Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234322e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3234322e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          Ywqgkw27x6RSyDnHQiSGBKtdAzrA0RWnRGOBHyYDjRk=
Subject key identifier:   36:C0:95:67:C8:84:C9:5B:34:C0:A0:D4:08:F8:3D:6A:9D:75:D0:07
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       50C79EE8162E12814E857625B99B0C6A4B3C0804
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234322e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:05 +0000
ROA not before:           Mon 02 Jun 2025 15:55:05 +0000
ROA not after:            Mon 01 Jun 2026 16:00:05 +0000
asID:                     273261
IP address blocks:        148.224.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c7:9e:e8:16:2e:12:81:4e:85:76:25:b9:9b:0c:6a:4b:3c:08:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:05 2025 GMT
            Not After : Jun  1 16:00:05 2026 GMT
        Subject: CN=36C09567C884C95B34C0A0D408F83D6A9D75D007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:5c:72:d5:cc:ef:c9:0a:30:e1:9d:a6:59:
                    31:a1:5e:d4:9a:32:1c:6d:d6:7d:6c:52:93:3c:9c:
                    34:b0:da:36:c5:c2:9b:09:ff:af:3b:ae:98:22:fe:
                    b0:e6:95:89:77:f7:61:49:6a:37:90:a3:7a:a8:f9:
                    05:c4:60:98:2c:f8:84:69:11:07:d1:18:24:49:65:
                    3e:fc:2c:76:c0:4f:ec:6e:bd:6e:a3:93:de:76:76:
                    d5:f4:f2:6b:9f:18:49:8e:e0:1d:39:cd:41:d5:56:
                    21:7d:17:b7:45:22:e1:ea:24:1e:58:69:09:b7:ec:
                    a1:dd:66:96:30:68:a1:0c:35:98:4c:6e:29:5a:95:
                    e1:ea:16:ef:6c:e6:c8:49:ae:db:24:ed:a5:92:0f:
                    0c:29:2f:82:2b:f0:71:b0:06:ea:c8:a4:7f:33:64:
                    a8:80:70:df:ab:c8:f3:c7:0e:30:57:f9:55:61:60:
                    a3:50:f6:e4:a0:79:14:c3:39:c0:cf:38:dd:d6:3e:
                    1d:06:a8:85:58:87:55:97:a8:21:30:72:05:c3:a4:
                    29:3a:ea:e3:5f:d6:93:ad:19:20:af:05:c4:dc:28:
                    c0:3f:0f:99:8c:b0:94:8f:47:74:03:96:1d:9a:39:
                    16:37:0d:04:a7:5f:34:96:7e:5b:0d:a7:a8:1d:4a:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:95:67:C8:84:C9:5B:34:C0:A0:D4:08:F8:3D:6A:9D:75:D0:07
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234322e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:ed:3a:6b:00:f9:4b:54:1c:2f:53:cb:a6:2f:09:7a:fa:
         23:a4:81:df:6a:ad:ce:12:5b:e9:3e:6c:6e:6a:26:61:4e:d6:
         c4:14:2d:21:c7:98:07:39:bc:52:32:ef:e4:31:88:a2:e9:4b:
         b1:7f:6d:17:77:f7:5e:50:98:b5:28:c6:0f:fa:d3:07:bb:06:
         ce:0c:c3:42:70:cc:cf:1e:b8:f8:df:4c:7a:f0:33:5f:1c:b4:
         a7:7f:9b:53:cb:04:1a:f7:a6:8f:c0:b8:f4:55:4f:f6:3a:fb:
         6c:94:cc:07:6c:28:5f:d4:69:d3:c4:65:cf:42:bc:99:e3:91:
         56:7a:f8:17:ec:2e:2b:60:30:59:c5:5e:9e:82:2d:65:ae:ac:
         77:24:3d:5f:07:11:48:a1:b4:04:d0:65:4a:e4:7a:bd:8a:f8:
         26:c8:9c:eb:81:31:57:d7:d3:01:00:b7:57:8c:81:82:40:ac:
         7b:11:a3:58:cd:4f:92:d2:11:b3:fc:92:72:96:ee:68:04:6c:
         ea:ad:2f:c3:6f:eb:a0:0b:86:21:49:44:e1:22:af:6f:92:b8:
         1e:10:3f:3d:cc:8a:58:6a:e6:d4:da:54:8c:f5:af:47:54:b1:
         86:34:7d:08:2e:df:c3:a9:be:17:27:bb:64:c1:45:ef:a4:b6:
         23:f4:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 20:38:24 2025 by rpki-client