Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e33322e302f32302d3230203d3e203231353037.roa
File:                     3134382e3232342e33322e302f32302d3230203d3e203231353037.roa (raw, json)
Hash identifier:          EAXGk5ZfKHKLv1kQtryFgOp8+Q8PBzj+DAy+RTlMNaU=
Subject key identifier:   F0:3C:E5:CA:A1:77:71:DD:6D:F8:63:BD:4B:91:9A:F6:42:47:FB:9C
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       3E309683B4172030BD68C9FB6B84C4B493970EBF
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e33322e302f32302d3230203d3e203231353037.roa
Signing time:             Wed 16 Jul 2025 19:35:00 +0000
ROA not before:           Wed 16 Jul 2025 19:30:00 +0000
ROA not after:            Wed 15 Jul 2026 19:35:00 +0000
asID:                     21507
IP address blocks:        148.224.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Aug 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:30:96:83:b4:17:20:30:bd:68:c9:fb:6b:84:c4:b4:93:97:0e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jul 16 19:30:00 2025 GMT
            Not After : Jul 15 19:35:00 2026 GMT
        Subject: CN=F03CE5CAA17771DD6DF863BD4B919AF64247FB9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:fa:c3:8b:39:44:12:e6:a4:03:2c:09:08:
                    a0:52:76:43:61:80:b7:3e:61:f2:d2:23:fb:32:11:
                    19:21:7a:ab:80:42:8d:3f:44:af:c0:8a:4b:4a:08:
                    74:08:af:66:d6:43:80:29:5d:36:b1:b0:36:b7:f2:
                    bd:6f:2f:89:c6:3d:41:ac:5f:5a:91:5f:f1:24:ec:
                    a4:28:54:b9:87:5c:51:d8:c3:f1:86:4a:22:99:d9:
                    8a:c9:87:c9:30:28:53:8a:b7:18:87:f7:99:60:3f:
                    d8:aa:36:a3:4e:e5:ad:28:b5:63:c8:34:e0:71:90:
                    1e:53:c5:80:e5:cc:92:56:f5:70:fa:66:3a:5d:1f:
                    6b:e3:d9:05:02:e7:fb:f7:cc:55:06:c7:74:4c:16:
                    04:0a:88:3f:5d:b9:68:50:92:d3:17:ff:e5:80:3d:
                    32:9c:20:63:0a:18:be:c6:a5:84:6d:6d:8a:1b:21:
                    5d:d0:d8:b9:7f:da:ce:11:65:f3:48:61:2b:82:87:
                    2c:2a:9e:58:3f:40:d5:ab:f1:da:dc:93:2e:3e:08:
                    50:0f:40:bc:24:29:eb:e8:7b:3f:cb:1d:49:c0:40:
                    09:72:5d:a9:60:a7:3f:f7:16:fe:ef:a2:d0:c0:ff:
                    ab:4b:5d:38:8a:af:97:71:98:98:b8:56:48:81:0e:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:E5:CA:A1:77:71:DD:6D:F8:63:BD:4B:91:9A:F6:42:47:FB:9C
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e33322e302f32302d3230203d3e203231353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:f7:3c:ad:0d:eb:99:e1:73:ed:a5:0a:28:09:47:51:a9:
         55:08:8d:39:5e:73:7b:64:64:ab:d0:2d:e8:53:da:aa:7a:0e:
         9a:bc:ab:3b:27:3e:4a:ba:8f:b7:c0:18:f7:c3:64:29:82:97:
         d0:22:2c:71:a3:9d:0f:16:92:79:53:52:be:bf:6e:f4:d2:cb:
         75:6c:4a:45:79:b6:61:6e:2b:99:2b:48:33:3d:fd:9e:e8:ea:
         28:4a:63:db:13:bc:98:e9:55:0b:04:79:ac:7c:be:40:0f:18:
         2f:fe:ca:50:ae:86:0e:c3:57:c5:b9:cf:08:fc:b1:14:3b:9d:
         8d:8c:a3:a1:b2:03:8d:4e:0f:48:fe:c0:96:e7:68:7d:ac:f7:
         29:2b:ba:17:18:f0:7b:b2:57:7a:40:5c:53:c4:18:b2:d4:a3:
         d3:4f:ad:23:7a:44:8b:d3:d9:bf:57:ca:03:a6:c0:cf:0f:13:
         26:2b:7a:0a:33:c6:ac:fd:0c:d8:e5:bc:29:52:be:aa:b9:a3:
         90:94:cb:fb:c2:f0:4e:04:a7:5f:f2:da:91:8a:11:49:f0:ad:
         bd:03:12:a3:7d:bd:3f:ad:a7:8b:f7:01:b7:f6:75:e7:07:70:
         3d:c9:36:60:91:16:96:a4:d8:36:43:9f:a6:6b:14:48:fc:49:
         66:44:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:52 2025 by rpki-client