Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233342e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233342e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          hYGtZLOskwIRb7uA4VcZq6/j5OSBZ9YlwEOhQ+mvIT4=
Subject key identifier:   1F:FB:70:DE:4D:80:A9:41:3F:DF:2A:7B:4A:3F:21:AA:5D:53:C1:19
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       67783252327FB21189EEACDCBA06C769CC74A157
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233342e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:05 +0000
ROA not before:           Mon 02 Jun 2025 15:55:05 +0000
ROA not after:            Mon 01 Jun 2026 16:00:05 +0000
asID:                     273261
IP address blocks:        148.224.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:78:32:52:32:7f:b2:11:89:ee:ac:dc:ba:06:c7:69:cc:74:a1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:05 2025 GMT
            Not After : Jun  1 16:00:05 2026 GMT
        Subject: CN=1FFB70DE4D80A9413FDF2A7B4A3F21AA5D53C119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:ac:1c:70:0b:48:bb:60:ab:6a:97:af:3e:
                    0b:7d:50:1f:9d:22:59:48:38:6e:75:99:5b:f0:24:
                    6c:ae:94:c0:3c:c1:b9:47:85:8a:76:27:ac:89:c0:
                    10:89:73:f6:d7:18:d3:f8:32:6d:21:63:83:c7:0d:
                    10:c2:a4:e6:51:e0:4c:e7:42:75:78:4e:08:d6:f4:
                    d6:94:54:0e:04:67:1f:9d:7f:75:71:94:76:65:54:
                    25:3a:09:05:5a:ce:23:f9:97:c8:ad:af:95:72:74:
                    21:98:f2:f7:84:03:3b:e5:da:a4:d1:50:d0:b7:94:
                    f2:58:96:46:6d:dc:72:1f:5d:07:71:db:ab:33:d0:
                    6b:3a:4e:e8:98:c7:b2:66:9a:0d:22:80:3f:da:78:
                    49:59:14:50:bd:6b:ce:fb:98:9d:7f:53:1e:cd:2e:
                    5f:f8:9f:63:17:04:74:27:82:2a:40:9b:25:87:6f:
                    f0:fa:8c:54:91:e0:2f:9c:d1:2e:1d:81:b2:43:00:
                    55:61:c5:33:ff:ca:21:b2:c4:6d:8a:8f:cf:4c:61:
                    99:eb:d7:33:7f:1e:92:e3:e6:26:2c:e3:2d:bb:a1:
                    29:42:f6:44:66:15:17:ce:1d:08:c9:4d:70:6c:0f:
                    d0:1a:39:18:1d:fa:83:f6:67:fe:72:73:94:ca:9d:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:70:DE:4D:80:A9:41:3F:DF:2A:7B:4A:3F:21:AA:5D:53:C1:19
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233342e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:c9:ed:e9:f0:19:df:27:36:7a:38:ba:bc:6b:65:e7:d9:
         c3:25:08:1b:0c:16:fb:23:32:f9:f3:49:96:ac:7c:c4:13:fc:
         b1:36:43:d9:91:a0:b7:27:77:46:6a:27:6c:f4:4d:da:56:3a:
         49:db:8c:10:9e:c4:15:0f:b6:3c:8c:90:bc:6e:5f:32:25:83:
         9e:92:4c:26:84:27:d5:81:71:0c:ec:ad:98:8d:9e:07:21:ed:
         ca:0d:95:10:76:58:eb:a3:72:a8:cc:98:eb:8c:03:1b:ea:05:
         32:89:21:39:0b:2c:3d:68:25:e6:73:a2:9b:73:03:de:c1:83:
         41:65:61:8e:18:2e:5f:1d:33:0b:91:cd:9a:83:57:ac:6d:16:
         ca:bf:ff:1b:2f:6b:d1:bf:55:16:13:ca:6e:1a:3d:73:fe:32:
         f7:df:5b:a5:0a:5e:78:2f:58:5f:d6:b7:fd:87:49:63:0d:60:
         21:29:52:72:4c:eb:e6:ee:38:fa:2a:01:c9:ba:e3:26:76:2d:
         b7:f3:87:bb:c0:e4:67:67:19:bc:e0:b0:f5:54:80:96:ef:53:
         2a:d7:a6:61:65:b7:f2:bf:35:92:ae:aa:04:84:08:b5:6f:bb:
         d8:05:b1:6a:a6:4e:2d:4c:4b:31:7b:c6:8d:a4:df:44:cf:85:
         1e:22:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:26:03 2025 by rpki-client