Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e31362e302f32312d3231203d3e203231353037.roa
File:                     3134382e3232342e31362e302f32312d3231203d3e203231353037.roa (raw, json)
Hash identifier:          UNlcBNlcsYAvYDiVD/MDErf1rCfDr0rGuFgbaueNfxM=
Subject key identifier:   F5:4C:55:BB:4A:8D:0E:00:F0:FA:9B:26:56:3D:FF:D0:7B:AA:A4:57
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       5D5FFD5D0BD9604DF0B1EB9E30B615C42E8D3404
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e31362e302f32312d3231203d3e203231353037.roa
Signing time:             Wed 16 Jul 2025 19:35:02 +0000
ROA not before:           Wed 16 Jul 2025 19:30:02 +0000
ROA not after:            Wed 15 Jul 2026 19:35:02 +0000
asID:                     21507
IP address blocks:        148.224.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Aug 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5f:fd:5d:0b:d9:60:4d:f0:b1:eb:9e:30:b6:15:c4:2e:8d:34:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jul 16 19:30:02 2025 GMT
            Not After : Jul 15 19:35:02 2026 GMT
        Subject: CN=F54C55BB4A8D0E00F0FA9B26563DFFD07BAAA457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:82:d5:da:65:af:b4:39:79:50:35:d0:e1:
                    0e:4f:2c:55:7d:6b:8b:83:55:67:30:75:ee:37:c2:
                    31:59:43:c1:46:31:1b:b8:c5:6e:30:fb:dc:95:d6:
                    f9:00:0e:e7:7b:94:d8:84:7a:37:4e:e8:52:84:1f:
                    a4:c5:4b:54:94:38:08:65:18:00:f0:8b:31:48:d4:
                    46:b3:dd:26:a3:1a:73:91:63:5f:28:c1:21:27:c6:
                    53:df:14:35:c7:b4:a3:4c:4f:a4:4c:67:ae:c3:97:
                    c3:d5:0b:f1:d6:2e:c2:f2:13:76:17:f5:0d:de:1f:
                    51:0a:72:d5:9a:f8:6d:f0:94:21:ef:6f:28:75:f2:
                    82:3b:fd:cc:1c:36:1f:4e:89:b2:6f:d2:a2:52:e0:
                    2f:5e:00:eb:1e:94:97:07:91:de:f0:d0:18:d8:e6:
                    fc:17:e0:15:7b:05:1a:af:46:2b:61:7f:31:5e:ca:
                    be:8b:4f:3b:98:ea:d0:1e:e9:e9:08:b3:d9:81:26:
                    30:e2:42:7b:0b:d5:e8:9b:f4:2a:e2:e6:a8:61:90:
                    d8:1e:60:cc:12:8f:b5:29:9b:ec:85:fb:bb:fd:09:
                    47:4f:7e:03:de:b2:60:dc:5a:78:e7:68:20:2f:be:
                    b3:2b:38:11:fc:4d:a5:f6:48:b9:9d:01:aa:fb:4d:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:55:BB:4A:8D:0E:00:F0:FA:9B:26:56:3D:FF:D0:7B:AA:A4:57
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e31362e302f32312d3231203d3e203231353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:07:22:5d:d7:07:07:db:4e:cc:9d:41:7b:2d:92:48:f6:e9:
         16:2b:bf:92:ab:35:ce:af:c7:84:22:83:38:fb:ee:23:8d:50:
         d1:5b:56:56:6d:d1:00:ea:45:88:1e:9e:c2:01:6d:c8:25:66:
         bb:99:c6:10:54:29:34:35:29:63:9d:c7:d4:89:7b:31:d4:76:
         0e:87:01:af:1d:ff:9b:e4:be:d4:e7:ac:9a:e5:61:b4:b4:cf:
         be:29:c5:e4:61:eb:5c:5e:5e:d6:c3:3d:03:cb:be:3d:16:f7:
         04:46:9b:0e:ff:0f:94:2c:1f:ca:13:6a:13:8e:ce:fd:b2:94:
         9c:3d:20:a9:5d:72:17:aa:c6:75:ff:e0:86:bc:28:89:2b:3d:
         c7:bc:96:40:71:28:b1:72:15:6c:d8:68:db:e2:c8:6c:e7:c4:
         29:8a:a3:d2:9e:cb:4c:01:c5:c7:ec:a4:e1:57:10:33:86:e0:
         50:2e:d6:b1:1e:22:d2:99:02:b6:2c:30:21:cf:ac:3b:ed:2f:
         78:54:73:12:0f:db:e8:7d:66:4d:8c:b5:72:ba:f4:e2:3f:ff:
         dd:94:41:14:b8:1f:e0:74:7f:0f:25:4d:1e:0c:02:20:cc:81:
         b3:b2:b6:ce:e6:42:88:6c:96:f1:fe:d8:be:9d:4c:ae:73:d5:
         ee:f7:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:53 2025 by rpki-client