Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234312e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3234312e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          zIMwkBiLv0ZDM1+cAGE5zbn7vfgLLMfeNuN+o85uiXY=
Subject key identifier:   97:06:A5:81:15:02:30:73:4A:E5:FF:35:D4:69:77:46:71:08:94:02
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       7E17F4E2F57159C83CE846DAB4688B7FB14B6F94
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234312e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:07 +0000
ROA not before:           Mon 02 Jun 2025 15:55:07 +0000
ROA not after:            Mon 01 Jun 2026 16:00:07 +0000
asID:                     273261
IP address blocks:        148.224.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:f4:e2:f5:71:59:c8:3c:e8:46:da:b4:68:8b:7f:b1:4b:6f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:07 2025 GMT
            Not After : Jun  1 16:00:07 2026 GMT
        Subject: CN=9706A581150230734AE5FF35D469774671089402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:0e:eb:28:52:d4:e0:26:05:56:8b:59:5c:
                    2b:66:68:2f:70:dd:c9:d0:f9:a6:d2:23:bc:22:80:
                    40:49:78:02:49:b1:f3:b1:7a:29:ca:e2:49:bb:18:
                    f4:80:ca:fa:11:06:6c:2b:24:d3:fa:3f:15:07:3c:
                    69:0c:21:f4:e7:eb:b9:ba:f7:49:5c:e4:f7:ab:98:
                    a9:86:cd:72:8b:07:30:f2:c7:92:04:ca:e3:50:6f:
                    72:fe:83:1f:3e:c9:42:b4:9d:12:40:3b:13:94:5b:
                    89:bf:d5:fb:f9:29:c1:3d:df:9f:ae:0d:f1:fa:1d:
                    33:10:07:78:23:e3:05:d8:ab:34:bc:ae:91:5e:f7:
                    c9:95:29:87:b2:49:96:53:7b:e6:e8:9d:34:37:cd:
                    be:84:1b:8a:92:24:3c:d1:f1:62:53:9f:26:2b:9d:
                    45:8e:5b:bc:6c:1a:4f:1a:be:c1:21:c1:44:09:8a:
                    45:94:60:30:ec:6c:ec:78:d3:1c:21:16:74:20:fa:
                    ef:be:db:a7:82:50:d3:cf:22:36:fc:d6:27:ef:21:
                    4a:37:67:80:e3:d5:86:15:bb:00:a6:b1:6a:1f:c8:
                    50:c4:69:be:7c:bb:de:77:f7:0b:88:0c:9a:b2:58:
                    b8:0f:8b:ec:90:c8:5b:8d:a4:ef:11:d2:58:45:c9:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:06:A5:81:15:02:30:73:4A:E5:FF:35:D4:69:77:46:71:08:94:02
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234312e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:55:57:cb:d0:dc:dc:ad:87:7a:9d:6d:b1:4d:8c:f1:eb:85:
         ff:6a:6d:0e:84:e2:5b:a6:21:d0:4b:ed:f6:0f:d0:01:74:2e:
         bc:61:0e:81:cc:df:c5:16:75:f6:a5:48:7a:f0:27:69:2c:6d:
         3d:ca:77:d1:83:11:bc:bb:2a:1a:26:b1:e2:70:66:67:6f:d7:
         00:6d:3c:2a:a3:3a:82:88:56:fa:c7:b6:58:49:b7:75:2a:70:
         25:16:33:81:d8:5e:93:e5:0e:78:68:f7:c1:ee:7a:99:7f:fb:
         68:86:0a:4a:24:b2:7d:75:51:57:3f:c9:2c:9b:03:d6:d5:16:
         ff:73:e6:72:bf:0e:37:26:67:27:f5:29:0b:96:1a:04:5d:3c:
         ee:7b:f8:9d:af:75:9d:04:72:d6:b8:5c:5e:fd:71:69:ad:31:
         aa:9c:41:4c:67:14:88:ff:96:b7:95:ec:9f:8f:94:ab:6f:71:
         67:76:a1:a8:f3:11:e9:5a:05:96:b0:0a:5c:43:b7:3a:da:0c:
         54:bd:66:f4:ac:29:aa:0c:a0:06:df:dd:d7:eb:69:d4:3a:42:
         43:fb:f8:88:6b:e9:d9:a5:26:bc:29:c7:61:7d:87:6d:48:e8:
         90:d0:7b:fb:f6:01:77:51:2f:3c:1e:96:6e:82:d4:b7:5c:0f:
         f3:d5:9e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:41:11 2025 by rpki-client