Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233372e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233372e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          HvClxCDM/x+XW2PVdaQGk47OxNrO39CBbcBsXrkRHrQ=
Subject key identifier:   95:F5:16:B1:35:FB:6B:EE:F3:0A:37:CB:0D:38:43:51:F9:FF:54:34
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       10DF45B8910AFEF3736C01AEB0F57720D3B73E62
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233372e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:17 +0000
ROA not before:           Mon 02 Jun 2025 15:55:17 +0000
ROA not after:            Mon 01 Jun 2026 16:00:17 +0000
asID:                     273261
IP address blocks:        148.224.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:df:45:b8:91:0a:fe:f3:73:6c:01:ae:b0:f5:77:20:d3:b7:3e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:17 2025 GMT
            Not After : Jun  1 16:00:17 2026 GMT
        Subject: CN=95F516B135FB6BEEF30A37CB0D384351F9FF5434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:d5:11:1f:53:33:00:66:74:1b:ac:50:0d:
                    99:a2:29:5f:e8:c8:9e:8d:d0:8b:9a:dd:9b:2a:c5:
                    69:fc:17:42:45:08:e9:05:dd:c0:e1:cc:17:40:35:
                    b3:d8:98:12:90:b7:1a:9e:1d:78:a9:84:6b:ab:4b:
                    46:33:cd:e7:83:b7:80:b6:e2:f5:67:eb:9b:c0:13:
                    f7:46:f3:8a:82:92:0d:0c:9a:23:77:1e:81:76:c9:
                    82:d7:76:c2:61:17:d6:96:be:31:f3:78:7d:7c:7e:
                    2a:90:a1:27:92:b4:7a:14:d2:04:69:e4:42:b0:b2:
                    94:6b:b6:0f:2f:05:7b:97:3b:21:05:37:73:48:59:
                    d5:04:ab:45:4b:d4:14:7f:37:87:32:cd:6a:9a:4b:
                    2a:ad:4d:ce:de:02:09:b6:31:92:91:54:a0:f3:f9:
                    c9:21:00:f7:65:f0:06:ab:c2:a4:b4:b9:d8:28:f6:
                    34:be:03:c5:93:3e:0b:2f:f7:b7:50:5d:ca:56:d7:
                    48:fc:83:5c:d8:29:27:a0:9a:36:9a:d7:a2:af:66:
                    a0:d3:f3:03:58:55:5a:fd:d0:d9:07:a9:e2:aa:a6:
                    e7:eb:58:62:be:ce:1f:98:c3:94:4f:3f:2d:4e:ce:
                    09:ad:89:50:bf:63:cc:c6:04:8c:ea:18:31:94:d9:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F5:16:B1:35:FB:6B:EE:F3:0A:37:CB:0D:38:43:51:F9:FF:54:34
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233372e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:eb:94:9f:ed:b1:bf:ac:97:b3:8f:fd:48:c2:59:d4:b4:
         e5:80:1d:21:1c:ea:fb:33:2b:07:22:9a:7d:b1:56:d2:4e:43:
         3b:60:19:2d:0d:1a:ca:83:1e:d6:c7:16:81:62:aa:4b:d4:c3:
         45:9d:f6:b7:22:2f:87:1e:7e:ff:1a:0a:63:c8:72:25:6a:a5:
         b7:ae:48:fb:ac:2c:4c:fe:16:de:64:c7:e3:c4:6d:0f:2e:6c:
         1c:ac:5e:71:58:48:02:51:94:01:6a:bf:70:d1:6a:f1:16:a5:
         7a:e9:4c:ae:a8:0e:ec:0f:e8:a3:13:4c:c3:7a:ef:07:5f:34:
         4d:37:a2:27:e7:5d:ed:39:3c:51:f0:0d:5a:ec:f2:9a:62:e9:
         ec:a9:40:96:1c:1b:12:97:f6:71:7b:49:f7:2c:9e:82:06:cb:
         9a:39:9e:b8:09:2b:44:ef:21:36:98:ac:94:4a:3a:c1:ea:fa:
         ee:55:ea:dd:0a:d4:98:ed:57:25:2e:82:70:57:80:f8:78:d0:
         9e:ff:ab:24:56:79:95:78:e3:e0:f5:97:23:59:95:2e:b8:f4:
         7d:3c:b4:59:29:41:e0:52:44:15:74:01:2a:4d:89:27:0d:d7:
         18:5b:1d:e9:6a:56:d0:38:96:b1:c1:48:83:35:de:07:6f:85:
         ec:74:f1:84
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEN9FuJEK/vNzbAGusPV3INO3PmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA2MDIxNTU1MTdaFw0yNjA2MDExNjAwMTdaMDMxMTAvBgNV
BAMTKDk1RjUxNkIxMzVGQjZCRUVGMzBBMzdDQjBEMzg0MzUxRjlGRjU0MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgNURH1MzAGZ0G6xQDZmiKV/o
yJ6N0Iua3ZsqxWn8F0JFCOkF3cDhzBdANbPYmBKQtxqeHXiphGurS0YzzeeDt4C2
4vVn65vAE/dG84qCkg0MmiN3HoF2yYLXdsJhF9aWvjHzeH18fiqQoSeStHoU0gRp
5EKwspRrtg8vBXuXOyEFN3NIWdUEq0VL1BR/N4cyzWqaSyqtTc7eAgm2MZKRVKDz
+ckhAPdl8AarwqS0udgo9jS+A8WTPgsv97dQXcpW10j8g1zYKSegmjaa16KvZqDT
8wNYVVr90NkHqeKqpufrWGK+zh+Yw5RPPy1OzgmtiVC/Y8zGBIzqGDGU2XwfAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUlfUWsTX7a+7zCjfLDThDUfn/VDQwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4O0wDQYJKoZIhvcNAQELBQADggEBAHun65Sf7bG/rJezj/1IwlnUtOWAHSEc6vsz
Kwcimn2xVtJOQztgGS0NGsqDHtbHFoFiqkvUw0Wd9rciL4cefv8aCmPIciVqpbeu
SPusLEz+Ft5kx+PEbQ8ubBysXnFYSAJRlAFqv3DRavEWpXrpTK6oDuwP6KMTTMN6
7wdfNE03oifnXe05PFHwDVrs8ppi6eypQJYcGxKX9nF7SfcsnoIGy5o5nrgJK0Tv
ITaYrJRKOsHq+u5V6t0K1JjtVyUugnBXgPh40J7/qyRWeZV44+D1lyNZlS649H08
tFkpQeBSRBV0ASpNiScN1xhbHelqVtA4lrHBSIM13gdvhex08YQ=
-----END CERTIFICATE-----
Generated at Mon Jun 23 02:26:00 2025 by rpki-client