Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232302e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3232302e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          SUpEO94k11R+QtslZ/2/XA6WXPNQz3OJBMoXcnPhfys=
Subject key identifier:   F9:1B:85:DD:B2:2C:8D:3F:69:6D:DB:FA:B5:43:18:B7:70:BC:DA:29
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       78097D2264A18A3542765F06B134DE28ECF94D9C
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232302e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:00 +0000
ROA not before:           Mon 02 Jun 2025 15:55:00 +0000
ROA not after:            Mon 01 Jun 2026 16:00:00 +0000
asID:                     273261
IP address blocks:        148.224.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:09:7d:22:64:a1:8a:35:42:76:5f:06:b1:34:de:28:ec:f9:4d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:00 2025 GMT
            Not After : Jun  1 16:00:00 2026 GMT
        Subject: CN=F91B85DDB22C8D3F696DDBFAB54318B770BCDA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:11:b7:5d:df:ed:c3:62:e1:5e:d3:16:6f:
                    9f:c1:2a:53:8e:30:24:33:be:a2:88:09:d5:89:48:
                    39:37:52:b1:f8:f1:e3:10:04:39:b3:3d:d7:27:08:
                    a8:ab:71:3b:e9:07:cb:25:9b:d1:0b:8e:af:15:50:
                    50:a9:18:60:26:c0:07:e2:8f:6e:20:31:f5:e9:65:
                    27:64:ae:46:68:de:b0:c0:3b:ca:18:05:68:4d:39:
                    52:8c:e5:b9:05:14:08:a0:31:4d:c0:26:ef:56:fb:
                    76:7d:7f:4e:ae:99:62:2f:3d:04:04:5a:56:4d:c9:
                    9d:17:45:62:73:b8:6b:d1:24:8c:17:c1:66:e2:c1:
                    d2:79:3f:a5:32:18:e3:07:c2:a3:28:86:a5:ed:65:
                    1b:14:db:fa:c4:53:d4:a6:8b:c4:d2:32:c3:f1:f3:
                    f3:b1:21:41:3a:6e:17:a9:29:88:5e:f1:1b:4a:8a:
                    21:b0:1f:c8:15:98:e6:cd:df:b2:0d:54:9c:53:fd:
                    1c:f6:47:c4:85:9b:de:1a:c1:ce:9a:41:8d:f0:b1:
                    f0:46:97:21:0f:a4:9a:37:51:38:a8:39:27:2a:cd:
                    6a:e4:1e:f8:7f:5c:f3:a8:76:f1:a0:e5:32:b5:3d:
                    49:6e:d6:7a:3e:b1:00:44:39:73:ef:e0:07:9b:cc:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1B:85:DD:B2:2C:8D:3F:69:6D:DB:FA:B5:43:18:B7:70:BC:DA:29
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232302e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:23:57:40:e7:0a:5c:61:af:45:92:1c:9f:ff:9a:c2:18:
         0b:ac:fd:ee:05:ca:b2:da:9a:d0:2e:e8:b6:e4:24:52:4f:fd:
         45:f8:52:43:ef:a5:11:90:2a:d3:79:5a:50:30:24:1c:05:15:
         fc:c0:91:71:af:6c:ce:9d:77:48:35:aa:7e:c4:b3:cb:ea:74:
         98:cb:0e:08:10:7d:e6:0c:be:a8:82:0b:e4:74:30:90:36:f0:
         c1:6f:2c:d9:73:e7:69:93:69:af:38:45:40:46:fd:dc:d0:f4:
         b8:d4:bf:36:10:0f:67:f2:24:17:92:5c:a8:9b:79:79:98:aa:
         fe:0e:15:aa:91:d7:68:3e:92:4c:e6:c4:ba:44:60:34:23:c3:
         58:3d:42:45:78:1e:9f:bf:1c:3e:f8:93:d4:8e:b7:8b:89:fa:
         56:15:71:45:52:af:fb:14:5d:78:d9:b2:61:88:59:d4:fe:4c:
         68:c4:89:e5:b4:2e:7b:26:be:d3:6e:58:08:ab:23:4f:5d:08:
         e0:ce:42:13:d8:50:08:3a:cb:8b:44:29:2a:c9:32:cd:ce:8f:
         4f:dd:f5:cb:cf:32:c4:d3:c3:f9:eb:fd:5b:d0:eb:c7:cc:45:
         51:3e:86:c6:0d:c9:78:60:d7:e3:4b:b0:0c:3d:bf:5b:85:9a:
         fc:17:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:25:15 2025 by rpki-client