32342d3234203d3e203237393531.roa
File:                     3135322e3233312e33302e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          2gkSc+Nf5StnTnFunIiyXIv915OzY78whFIw+JjCOQY=
Subject key identifier:   91:AA:34:72:51:01:82:6C:D3:3F:B7:50:AC:16:F8:6E:45:DB:62:3E
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       5897652F4873F6F147237B1EB9372C474E79B775
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33302e302f32342d3234203d3e203237393531.roa
Signing time:             Fri 01 Nov 2024 14:05:00 +0000
ROA not before:           Fri 01 Nov 2024 14:00:00 +0000
ROA not after:            Fri 31 Oct 2025 14:05:00 +0000
asID:                     27951
IP address blocks:        152.231.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:97:65:2f:48:73:f6:f1:47:23:7b:1e:b9:37:2c:47:4e:79:b7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Nov  1 14:00:00 2024 GMT
            Not After : Oct 31 14:05:00 2025 GMT
        Subject: CN=91AA34725101826CD33FB750AC16F86E45DB623E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:82:b2:36:5c:5d:f7:12:e5:b5:2b:6e:3e:
                    31:87:70:c6:cf:2e:d7:b1:8e:b8:98:b3:a0:b1:05:
                    53:9c:d9:f4:18:49:a4:06:c2:7e:fb:86:25:c2:4a:
                    75:e3:f3:25:0d:ce:c4:55:94:40:a5:85:4c:0b:ab:
                    59:94:95:a1:8b:ab:fe:5d:95:3a:8d:7d:b5:d6:b0:
                    62:1a:e6:3e:7f:77:8d:08:ba:05:96:09:cc:9d:45:
                    6b:f2:26:02:0e:ff:6e:4d:24:15:45:0b:e4:c7:8d:
                    20:17:f4:04:ae:ab:86:28:38:24:d5:70:d8:df:2f:
                    49:fe:f2:3a:42:3a:ec:2e:99:ed:4b:e4:cd:e0:a6:
                    fe:96:7a:a1:b2:b6:0e:b1:35:19:7b:6c:32:1a:1e:
                    01:29:d5:73:ce:b9:c0:04:08:cb:56:88:7f:af:26:
                    16:db:b7:43:91:da:3b:7d:23:34:73:07:89:9e:6f:
                    2f:f2:33:38:ad:c9:5c:a5:3a:85:10:ad:d0:eb:d5:
                    f6:39:cc:bc:ce:95:e3:c8:ef:66:ff:c2:49:04:50:
                    12:01:97:50:92:91:2d:d1:0c:59:55:bc:e1:63:ff:
                    70:6a:87:3b:07:2e:34:0c:dc:00:17:c6:39:70:0c:
                    6b:1f:12:0e:22:2a:92:63:7e:5f:23:34:8c:0f:f1:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AA:34:72:51:01:82:6C:D3:3F:B7:50:AC:16:F8:6E:45:DB:62:3E
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33302e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:7f:17:d3:24:a8:db:b9:0e:22:a3:a6:f2:b4:ff:ed:d5:6d:
         91:a8:15:ae:c8:3c:a6:e9:22:4e:e1:99:9b:27:fc:e0:b2:8e:
         b5:4f:23:59:49:fb:53:49:d6:8d:d8:61:a4:05:20:3f:a9:7d:
         9d:25:6c:a3:60:b7:ce:cd:a5:7f:7e:ba:25:ec:24:ad:75:5b:
         09:22:8b:f4:c0:8e:30:18:aa:d8:5b:e1:f7:b5:c0:68:3f:fb:
         67:14:13:bf:77:18:de:47:d6:08:78:77:59:0f:c4:b1:3d:d4:
         b0:59:a3:e9:e8:90:3e:cd:e8:12:e1:1d:3c:a2:cf:58:82:33:
         2d:11:06:f4:eb:c0:5a:62:76:64:ad:57:c5:54:c1:be:c9:c0:
         f0:77:3e:13:42:fc:6f:87:8b:73:08:1d:74:e9:1b:e6:29:89:
         31:fd:1d:59:49:49:b0:68:53:ec:ed:34:6b:ad:f2:39:de:b6:
         6b:8f:99:88:c0:4b:bf:8c:ce:d3:2d:18:e2:e0:34:4c:9d:63:
         80:74:1a:0d:f7:16:e0:ae:03:25:a3:d4:7b:a1:ba:4b:f9:55:
         c1:b9:bd:1d:22:18:a3:8d:18:2b:7d:32:74:41:82:81:90:69:
         94:8b:3e:13:69:f3:46:ce:d6:3b:df:3a:7a:e1:c7:11:27:3e:
         2c:7e:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org