Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139342e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139342e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          zl3MnAwp57gbzL1XVVrzDwQEcJ154NX/0Iofas1choE=
Subject key identifier:   15:44:C2:37:8E:5B:AA:A9:FF:C7:AE:55:A3:C3:DC:89:66:1D:08:C1
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       6C1CC5691623BDB9F2A729830464069592DD24EB
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139342e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:03 +0000
ROA not before:           Mon 02 Jun 2025 15:55:03 +0000
ROA not after:            Mon 01 Jun 2026 16:00:03 +0000
asID:                     273261
IP address blocks:        148.224.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1c:c5:69:16:23:bd:b9:f2:a7:29:83:04:64:06:95:92:dd:24:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:03 2025 GMT
            Not After : Jun  1 16:00:03 2026 GMT
        Subject: CN=1544C2378E5BAAA9FFC7AE55A3C3DC89661D08C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:b3:e4:46:21:c6:4d:86:a7:25:0d:a5:07:
                    a5:06:59:fb:a3:d7:aa:c6:7d:62:4b:7e:d1:2e:3f:
                    39:1b:88:48:3b:83:6a:ea:99:38:e2:39:c8:c0:cc:
                    41:b8:62:aa:86:4d:57:76:12:ac:83:a3:38:c1:f2:
                    39:6c:57:bc:bc:26:4d:dc:33:2d:6a:e0:38:44:bb:
                    d1:92:df:5e:1a:d1:4f:14:19:92:46:0f:62:be:4b:
                    8a:55:ae:94:89:a2:75:22:48:c4:cc:05:71:8f:26:
                    38:dc:79:a0:c0:5a:77:30:7b:71:48:69:45:f5:5f:
                    8f:cd:2a:71:c5:43:be:5a:a2:f0:86:26:f2:d1:e2:
                    ff:c3:4e:3e:e7:36:1e:15:1b:7a:40:06:b3:db:5b:
                    26:48:9d:ba:22:3b:ca:8f:e0:8d:9f:d7:68:64:20:
                    62:23:e7:c3:bf:0f:15:84:0d:ab:35:a2:e1:53:06:
                    57:bc:21:99:b8:77:b7:1b:2f:c1:91:7d:49:02:4f:
                    ef:c8:09:7a:af:43:f2:2b:83:fc:d1:cd:cb:2d:b7:
                    d1:08:ed:3b:8a:9a:62:87:a5:65:79:dd:2a:93:d3:
                    cd:8e:30:00:8b:c4:04:04:0a:37:b1:eb:0f:f4:b2:
                    1f:28:bf:56:66:fa:93:fe:07:91:71:43:20:a0:c0:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:44:C2:37:8E:5B:AA:A9:FF:C7:AE:55:A3:C3:DC:89:66:1D:08:C1
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139342e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:94:5a:3b:5d:cb:b8:85:15:aa:b5:55:4b:91:16:77:52:
         34:00:e5:20:0d:c9:76:f4:cf:0b:1d:c5:0e:12:3d:17:21:2e:
         f9:bd:d1:70:14:04:fd:d2:23:62:67:83:e5:57:69:66:a4:1d:
         f8:14:6d:95:ab:ee:cc:03:93:24:87:67:3a:e6:0f:3a:f8:c8:
         31:33:1f:99:0e:a1:19:fa:0a:4e:3b:5b:fe:b3:d8:32:ab:a4:
         bd:10:69:ba:77:8a:75:d0:9b:5b:ff:2d:b4:82:88:2a:43:00:
         02:37:46:8f:7a:39:45:11:01:44:d5:ec:c1:38:94:9a:1a:b6:
         cf:45:f4:35:30:72:5a:22:e5:d0:d7:90:69:76:19:67:37:b7:
         5f:3e:00:43:a3:b0:61:02:92:02:6e:58:41:ac:3e:69:b2:51:
         b0:16:1b:db:27:4f:6d:8f:79:d4:ac:52:2f:39:b9:bc:dc:6e:
         11:f0:dd:26:b0:78:6b:ab:31:a8:75:e6:9b:0e:71:80:88:9a:
         52:96:21:fa:e9:2c:f3:09:b1:14:2e:b1:41:0c:75:4b:1b:1c:
         ab:97:70:c2:b3:c5:ab:73:75:44:49:11:6e:79:1d:3f:2c:18:
         f0:4e:ca:16:7f:fa:6f:7a:1d:6f:2a:fb:bc:f4:e0:e5:fe:84:
         2c:4d:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:25:05 2025 by rpki-client