Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233362e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233362e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          dev8GPXDjsG8hhCO9IwIdQmSgTlm1dfBdW74wmP3kOc=
Subject key identifier:   E1:C8:8D:66:92:8B:A2:33:F8:6F:B7:21:50:71:E3:C7:A3:0F:A2:61
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       2CE72755DD2F071826EC70C4DD56AFF46EDE0943
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233362e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:06 +0000
ROA not before:           Mon 02 Jun 2025 15:55:06 +0000
ROA not after:            Mon 01 Jun 2026 16:00:06 +0000
asID:                     273261
IP address blocks:        148.224.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e7:27:55:dd:2f:07:18:26:ec:70:c4:dd:56:af:f4:6e:de:09:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:06 2025 GMT
            Not After : Jun  1 16:00:06 2026 GMT
        Subject: CN=E1C88D66928BA233F86FB7215071E3C7A30FA261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:b2:35:58:f3:16:34:68:89:73:17:aa:b3:
                    23:ee:bb:fe:b3:52:65:ed:48:b0:e8:e1:3e:b6:9f:
                    ca:0a:e4:51:7b:53:1d:22:d2:6f:ce:10:be:98:7f:
                    b4:91:54:28:a5:3f:9d:58:cc:40:1d:8d:38:55:cf:
                    73:18:39:2d:f0:60:d8:32:b7:2e:9c:f0:0c:76:eb:
                    8d:d9:ee:a9:9d:6d:28:3e:93:c6:d4:17:73:4a:b7:
                    24:4c:c4:a3:c3:70:d3:88:41:d3:86:f6:9a:ce:37:
                    c8:33:c8:34:b2:f0:50:94:fa:2b:8d:60:65:e2:c2:
                    3d:53:c9:87:cb:24:65:7e:b6:ac:a0:5a:e3:32:0b:
                    a2:a7:7e:a3:25:aa:64:41:d5:10:80:3c:d3:50:cf:
                    7c:29:1a:03:01:22:0b:28:4a:48:bc:b3:f5:ae:ce:
                    b6:f3:06:82:05:be:c7:ff:73:36:fd:6a:7d:1b:8c:
                    f3:46:6c:e1:3f:1a:8a:fd:80:a0:90:2f:ed:77:bb:
                    de:44:df:da:0e:c0:d9:19:49:38:42:89:45:c0:15:
                    1f:38:ff:e7:53:f0:3d:39:15:b8:69:60:7f:2f:ff:
                    ed:72:7d:08:07:78:1a:9b:58:91:34:cb:05:d1:7b:
                    97:5d:48:19:8a:7e:6e:32:db:6e:68:c0:ea:0e:96:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C8:8D:66:92:8B:A2:33:F8:6F:B7:21:50:71:E3:C7:A3:0F:A2:61
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233362e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:af:c5:36:af:ba:2d:a3:99:b4:95:fc:9c:c2:ea:ae:15:
         b8:fb:c3:3c:05:03:ad:1f:f4:e8:39:64:1c:c1:d2:6d:50:a4:
         cc:b1:dc:b7:de:a2:08:d4:ec:45:2e:27:01:5e:e4:ac:97:90:
         cd:1f:9c:4e:35:51:48:f8:15:e0:31:9f:d9:53:e6:41:65:f4:
         ca:02:bc:80:fe:be:bb:0a:e5:ac:c5:78:75:35:13:ec:68:32:
         bc:3c:71:89:99:74:d8:97:61:41:73:bd:b2:c2:eb:a9:28:b7:
         c7:6e:f0:58:74:31:1e:8c:b5:89:9e:97:35:e3:40:41:c0:94:
         d0:6a:e2:5c:11:a7:f6:1a:9e:d3:2a:d8:37:e3:86:7d:20:2f:
         f3:27:03:d9:87:94:10:1b:b1:6f:af:19:3d:c9:1e:63:4c:59:
         f1:c9:a2:69:10:95:7c:9f:11:05:42:82:20:dd:f8:1d:2d:f9:
         cf:d6:67:9f:6b:18:5c:68:5f:e3:f5:53:b7:19:3c:62:5d:3d:
         9a:cf:b3:fb:a7:1b:d6:3a:88:dd:e0:c2:33:8c:de:42:42:27:
         40:04:54:82:52:db:81:e3:29:77:4b:8f:c0:3b:de:8c:98:31:
         61:a1:35:1b:0e:c1:d1:49:08:1f:f5:52:1c:c5:97:18:53:8d:
         85:97:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 20:38:10 2025 by rpki-client