Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          htsca0yu/jp8ryvbQVbwak831xK5SDaVisBUAPEZ94o=
Subject key identifier:   53:A2:B3:CA:13:95:2E:80:EA:BC:35:C2:DF:FA:5B:11:55:1F:F6:E4
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       54AA7CFE12D2545775CC8DB5D84CD15CBC69A37E
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:15 +0000
ROA not before:           Mon 02 Jun 2025 15:55:15 +0000
ROA not after:            Mon 01 Jun 2026 16:00:15 +0000
asID:                     273261
IP address blocks:        148.224.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:aa:7c:fe:12:d2:54:57:75:cc:8d:b5:d8:4c:d1:5c:bc:69:a3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:15 2025 GMT
            Not After : Jun  1 16:00:15 2026 GMT
        Subject: CN=53A2B3CA13952E80EABC35C2DFFA5B11551FF6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:f1:35:11:5c:49:d8:d1:69:de:77:6e:5a:
                    9b:c3:2f:fa:cc:b3:97:e7:72:d0:42:52:22:ba:79:
                    51:12:48:f4:53:bf:97:02:56:ac:4f:d9:b1:02:a1:
                    a0:23:16:7a:34:c3:d3:1f:7a:f2:05:06:e0:f1:e7:
                    3c:85:5d:5e:18:eb:d9:9c:98:26:24:d6:d1:bd:80:
                    ca:9e:77:89:6f:6f:0a:77:26:d2:62:8e:1e:93:78:
                    2f:ee:a3:69:55:83:f9:2d:79:97:fb:2e:8c:8f:af:
                    3d:aa:61:b1:43:06:ef:cd:1d:3e:15:7b:24:87:39:
                    39:9d:4b:65:f5:28:46:05:22:57:dc:62:7a:26:e7:
                    2e:66:b7:87:50:5c:e7:80:ce:c1:b8:42:5d:fc:a8:
                    49:cc:c0:8d:df:40:06:94:6a:17:7b:78:a1:35:82:
                    96:18:f0:da:fd:dc:75:f7:9d:e4:88:cb:0e:8e:d3:
                    9f:fb:19:a5:3a:fa:61:47:a4:2f:e3:bb:93:a4:fa:
                    5f:a0:07:3a:27:47:2b:7d:da:e0:f2:cf:85:ec:38:
                    b4:4b:1e:39:b1:33:83:22:a9:05:d6:87:f9:dc:67:
                    6a:14:26:dc:98:4f:7e:2d:d2:6c:4b:ff:b6:12:9a:
                    9c:c5:21:03:6d:63:57:eb:c0:29:87:5a:ac:a1:10:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:B3:CA:13:95:2E:80:EA:BC:35:C2:DF:FA:5B:11:55:1F:F6:E4
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:39:f6:fd:52:cb:3a:b5:43:3c:0d:f1:3d:71:85:cb:72:29:
         30:7a:23:01:87:79:2b:96:93:b6:9e:7a:48:f6:9e:17:14:99:
         47:93:91:e6:fc:24:6d:f3:2d:c9:2e:05:ee:46:7c:5a:7c:59:
         f3:31:10:fc:cd:dc:de:81:eb:21:2f:7a:d6:86:85:3e:50:8b:
         56:0f:7b:55:77:ce:e9:5f:f3:81:3f:bb:e1:4f:5f:d6:6b:f7:
         cd:70:1e:4d:34:1e:54:49:0d:32:85:c5:78:38:90:5f:ca:f8:
         3b:a9:0a:9e:a3:af:e0:20:0e:df:3a:db:a9:71:31:5d:20:04:
         ac:d8:a0:ad:c0:33:e7:8f:d3:04:8b:07:60:95:93:1e:5a:a1:
         03:fe:4b:44:eb:8e:f7:d3:13:ab:93:48:8a:27:fd:eb:d2:fa:
         d3:d1:e9:61:41:a9:be:c1:07:79:fa:9e:d3:9d:60:d0:04:eb:
         77:0d:9d:b0:7e:90:1f:a3:b5:52:4f:a6:30:0d:da:57:59:4d:
         66:c1:f7:6d:f2:28:73:cb:61:69:74:e3:6f:8e:8b:04:0a:0d:
         31:3c:e7:01:6a:e1:c0:d9:89:77:ad:a8:05:0e:a1:96:ad:cc:
         67:b3:44:cf:00:32:22:e0:16:f9:13:cd:17:e2:a9:68:5e:b1:
         6b:b5:ea:0a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVKp8/hLSVFd1zI212EzRXLxpo34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA2MDIxNTU1MTVaFw0yNjA2MDExNjAwMTVaMDMxMTAvBgNV
BAMTKDUzQTJCM0NBMTM5NTJFODBFQUJDMzVDMkRGRkE1QjExNTUxRkY2RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVXfE1EVxJ2NFp3nduWpvDL/rM
s5fnctBCUiK6eVESSPRTv5cCVqxP2bECoaAjFno0w9MfevIFBuDx5zyFXV4Y69mc
mCYk1tG9gMqed4lvbwp3JtJijh6TeC/uo2lVg/kteZf7LoyPrz2qYbFDBu/NHT4V
eySHOTmdS2X1KEYFIlfcYnom5y5mt4dQXOeAzsG4Ql38qEnMwI3fQAaUahd7eKE1
gpYY8Nr93HX3neSIyw6O05/7GaU6+mFHpC/ju5Ok+l+gBzonRyt92uDyz4XsOLRL
HjmxM4MiqQXWh/ncZ2oUJtyYT34t0mxL/7YSmpzFIQNtY1frwCmHWqyhELgPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUU6KzyhOVLoDqvDXC3/pbEVUf9uQwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjMxMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4NUwDQYJKoZIhvcNAQELBQADggEBAEI59v1Syzq1QzwN8T1xhctyKTB6IwGHeSuW
k7aeekj2nhcUmUeTkeb8JG3zLckuBe5GfFp8WfMxEPzN3N6B6yEvetaGhT5Qi1YP
e1V3zulf84E/u+FPX9Zr981wHk00HlRJDTKFxXg4kF/K+DupCp6jr+AgDt8626lx
MV0gBKzYoK3AM+eP0wSLB2CVkx5aoQP+S0TrjvfTE6uTSIon/evS+tPR6WFBqb7B
B3n6ntOdYNAE63cNnbB+kB+jtVJPpjAN2ldZTWbB923yKHPLYWl042+OiwQKDTE8
5wFq4cDZiXetqAUOoZatzGezRM8AMiLgFvkTzRfiqWhesWu16go=
-----END CERTIFICATE-----
Generated at Mon Jun 23 02:26:01 2025 by rpki-client