Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31392e302f32342d3234203d3e203532353035.roa
File:                     3135322e3233312e31392e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier:          vUiG2xWQ37vRkg7bL+4XEWrwHmnT9OI/ElHq+vITFCo=
Subject key identifier:   DF:6B:65:DC:AB:60:F8:15:0F:D6:2B:FD:A1:A3:77:5B:B3:13:71:F0
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       086576F71D7365B4EAE6DEC181EEB42368EB19A7
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31392e302f32342d3234203d3e203532353035.roa
Signing time:             Sun 15 Mar 2026 22:33:59 +0000
ROA not before:           Sun 15 Mar 2026 22:28:59 +0000
ROA not after:            Sun 14 Mar 2027 22:33:59 +0000
asID:                     52505
IP address blocks:        152.231.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:65:76:f7:1d:73:65:b4:ea:e6:de:c1:81:ee:b4:23:68:eb:19:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Mar 15 22:28:59 2026 GMT
            Not After : Mar 14 22:33:59 2027 GMT
        Subject: CN=DF6B65DCAB60F8150FD62BFDA1A3775BB31371F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:41:b4:4e:0a:08:a4:9f:ce:e3:7b:e2:6e:
                    dc:c1:8b:ce:f7:db:d7:70:bb:12:a0:2d:ab:a3:f2:
                    f6:30:ba:c3:67:1f:fb:2d:27:fa:33:38:ed:07:49:
                    21:3d:6f:ce:d3:f4:6b:c8:7a:04:a4:45:da:33:6c:
                    f0:a2:d4:31:71:33:a4:1d:cd:ff:fb:c1:c5:f1:aa:
                    cd:4c:72:87:91:93:0a:4d:38:c3:c9:60:b1:58:bf:
                    9f:67:ca:e4:37:c7:72:19:2f:0d:2a:e9:5b:45:1b:
                    c9:52:be:72:61:b8:b0:81:82:77:ab:55:48:63:48:
                    1e:41:e4:ac:ff:7f:fe:f0:50:81:2b:eb:3c:f8:36:
                    db:76:9e:f7:76:fb:dc:6a:76:c5:e3:48:0a:69:9f:
                    93:f0:5e:42:e9:d6:51:d8:87:b1:6d:e5:99:22:4f:
                    f8:b8:46:2f:14:b6:23:03:13:72:5e:2d:be:cd:90:
                    39:cb:1b:0c:44:5e:28:68:50:cb:30:65:5f:74:99:
                    07:de:99:de:1a:9e:40:af:9a:d3:03:c0:54:82:c8:
                    7c:71:3f:2c:70:0c:dc:d5:6d:32:01:99:4a:a9:90:
                    85:45:32:82:a3:a4:90:23:11:82:b3:3b:fa:78:b8:
                    06:59:dd:9c:07:59:8b:42:23:42:c4:e4:dc:52:91:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6B:65:DC:AB:60:F8:15:0F:D6:2B:FD:A1:A3:77:5B:B3:13:71:F0
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31392e302f32342d3234203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:d2:11:2e:f0:9f:9b:44:b1:ae:ec:60:94:7e:dc:c8:77:6f:
         d9:e4:ae:fb:04:be:29:27:a1:13:8a:15:57:fa:7a:8b:b8:83:
         7d:82:e0:da:42:77:f0:70:d8:30:11:6a:16:6b:c8:ec:7c:93:
         f8:df:72:7e:e1:b6:16:89:c8:ea:8e:11:ff:b2:71:45:d3:f1:
         c4:58:b1:92:5a:18:da:41:0e:c9:4c:72:ed:9a:14:58:e3:cc:
         7f:3c:80:2f:89:97:17:d9:2f:59:6a:e6:5a:08:6b:10:a4:11:
         ac:c1:5c:d0:a8:b9:d1:1e:55:ae:1f:82:1a:71:08:02:01:a7:
         8e:7c:92:ea:06:62:7a:dc:b7:d0:34:53:78:6d:f6:b0:3a:36:
         ca:c9:59:a9:aa:eb:d8:a0:98:13:d8:80:a9:c4:17:57:0e:7f:
         4c:94:ac:b7:9a:68:66:aa:7c:ef:8d:b5:22:fb:03:de:da:2e:
         ff:ce:c1:5d:1e:2a:4b:d1:12:85:3a:8f:bc:e0:7e:79:a9:53:
         db:ee:c9:a4:d9:a2:c9:b8:52:14:86:ee:ac:89:f0:cf:41:88:
         28:6a:2c:cc:19:90:8b:fc:72:99:16:8c:c4:4d:da:0f:e8:b4:
         a5:0b:22:1e:e5:c0:a6:ee:78:b0:47:00:1e:d7:13:45:2d:3a:
         74:f9:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:25:34 2026 by rpki-client