Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e35362e302f32332d3233203d3e20323733323631.roa
File:                     3134382e3232342e35362e302f32332d3233203d3e20323733323631.roa (raw, json)
Hash identifier:          6sLNT4LCLFPXzHlEpd876TUyD4bFnQqWn5e40X4USwE=
Subject key identifier:   BE:A4:FA:50:E4:A1:3A:5F:96:B9:91:71:58:E1:ED:45:8A:A4:5E:EC
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       7DA5375F11F3E701B27A9C305A094F5D86FEBD8E
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e35362e302f32332d3233203d3e20323733323631.roa
Signing time:             Fri 02 May 2025 18:40:02 +0000
ROA not before:           Fri 02 May 2025 18:35:02 +0000
ROA not after:            Fri 01 May 2026 18:40:02 +0000
asID:                     273261
IP address blocks:        148.224.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 21:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:37:5f:11:f3:e7:01:b2:7a:9c:30:5a:09:4f:5d:86:fe:bd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  2 18:35:02 2025 GMT
            Not After : May  1 18:40:02 2026 GMT
        Subject: CN=BEA4FA50E4A13A5F96B9917158E1ED458AA45EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:50:ee:73:44:75:bc:a6:10:eb:19:fe:c4:
                    c4:21:bc:c9:b4:3f:ba:32:4e:8f:1a:d1:80:96:ec:
                    d7:ac:03:66:38:25:bd:a3:9d:c9:7f:19:b9:60:ee:
                    fd:d6:a1:8a:e1:1b:64:04:06:c8:d5:6c:e1:32:b5:
                    3b:52:8f:f7:1f:f8:02:21:d9:24:0c:4a:6e:a7:ae:
                    c2:cb:ad:ef:72:9d:4d:36:a3:fb:e0:1a:74:83:14:
                    15:3b:bc:91:d5:f6:d5:71:9b:fd:ef:17:85:b2:f2:
                    c6:ed:74:78:ff:50:92:4a:3f:ba:fa:6e:93:25:38:
                    39:5e:66:dc:43:d1:87:35:14:c3:66:2a:72:02:d4:
                    d0:88:68:e8:b7:f4:50:88:a4:60:4a:b3:c0:d9:bf:
                    cf:dc:b0:bc:bb:f6:79:97:32:25:78:f1:03:d3:5a:
                    60:3c:5a:2f:07:50:60:18:94:f0:00:38:2b:fe:4e:
                    39:fe:a3:97:1f:a4:0a:85:ee:18:ba:7f:4f:d1:f2:
                    13:4a:b6:b1:c8:24:1c:02:70:8d:9c:45:61:cf:5d:
                    64:da:ab:8a:35:6a:49:9a:11:bb:3b:61:f1:f0:6f:
                    4e:b0:28:f0:0e:f4:4d:c8:5c:fa:6f:43:16:fb:f0:
                    1c:fd:06:73:8e:64:61:0a:a2:8c:3a:3e:bf:ae:4c:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:FA:50:E4:A1:3A:5F:96:B9:91:71:58:E1:ED:45:8A:A4:5E:EC
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e35362e302f32332d3233203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:ce:de:f5:32:1f:04:65:84:24:7c:4d:86:4f:a1:1b:37:
         a7:a5:3b:1f:d6:ad:88:4d:0e:5f:b3:e8:e0:d7:53:a2:c0:e7:
         ae:b0:54:00:09:69:cc:f8:65:63:ae:2b:5a:c3:37:d7:47:83:
         2c:b3:35:5d:67:94:47:94:84:70:33:d8:5f:84:1e:f7:4f:be:
         f1:bf:dd:90:a5:23:18:52:da:85:0e:cd:88:e4:1e:23:0e:21:
         53:30:ea:f5:2c:b2:4e:5f:25:4f:95:d8:da:b7:6e:71:35:45:
         af:19:1d:64:17:ab:92:1e:ed:e8:3a:46:40:03:5d:e0:cb:6b:
         96:7b:58:02:3e:6b:49:5d:c3:c4:d1:8d:60:12:f0:62:ae:ba:
         9f:b8:dd:26:40:a5:49:c3:f1:32:cb:d9:c8:14:84:23:7a:5c:
         a4:81:a3:d2:ea:ca:1f:30:b6:d1:61:c2:db:72:a4:2c:31:7b:
         91:34:07:36:b1:95:77:9e:a3:98:d5:1c:a8:0c:08:69:19:72:
         9b:86:76:e5:d2:06:1a:af:2f:b6:ad:20:d7:2f:73:f6:5c:ea:
         b5:f0:7c:c5:3e:6f:ab:50:ee:6b:70:d0:cb:1a:38:dd:fe:59:
         fa:18:1a:9b:d8:b3:be:59:f6:13:9d:55:0b:4d:8e:fb:1c:62:
         b8:8e:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:35:13 2025 by rpki-client