Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3134382e3232342e36302e302f32342d3234203d3e203133333335.roa
File:                     3134382e3232342e36302e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          vGUNQRKfBfgMlf9HqUWfHqRM/1+Awqy5j0dHDY3SaIk=
Subject key identifier:   84:FA:D2:F2:C4:B5:E4:B2:47:BE:77:7F:CD:68:BE:D2:FA:77:7E:16
Certificate issuer:       /CN=4BA24B565BA24009748E46515F9138A6540E41B4
Certificate serial:       243AF897697BFCCA9437F7398091FEBA44487DEC
Authority key identifier: 4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3134382e3232342e36302e302f32342d3234203d3e203133333335.roa
Signing time:             Thu 14 May 2026 07:10:00 +0000
ROA not before:           Thu 14 May 2026 07:05:00 +0000
ROA not after:            Thu 13 May 2027 07:10:00 +0000
asID:                     13335
IP address blocks:        148.224.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 05:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3a:f8:97:69:7b:fc:ca:94:37:f7:39:80:91:fe:ba:44:48:7d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA24B565BA24009748E46515F9138A6540E41B4
        Validity
            Not Before: May 14 07:05:00 2026 GMT
            Not After : May 13 07:10:00 2027 GMT
        Subject: CN=84FAD2F2C4B5E4B247BE777FCD68BED2FA777E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:20:46:03:61:e0:18:c8:8f:89:18:b3:58:
                    fe:25:be:03:73:f8:fc:93:fc:a5:14:d7:cb:34:11:
                    93:e8:1f:41:48:93:71:41:e7:cb:e4:86:57:2f:af:
                    c7:e6:cd:03:cf:fd:ae:1b:c6:c7:cd:9d:fd:ad:c4:
                    d4:dc:36:df:5f:19:5f:a4:3b:2d:9f:19:5b:5b:97:
                    ad:f0:23:3e:ac:a4:75:cd:d3:dd:1f:97:0f:72:8e:
                    8a:2f:94:c8:a9:96:b3:f0:47:de:2b:f7:68:05:47:
                    e0:b0:a1:75:de:d8:da:2b:2a:93:1a:f8:b0:af:b9:
                    b7:fc:cc:64:33:c0:ea:fc:0f:f2:15:73:2c:70:87:
                    dc:cd:e9:f5:ae:f1:9f:e8:7f:96:7c:ab:22:0d:31:
                    2a:45:a0:44:15:2b:c7:95:e3:19:03:2b:96:6b:de:
                    dd:eb:d4:86:b6:bd:10:5f:48:4e:cd:90:9f:1d:45:
                    92:0c:5f:37:57:bf:fb:ea:93:f4:56:60:6c:35:60:
                    72:4a:2b:99:cf:0c:a8:eb:5b:89:07:3f:9c:9e:d0:
                    35:e6:e8:20:b5:b3:d0:4a:66:5a:2a:ad:0b:d5:3d:
                    d9:40:46:34:6b:65:ed:b8:5f:d1:a3:87:7a:7d:14:
                    57:1e:51:50:7c:15:2a:77:3d:b0:0f:ff:7a:5a:ca:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FA:D2:F2:C4:B5:E4:B2:47:BE:77:7F:CD:68:BE:D2:FA:77:7E:16
            X509v3 Authority Key Identifier:
                keyid:4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3134382e3232342e36302e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:04:63:9c:7d:c2:bd:b5:b5:0a:58:5f:ab:83:90:a0:58:96:
         0f:39:05:f7:37:0c:d9:d4:38:6c:34:e9:db:e9:e8:25:58:2e:
         ac:d9:74:fa:31:e9:89:b9:d8:c7:9c:93:2d:4a:ed:97:6a:01:
         b8:a2:36:95:fa:d5:9a:37:2a:d6:e1:d0:dd:f0:32:b8:7a:4a:
         f8:b1:c6:03:9f:7e:e1:ff:41:48:66:ad:1b:3c:cb:70:79:07:
         f7:2d:02:48:32:75:86:3c:87:26:c8:b4:a4:02:97:31:a9:f5:
         44:4b:a3:c5:da:5a:af:30:ba:02:59:a4:a0:f9:2e:bb:dc:fb:
         2b:66:49:cc:79:fa:06:7b:72:75:a1:48:64:75:84:6c:0b:cf:
         fd:f3:c2:f3:c6:d0:de:3f:98:a7:24:e9:40:78:5b:e9:7e:3d:
         a8:8f:7a:00:cb:81:7a:73:aa:30:67:8a:ad:6c:7a:c0:32:00:
         6e:55:54:70:ff:8d:6c:8e:06:e9:d5:37:23:86:9a:33:3b:47:
         63:75:f0:a7:e1:0b:38:62:58:27:e9:46:39:53:98:81:9a:8f:
         e6:ff:66:8b:bb:6b:18:8e:f3:3f:33:d3:24:03:4a:7c:eb:90:
         9f:4c:c8:d6:25:51:70:e3:3b:72:09:38:39:fc:eb:05:fa:b1:
         32:88:cc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 04:20:31 2026 by rpki-client