Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232322e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3232322e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          vScKwpC73zBl1ocL1g1gzoqpBid1ac2wHY13Pvh8cUo=
Subject key identifier:   C7:14:8D:91:92:F6:81:AE:86:6A:47:67:5A:1C:EB:31:00:95:73:50
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       55F1D5DE013982F7E40499CD7EC9FCE6807669AB
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232322e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:16 +0000
ROA not before:           Mon 02 Jun 2025 15:55:16 +0000
ROA not after:            Mon 01 Jun 2026 16:00:16 +0000
asID:                     273261
IP address blocks:        148.224.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f1:d5:de:01:39:82:f7:e4:04:99:cd:7e:c9:fc:e6:80:76:69:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:16 2025 GMT
            Not After : Jun  1 16:00:16 2026 GMT
        Subject: CN=C7148D9192F681AE866A47675A1CEB3100957350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:6d:d7:ab:22:f4:45:ac:d5:79:12:79:9d:
                    2d:63:e2:7c:5d:a6:06:dd:88:fe:62:3a:ae:2c:ec:
                    2f:44:bf:f5:63:6f:b0:e7:d8:07:a4:0a:3c:0b:47:
                    bc:f7:30:fb:6f:c6:6b:76:3a:71:80:f8:df:77:e3:
                    9c:dd:94:a9:48:b3:75:d1:7c:64:5d:8e:ae:a0:36:
                    25:63:cb:e0:9f:c7:03:e1:73:57:17:14:14:9b:d2:
                    ef:24:0c:c6:b4:23:75:3b:47:d9:33:38:34:dc:3f:
                    6b:e7:22:07:8f:df:32:4a:8c:d2:86:05:6a:d2:12:
                    65:37:a9:24:ac:7c:72:f8:c5:bd:63:8d:16:57:d5:
                    c3:c0:f9:ec:4c:81:89:a4:21:64:ab:01:0e:05:f7:
                    0c:d4:3a:08:86:3a:16:02:3b:fe:85:2c:e8:6b:64:
                    fd:9c:45:04:5e:72:c6:20:4f:a6:22:ad:f4:a8:9e:
                    88:4c:23:0f:6c:ca:26:a9:9a:fc:4e:02:c1:4a:16:
                    cd:12:c6:fa:02:b5:35:83:7f:16:b3:98:1b:d4:3e:
                    a7:63:b6:3e:c2:4d:72:07:aa:b6:8d:29:49:ed:e8:
                    12:fa:51:5d:42:03:e6:58:48:4c:50:af:53:dd:a5:
                    4a:03:4e:29:c4:2b:71:1e:2c:2c:f1:57:9b:cf:40:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:8D:91:92:F6:81:AE:86:6A:47:67:5A:1C:EB:31:00:95:73:50
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232322e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:bd:d9:d1:2c:12:64:b5:d2:67:d3:0f:2b:89:01:d6:02:
         c0:f2:ef:fa:c5:af:d8:ff:dd:d6:a6:c5:80:09:0e:5f:3f:6f:
         23:e5:c9:d5:63:9c:01:8e:f7:08:0e:f8:63:24:f1:68:21:15:
         43:fd:cf:8c:d5:18:eb:c4:50:14:ac:ad:5b:4e:44:c2:1e:de:
         bc:4e:13:a2:ae:ed:15:4a:05:24:2f:e5:bb:d2:2d:66:be:16:
         2a:e8:34:9b:d4:8f:20:23:3b:60:43:3c:df:13:32:b3:f9:7e:
         b1:a9:56:30:e5:50:01:f1:4a:03:19:15:b8:7f:85:5c:db:e8:
         32:30:94:fd:5f:b7:3c:c8:48:12:54:73:eb:98:fd:5a:51:a4:
         03:45:41:dd:8f:fc:ca:14:b9:f4:78:37:11:92:e9:06:da:9d:
         1e:82:7e:b1:d1:55:70:32:eb:27:1e:0c:65:8a:43:45:7f:b5:
         04:dd:51:99:be:92:fb:13:ce:3d:66:7f:79:63:55:96:2b:24:
         dd:f5:d0:78:63:a7:2f:2a:5e:6f:ec:eb:a5:b4:15:ba:e8:cb:
         8b:7a:ce:7b:26:21:5c:a2:7d:c9:54:de:89:ba:13:28:67:1b:
         68:d8:f0:fb:5e:51:cd:aa:5b:61:56:0f:24:85:83:0e:df:31:
         95:eb:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:41:07 2025 by rpki-client