Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233382e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233382e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          0zNCAxPkhoVFboOhQEHum4de9OnR6ZOs1G5ML7C5pFQ=
Subject key identifier:   68:55:86:4B:77:57:D4:96:B9:64:89:F4:6F:5C:7F:27:4D:59:FF:59
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       6CF9B56CE2A0E1CD724C6CC1E5210BF6DF7358EF
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233382e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:07 +0000
ROA not before:           Mon 02 Jun 2025 15:55:07 +0000
ROA not after:            Mon 01 Jun 2026 16:00:07 +0000
asID:                     273261
IP address blocks:        148.224.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 02:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f9:b5:6c:e2:a0:e1:cd:72:4c:6c:c1:e5:21:0b:f6:df:73:58:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:07 2025 GMT
            Not After : Jun  1 16:00:07 2026 GMT
        Subject: CN=6855864B7757D496B96489F46F5C7F274D59FF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:f7:e3:e1:27:24:3c:71:97:50:e9:df:0a:
                    b8:79:10:eb:0a:89:3c:0a:90:8f:a0:14:c7:7c:0e:
                    7a:4f:7b:52:6c:33:9c:08:c3:01:08:e7:d1:6b:09:
                    e7:5e:50:46:96:b8:6c:bc:f0:d2:6b:47:6d:72:d7:
                    c4:97:f8:e7:09:74:60:70:38:04:17:19:ba:7f:11:
                    26:89:de:9f:5e:78:b4:83:8b:17:b5:26:dd:04:8a:
                    cd:38:94:bc:b6:f3:78:6e:73:d6:34:2f:fe:dc:3d:
                    9a:7e:4a:ce:4c:8f:7d:67:79:ef:c8:4d:08:53:0e:
                    1b:57:0c:1f:a6:a8:50:d7:e0:6e:d4:ae:49:c5:1e:
                    64:35:9c:25:06:9a:ce:94:03:3b:ad:f3:ec:b9:e9:
                    ab:82:08:8e:e5:8c:ed:b2:dd:05:3b:ae:6c:a1:b3:
                    20:fc:c6:b8:a7:71:cf:4d:8c:12:78:24:83:54:6b:
                    73:c9:b6:ca:12:24:a4:cb:cb:68:1b:d4:49:17:70:
                    83:57:0b:a4:f0:84:f2:08:47:21:af:85:14:e2:a7:
                    92:a1:6a:71:68:80:87:b6:2a:0e:aa:da:6c:b8:52:
                    50:e3:4e:7a:af:23:8c:69:cd:e1:e0:af:85:57:72:
                    3a:fa:33:8c:2c:bd:56:d4:03:54:22:fa:b5:a4:17:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:55:86:4B:77:57:D4:96:B9:64:89:F4:6F:5C:7F:27:4D:59:FF:59
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233382e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:15:f3:37:f5:02:f5:e5:f7:37:ec:da:47:46:ec:d6:e4:8e:
         32:2c:8f:83:95:bc:d1:80:2d:ac:72:b2:cd:7e:2b:f7:21:c6:
         ce:4a:5c:b5:af:da:da:78:84:ae:e9:a0:9f:1a:cb:9d:f0:6f:
         6e:f8:fa:44:07:13:71:0f:4b:d6:c5:36:77:d2:a8:2c:a2:0c:
         37:1c:f8:73:6b:c9:e9:23:e4:14:0f:80:77:55:41:66:1c:9d:
         83:4d:f1:5e:53:84:fb:8f:9f:04:bb:ea:48:b6:48:01:f5:d6:
         ea:89:92:4f:40:81:26:3e:34:07:2f:f8:8b:cd:1c:38:a0:4e:
         6b:e8:17:15:c0:3d:e1:d1:e2:3f:1f:ae:c6:f1:d1:ab:e1:bb:
         f6:8a:16:21:e7:66:41:87:16:71:81:aa:71:e9:34:9d:56:1e:
         d3:6d:6b:a8:00:44:b3:7d:ba:be:1f:eb:2a:42:d0:44:c2:aa:
         34:d2:ad:a7:aa:d3:19:23:58:c9:3f:6b:8e:c4:9a:3e:5f:fc:
         9f:35:76:b8:1b:52:40:dc:13:8f:75:38:c6:d5:8e:3e:6e:ca:
         f3:24:b6:3c:46:0f:51:b8:86:b2:bf:c6:f7:6f:09:da:4f:a2:
         08:fd:e4:f9:15:83:89:7c:f1:c0:0a:ff:cd:8e:2a:66:1f:75:
         b1:71:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:28:20 2025 by rpki-client