Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232362e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3232362e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          tDTbvq7QpjL7fSsPAp6qc4IY075nD6CR92TAF1Fzkgc=
Subject key identifier:   20:5A:02:58:47:29:C1:56:09:FA:91:47:13:41:A7:AA:7B:E3:9B:DC
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       3E53FBB1EF574A7065E6C6BB92764D3B0EFB8165
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232362e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:00 +0000
ROA not before:           Mon 02 Jun 2025 15:55:00 +0000
ROA not after:            Mon 01 Jun 2026 16:00:00 +0000
asID:                     273261
IP address blocks:        148.224.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:53:fb:b1:ef:57:4a:70:65:e6:c6:bb:92:76:4d:3b:0e:fb:81:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:00 2025 GMT
            Not After : Jun  1 16:00:00 2026 GMT
        Subject: CN=205A02584729C15609FA91471341A7AA7BE39BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:f8:b7:85:d2:f2:fe:a7:64:d5:95:56:f4:
                    cc:7d:c1:3b:77:b7:ab:dc:24:0b:10:0f:ff:1d:20:
                    5e:c9:b0:18:5a:50:d2:6f:93:8e:05:e1:de:8d:13:
                    b8:22:7e:48:62:60:81:17:78:15:38:c7:e7:3b:ae:
                    8c:f6:6a:fd:a2:70:78:63:49:00:82:de:a9:12:25:
                    e7:1b:64:84:e9:1f:e1:ef:d7:63:18:55:05:94:42:
                    10:ec:23:2e:27:6a:f1:bb:89:bb:8e:50:58:83:50:
                    25:ee:69:46:1e:c1:9a:bf:29:09:de:67:f5:fe:ae:
                    1a:f2:7a:6e:1a:ab:67:aa:c6:7d:15:a9:f1:5a:55:
                    de:52:49:d2:44:2d:16:a7:7a:ae:27:6c:ef:92:66:
                    10:5c:31:cd:86:9f:2a:f4:50:89:4e:57:1a:75:f9:
                    30:20:fe:13:4f:12:b2:7e:c8:dd:60:66:b5:26:12:
                    a8:4e:74:77:5d:e5:f0:75:ef:bf:76:2d:66:5a:9e:
                    e0:88:69:b8:55:cf:ad:e0:05:3d:20:99:17:31:9e:
                    8f:d6:31:00:04:ca:10:da:00:71:18:0e:8b:e2:72:
                    86:2a:ef:a8:17:94:b5:3d:51:ba:a0:1d:bd:f6:e8:
                    1a:22:96:78:26:9a:db:b1:a4:dc:a0:de:5f:15:3b:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:02:58:47:29:C1:56:09:FA:91:47:13:41:A7:AA:7B:E3:9B:DC
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232362e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:34:91:de:5a:ef:c9:1c:cb:79:b7:7a:3a:48:a4:4c:44:
         8f:c2:62:7b:52:5b:b7:34:cf:f9:11:50:bf:62:11:6f:39:41:
         84:bb:81:e6:55:c5:34:c6:11:0f:ae:8f:16:f3:ea:3a:52:c2:
         b0:a3:e1:57:53:45:a5:65:21:41:55:08:5b:8e:eb:62:21:71:
         6f:1a:af:54:bf:ce:f6:c2:32:e1:26:31:f6:f3:13:57:55:fe:
         57:e3:aa:fa:f5:0d:5c:4c:b7:14:02:49:8b:33:07:40:3c:0b:
         fd:4c:50:80:00:1a:13:a4:b0:d7:54:13:5f:14:01:e3:8b:47:
         1c:22:1d:ae:82:6f:13:e8:38:f0:51:75:a8:25:0c:1a:1c:87:
         d8:fb:10:be:62:ba:06:5f:25:30:f4:91:89:b8:54:28:28:8d:
         d6:b5:ee:e5:0c:77:b8:02:88:cf:0e:4f:e3:63:aa:1f:5b:cd:
         2b:7e:91:4d:e7:9e:b5:e8:2e:7d:17:08:c1:bc:dd:2c:b3:22:
         16:16:28:69:01:ef:58:1a:95:78:6b:cd:16:fb:fa:17:94:71:
         32:6b:05:f0:f4:1e:4e:36:65:b5:c2:6e:06:51:2e:84:43:5a:
         48:14:a9:77:25:72:95:10:be:06:b4:2b:c4:e4:03:51:47:05:
         41:14:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:40:30 2025 by rpki-client