Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          k9G7R1qWhflWRAmJfyAStayaxXhy0T+8Wj326MhbfWo=
Subject key identifier:   5D:A0:00:93:B0:3A:A2:68:3A:C3:65:C0:63:FD:F7:1D:04:15:FB:F8
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       1AAAB92B1722CF21F59E657343CCF8C655C4F165
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:13 +0000
ROA not before:           Mon 02 Jun 2025 15:55:13 +0000
ROA not after:            Mon 01 Jun 2026 16:00:13 +0000
asID:                     273261
IP address blocks:        148.224.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:aa:b9:2b:17:22:cf:21:f5:9e:65:73:43:cc:f8:c6:55:c4:f1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:13 2025 GMT
            Not After : Jun  1 16:00:13 2026 GMT
        Subject: CN=5DA00093B03AA2683AC365C063FDF71D0415FBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:a9:9b:c8:65:e1:9e:6c:86:36:49:78:c7:
                    0f:63:9f:18:27:3e:ae:47:aa:c6:ce:69:84:ab:ef:
                    3c:63:86:d0:8c:41:76:47:46:3b:80:49:38:42:f1:
                    6a:c6:a6:7e:7f:30:58:19:00:1e:eb:a5:2d:3a:1d:
                    1b:b5:c3:c8:6a:4e:91:3e:32:4a:03:fe:18:26:5d:
                    b7:78:7e:3e:11:52:e1:cc:e7:31:11:a4:3a:ae:ad:
                    32:ca:d1:74:b9:2f:46:5c:d3:0c:82:b2:fc:75:25:
                    14:43:90:2c:b0:54:d3:d7:a2:f1:82:a5:71:5c:66:
                    0b:37:75:14:0e:81:97:05:94:8e:51:ea:17:72:7c:
                    41:44:af:a3:e2:2c:37:cb:67:3c:d8:0d:d5:5e:a9:
                    b6:f9:1d:85:37:46:8c:42:8d:e9:7f:a9:0f:a1:87:
                    00:2f:25:32:25:19:cf:36:ef:67:8d:3d:70:f3:32:
                    6c:33:58:37:11:3c:bc:2b:e4:1a:36:c4:37:3d:73:
                    67:db:d7:07:d2:a6:15:f3:a6:5e:92:ae:20:7e:70:
                    88:c5:54:2d:96:8b:55:e2:37:5f:94:ba:ae:a4:8b:
                    74:90:a1:b0:c2:08:57:07:92:54:c0:07:85:59:60:
                    79:89:4c:26:a8:1c:04:62:16:56:97:d0:90:9b:ce:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:00:93:B0:3A:A2:68:3A:C3:65:C0:63:FD:F7:1D:04:15:FB:F8
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:e1:e0:a5:b2:c0:72:1f:83:bd:40:df:7d:94:ff:3e:cb:
         c6:5e:10:49:25:76:0e:a1:a0:49:b7:29:4b:35:38:d1:25:15:
         0c:8f:46:3e:e5:b8:15:75:7a:41:f0:91:df:14:af:80:25:6c:
         24:ee:cb:48:00:83:b4:cb:00:c9:a4:ff:d3:d0:64:93:00:ea:
         31:dc:7d:15:c6:ae:06:c2:e8:49:88:7f:38:ae:c4:97:bf:72:
         b9:ff:a5:79:9f:23:d5:10:c7:a3:e1:a8:51:78:6d:d1:02:6d:
         9a:8b:0e:8c:31:f0:a5:e7:0b:c0:27:cd:45:d0:9d:98:e3:81:
         61:fb:9f:5d:26:d1:c1:31:27:c5:41:67:a6:a2:f3:22:93:1d:
         3e:f5:37:4e:40:04:93:08:88:55:ac:49:e9:42:e3:44:eb:29:
         da:94:97:31:ad:63:47:bd:fc:62:d0:c5:78:99:46:fd:be:e0:
         56:14:fb:98:97:35:f6:9e:04:e8:16:91:09:94:dd:94:3d:d9:
         68:91:5d:56:ad:3a:ae:fb:c2:50:a8:d2:68:36:d4:9b:46:4a:
         60:95:53:84:7f:71:4b:eb:eb:e9:ad:30:bf:e8:d1:66:48:22:
         4e:14:9a:10:50:14:7d:49:4f:77:23:ba:ad:60:00:8b:9e:b4:
         44:48:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:25:06 2025 by rpki-client