Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231322e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3231322e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          R/Htck9eSsa98zDapbHL+pku8cAFW94ZUz4X4C1hu/s=
Subject key identifier:   A4:75:FA:F6:D6:7D:64:0F:8C:2B:CB:9E:13:BE:06:32:75:0E:AB:90
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       0D3314134D471F9E4F5FBE23846551B947FBE6E6
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231322e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:18 +0000
ROA not before:           Mon 02 Jun 2025 15:55:18 +0000
ROA not after:            Mon 01 Jun 2026 16:00:18 +0000
asID:                     273261
IP address blocks:        148.224.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:33:14:13:4d:47:1f:9e:4f:5f:be:23:84:65:51:b9:47:fb:e6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:18 2025 GMT
            Not After : Jun  1 16:00:18 2026 GMT
        Subject: CN=A475FAF6D67D640F8C2BCB9E13BE0632750EAB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:0f:3e:d8:0e:05:cd:aa:4b:8b:eb:95:51:
                    49:c1:e3:f0:e9:78:e7:65:22:c6:c9:d8:12:cf:ec:
                    51:4f:e1:a6:c2:8e:2c:b5:76:1e:74:0d:89:84:e0:
                    06:18:fb:34:3c:bb:3d:05:4c:87:c2:1d:56:3f:aa:
                    0b:35:6c:ce:74:a8:bb:eb:2b:e3:1b:e1:b1:50:fa:
                    35:d6:65:92:2e:f2:ad:25:7f:94:a7:d1:52:00:cf:
                    d0:ee:16:4a:bf:ad:6c:d7:07:36:67:12:25:a3:17:
                    60:72:1c:70:c5:a3:4f:f7:dd:83:88:6b:0f:9b:e0:
                    31:29:88:e5:b4:d2:d5:61:d1:d1:a2:2c:4a:d0:99:
                    83:bd:95:0b:f1:c0:14:84:e4:28:a5:9e:e8:e6:58:
                    3a:2f:01:3a:e1:86:cb:35:72:81:98:cf:af:f8:69:
                    62:08:21:0c:dd:2e:6a:2f:a1:03:69:10:05:26:8e:
                    9c:ff:d2:85:e4:58:eb:b9:55:8e:59:36:b4:a3:12:
                    bc:e2:b8:6e:fd:36:a4:e5:aa:ad:7a:d3:cc:9f:2a:
                    34:24:4f:80:19:71:13:aa:c8:c8:e8:4d:de:ab:7b:
                    0f:41:77:f1:1c:e4:a1:8b:fa:26:f5:4e:8f:b7:79:
                    6e:3d:2c:cc:0c:16:a3:e6:4c:47:b9:55:01:da:8c:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:75:FA:F6:D6:7D:64:0F:8C:2B:CB:9E:13:BE:06:32:75:0E:AB:90
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231322e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:d3:9a:84:48:5e:cc:e6:e1:05:56:56:a4:84:57:9a:da:
         d2:4f:57:f5:57:80:fb:fb:fd:63:db:1b:7c:68:e3:d1:9d:75:
         e0:92:6e:ea:f0:ae:64:cc:e7:cb:8c:8d:5f:1c:cf:3d:ef:f0:
         21:ca:7b:95:ba:c9:1b:d5:76:eb:df:d3:53:d6:8d:bd:1a:31:
         a7:8e:6a:95:22:0c:7b:90:c5:d8:4e:31:3f:27:13:63:7d:39:
         17:b3:08:4e:7b:ec:86:aa:74:90:0e:c3:b6:b5:c5:49:fc:a6:
         ba:61:60:e5:3b:3e:c0:58:78:11:2b:40:09:06:f4:1f:f1:dc:
         2e:76:71:22:35:a3:c8:f8:7b:c1:3c:de:c3:76:78:06:18:31:
         ec:2f:12:e1:2a:87:a0:09:04:af:c0:92:f0:60:58:5a:2b:86:
         0d:4e:84:5c:3c:87:4b:eb:51:ca:89:07:90:48:3f:2d:77:b6:
         30:d4:5a:df:89:05:a4:7f:8c:a9:c4:a7:f2:48:1d:c3:f7:50:
         7b:d6:c4:72:13:14:8e:bf:aa:f0:1f:1c:ab:90:03:53:19:d0:
         b2:65:46:9d:9b:eb:84:2e:2f:43:b7:00:4f:5a:39:6f:38:89:
         0b:cb:41:cf:34:b6:02:51:3a:8b:b5:e6:4f:8b:fb:0f:07:c6:
         83:88:c1:55
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUDTMUE01HH55PX74jhGVRuUf75uYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA2MDIxNTU1MThaFw0yNjA2MDExNjAwMThaMDMxMTAvBgNV
BAMTKEE0NzVGQUY2RDY3RDY0MEY4QzJCQ0I5RTEzQkUwNjMyNzUwRUFCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTQ8+2A4FzapLi+uVUUnB4/Dp
eOdlIsbJ2BLP7FFP4abCjiy1dh50DYmE4AYY+zQ8uz0FTIfCHVY/qgs1bM50qLvr
K+Mb4bFQ+jXWZZIu8q0lf5Sn0VIAz9DuFkq/rWzXBzZnEiWjF2ByHHDFo0/33YOI
aw+b4DEpiOW00tVh0dGiLErQmYO9lQvxwBSE5CilnujmWDovATrhhss1coGYz6/4
aWIIIQzdLmovoQNpEAUmjpz/0oXkWOu5VY5ZNrSjErziuG79NqTlqq1608yfKjQk
T4AZcROqyMjoTd6rew9Bd/Ec5KGL+ib1To+3eW49LMwMFqPmTEe5VQHajH5jAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUpHX69tZ9ZA+MK8ueE74GMnUOq5AwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4NQwDQYJKoZIhvcNAQELBQADggEBACuM05qESF7M5uEFVlakhFea2tJPV/VXgPv7
/WPbG3xo49GddeCSburwrmTM58uMjV8czz3v8CHKe5W6yRvVduvf01PWjb0aMaeO
apUiDHuQxdhOMT8nE2N9ORezCE577IaqdJAOw7a1xUn8prphYOU7PsBYeBErQAkG
9B/x3C52cSI1o8j4e8E83sN2eAYYMewvEuEqh6AJBK/AkvBgWForhg1OhFw8h0vr
UcqJB5BIPy13tjDUWt+JBaR/jKnEp/JIHcP3UHvWxHITFI6/qvAfHKuQA1MZ0LJl
Rp2b64QuL0O3AE9aOW84iQvLQc80tgJROou15k+L+w8HxoOIwVU=
-----END CERTIFICATE-----
Generated at Mon Jun 23 02:26:09 2025 by rpki-client