Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e32382e302f32342d3234203d3e203231353037.roa
File:                     3134382e3232342e32382e302f32342d3234203d3e203231353037.roa (raw, json)
Hash identifier:          XeSzWMJsYDRZ3AN8JG+Nsy30d7Jx8c9slX5yqGCnsOI=
Subject key identifier:   D2:01:9D:BD:C4:F9:19:C7:35:4A:17:A8:CA:BE:E3:72:49:73:71:25
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       3A036B3FB1E0B28AAABB7B944B6D7C3131FE11EF
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e32382e302f32342d3234203d3e203231353037.roa
Signing time:             Wed 16 Jul 2025 19:35:02 +0000
ROA not before:           Wed 16 Jul 2025 19:30:02 +0000
ROA not after:            Wed 15 Jul 2026 19:35:02 +0000
asID:                     21507
IP address blocks:        148.224.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Aug 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:03:6b:3f:b1:e0:b2:8a:aa:bb:7b:94:4b:6d:7c:31:31:fe:11:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jul 16 19:30:02 2025 GMT
            Not After : Jul 15 19:35:02 2026 GMT
        Subject: CN=D2019DBDC4F919C7354A17A8CABEE37249737125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:91:b9:95:0d:94:3a:71:1c:a7:f7:3e:33:
                    91:96:fe:1e:b7:43:df:a2:e8:3b:88:d3:32:c5:31:
                    cb:7c:55:1d:25:8d:b9:dc:7b:cd:4d:90:5f:4e:a5:
                    6a:81:66:44:db:a4:14:78:31:0c:76:1a:fe:0c:3a:
                    36:f0:e3:0b:16:e2:37:8f:75:72:70:f9:50:c5:c1:
                    de:34:1f:78:65:d5:c8:3a:5f:a0:00:fd:75:8f:98:
                    8e:d6:5e:0a:f9:e3:00:ce:16:85:ce:a3:44:0a:4b:
                    b5:34:72:d6:6c:7a:8f:ce:1f:22:42:ed:e1:c5:0b:
                    81:07:25:34:73:15:88:2d:09:82:69:95:8c:14:e5:
                    5b:16:4b:cd:6c:19:bb:81:74:7b:aa:41:a9:09:01:
                    d0:88:b6:52:f5:55:bd:a0:ff:7b:92:c4:29:93:72:
                    ab:03:5b:63:a5:9c:4a:71:37:ab:12:93:6c:02:53:
                    05:61:67:2d:21:e4:11:5f:6d:3a:70:88:39:98:2c:
                    4e:c4:a9:ab:8b:19:5c:cd:c0:eb:21:33:3b:50:e0:
                    3f:aa:ad:45:42:ce:2e:3c:92:da:19:bb:61:08:40:
                    70:42:85:28:49:5c:bb:82:9a:7d:7c:15:11:fb:b3:
                    60:27:8f:a8:c1:96:2a:90:e4:b8:5d:86:29:1c:c5:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:9D:BD:C4:F9:19:C7:35:4A:17:A8:CA:BE:E3:72:49:73:71:25
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e32382e302f32342d3234203d3e203231353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:23:54:29:a6:48:4b:78:29:72:84:49:d0:31:6a:5e:c2:
         a4:ee:61:10:27:a1:ca:59:f2:d3:08:33:74:cd:35:e2:82:bd:
         6a:1f:f9:5b:35:2f:c1:32:3a:19:27:19:52:2d:88:79:75:96:
         e3:a3:fc:57:a5:61:43:b0:1f:70:69:49:a6:7c:15:07:ee:b7:
         19:d3:3d:b2:0d:84:e8:f2:1a:fe:c4:07:bd:4b:15:af:6e:6e:
         8d:df:32:ef:74:61:c8:2d:18:b5:13:d6:1b:34:e4:f1:f5:3b:
         18:93:aa:90:6e:7b:76:79:e5:1e:57:76:70:85:85:9d:9f:5b:
         c1:fe:2c:b5:7b:e9:b3:56:5f:5d:4f:16:ef:eb:2a:de:5a:67:
         74:cf:70:3d:10:c8:19:7d:76:7d:26:01:18:15:c8:22:61:4c:
         f5:31:31:c7:c0:f7:f1:98:c0:65:71:e4:7a:5a:fe:01:e5:a4:
         cf:21:ff:cc:b7:0e:0b:bb:36:38:5e:74:0e:90:15:74:5d:9b:
         e4:30:b9:e0:bd:57:19:22:53:d9:5d:1a:a8:35:88:d7:d7:ee:
         5c:d1:bf:39:ac:0f:c6:c7:90:a0:00:d5:2f:33:05:f8:05:f3:
         7b:10:4a:52:a2:f8:36:1d:6b:f7:42:fa:19:ec:f4:ef:a8:7c:
         eb:e0:08:95
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOgNrP7Hgsoqqu3uUS218MTH+Ee8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA3MTYxOTMwMDJaFw0yNjA3MTUxOTM1MDJaMDMxMTAvBgNV
BAMTKEQyMDE5REJEQzRGOTE5QzczNTRBMTdBOENBQkVFMzcyNDk3MzcxMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpZG5lQ2UOnEcp/c+M5GW/h63
Q9+i6DuI0zLFMct8VR0ljbnce81NkF9OpWqBZkTbpBR4MQx2Gv4MOjbw4wsW4jeP
dXJw+VDFwd40H3hl1cg6X6AA/XWPmI7WXgr54wDOFoXOo0QKS7U0ctZseo/OHyJC
7eHFC4EHJTRzFYgtCYJplYwU5VsWS81sGbuBdHuqQakJAdCItlL1Vb2g/3uSxCmT
cqsDW2OlnEpxN6sSk2wCUwVhZy0h5BFfbTpwiDmYLE7EqauLGVzNwOshMztQ4D+q
rUVCzi48ktoZu2EIQHBChShJXLuCmn18FRH7s2Anj6jBliqQ5LhdhikcxSsHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0gGdvcT5Gcc1Sheoyr7jcklzcSUwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJTgHDAN
BgkqhkiG9w0BAQsFAAOCAQEAnLYjVCmmSEt4KXKESdAxal7CpO5hECehylny0wgz
dM014oK9ah/5WzUvwTI6GScZUi2IeXWW46P8V6VhQ7AfcGlJpnwVB+63GdM9sg2E
6PIa/sQHvUsVr25ujd8y73RhyC0YtRPWGzTk8fU7GJOqkG57dnnlHld2cIWFnZ9b
wf4stXvps1ZfXU8W7+sq3lpndM9wPRDIGX12fSYBGBXIImFM9TExx8D38ZjAZXHk
elr+AeWkzyH/zLcOC7s2OF50DpAVdF2b5DC54L1XGSJT2V0aqDWI19fuXNG/OawP
xseQoADVLzMF+AXzexBKUqL4Nh1r90L6Gez076h86+AIlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:52 2025 by rpki-client