Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36342e302f31382d3138203d3e20323733323631.roa
File:                     3134382e3232342e36342e302f31382d3138203d3e20323733323631.roa (raw, json)
Hash identifier:          PA7MqSJIlsEI227JHE1O+kjNkz60ypivXPWIDdT46IM=
Subject key identifier:   A7:BA:3F:83:70:D6:13:9B:60:30:46:31:4C:0E:1B:6A:CD:F0:0F:D1
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       334387F7B8BCE49BDA70C6241E7111625699481A
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36342e302f31382d3138203d3e20323733323631.roa
Signing time:             Fri 02 May 2025 18:40:00 +0000
ROA not before:           Fri 02 May 2025 18:35:00 +0000
ROA not after:            Fri 01 May 2026 18:40:00 +0000
asID:                     273261
IP address blocks:        148.224.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 21:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:43:87:f7:b8:bc:e4:9b:da:70:c6:24:1e:71:11:62:56:99:48:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  2 18:35:00 2025 GMT
            Not After : May  1 18:40:00 2026 GMT
        Subject: CN=A7BA3F8370D6139B603046314C0E1B6ACDF00FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:31:f5:11:ed:2a:fb:86:74:0e:f9:9c:37:
                    ca:33:35:9e:3f:15:1f:92:58:dc:0a:20:d2:59:f1:
                    28:d2:9b:d8:51:44:96:8e:4f:88:55:e4:3f:f1:d5:
                    c5:6f:4d:44:90:97:a6:a2:c4:ed:00:46:ca:e0:64:
                    63:fb:76:03:d4:bf:91:f6:b9:05:c7:c5:bb:66:3b:
                    65:9b:f1:61:df:50:cd:50:45:51:cc:9e:09:19:a1:
                    ef:25:61:4e:cd:62:4e:9c:af:5c:cb:df:00:02:59:
                    e4:4f:f5:39:af:5a:14:e0:e4:73:b9:9c:d4:71:81:
                    43:af:73:c0:0e:21:6b:e9:1d:dd:b2:8f:5c:46:26:
                    a0:00:c0:c8:d8:c3:6e:eb:56:68:8d:8e:bf:80:40:
                    8b:80:d1:e4:45:3c:eb:6a:a8:04:52:c3:a3:95:03:
                    7b:3a:1a:fa:4d:c1:8c:7f:03:5e:0c:93:ac:ce:90:
                    7d:ee:50:c2:de:c6:81:7b:1c:c8:d9:54:68:88:0e:
                    4b:89:45:52:c5:bd:3d:1a:95:2e:6e:10:d1:04:7b:
                    71:34:e1:dd:69:aa:ac:04:8a:6f:09:33:80:bc:86:
                    42:55:22:8a:b3:37:5f:ac:45:2d:20:d4:69:81:40:
                    6e:76:7f:e4:57:7a:46:8c:00:e9:f3:b3:d7:06:50:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:3F:83:70:D6:13:9B:60:30:46:31:4C:0E:1B:6A:CD:F0:0F:D1
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36342e302f31382d3138203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:13:b4:65:50:8e:d7:02:10:cc:12:ac:b3:59:52:9f:88:e4:
         4b:23:7c:6e:84:bc:4d:24:53:ac:0e:ab:5b:ff:11:7a:56:7b:
         68:40:ff:da:e2:63:45:d1:15:61:e2:38:3d:cf:a4:b3:aa:19:
         90:05:72:44:8a:58:63:2e:ba:f7:ce:30:a6:52:a8:2f:04:61:
         7d:01:fa:78:54:b7:6e:34:f0:21:5c:8c:70:cd:3d:2c:71:36:
         c7:5d:db:3f:a6:f5:eb:c7:9c:bc:6a:0f:33:64:a8:f6:7d:ca:
         b6:58:a0:a8:0e:ee:b5:b5:ab:f3:8b:56:14:ef:2e:f2:93:67:
         4b:11:69:94:34:da:18:6f:58:07:cb:8c:aa:69:91:c7:02:94:
         4f:08:68:18:0d:6e:e3:aa:8c:0f:a7:cc:ff:16:41:38:d6:21:
         36:ce:93:de:8a:73:16:4a:fe:d9:7a:4b:9c:d0:c1:2d:32:0a:
         55:6c:25:0b:d4:9f:23:f6:7f:67:68:aa:bb:c2:84:c9:15:81:
         8b:00:87:ae:e9:c7:7f:68:20:fa:b8:3e:c2:8a:69:94:9e:3e:
         f5:59:8e:49:6a:42:25:ef:a8:09:84:f6:88:ce:5f:62:e8:0d:
         8a:04:e0:34:19:6f:70:7e:c4:eb:30:5c:e4:9e:f6:c6:47:89:
         0e:08:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:21:43 2025 by rpki-client