Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e35362e302f32332d3233203d3e203231353037.roa
File:                     3134382e3232342e35362e302f32332d3233203d3e203231353037.roa (raw, json)
Hash identifier:          oO2VFdXrkDVWqRMpetBRPI7hYKy3usA2Z7R5B89Nw2s=
Subject key identifier:   5F:B6:33:47:DA:69:BE:1C:9B:C2:77:66:F2:01:39:A7:37:F1:0E:51
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       28EE80AB7CB721FE6E4C6BBD6538B5B35C35DBCA
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e35362e302f32332d3233203d3e203231353037.roa
Signing time:             Wed 16 Jul 2025 19:35:01 +0000
ROA not before:           Wed 16 Jul 2025 19:30:01 +0000
ROA not after:            Wed 15 Jul 2026 19:35:01 +0000
asID:                     21507
IP address blocks:        148.224.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Aug 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ee:80:ab:7c:b7:21:fe:6e:4c:6b:bd:65:38:b5:b3:5c:35:db:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jul 16 19:30:01 2025 GMT
            Not After : Jul 15 19:35:01 2026 GMT
        Subject: CN=5FB63347DA69BE1C9BC27766F20139A737F10E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:2d:11:41:8f:ae:20:22:ec:66:1b:68:c1:
                    b0:9b:b5:45:1c:a3:42:bc:bc:6c:42:8c:19:82:5f:
                    9a:81:ba:2d:53:38:eb:a5:24:a3:2b:d5:11:bb:96:
                    d6:ba:fe:a5:c4:d5:a6:ee:de:64:6b:9d:b2:4a:ad:
                    03:8e:de:b9:64:ab:4d:86:90:d4:16:35:41:3e:a9:
                    ed:bd:6d:68:8d:d8:f4:6d:e3:f3:d9:97:92:cd:c8:
                    4b:38:35:14:23:2f:8a:c7:dd:e8:88:ea:45:db:f0:
                    be:84:62:9f:16:fb:25:b5:46:11:3f:be:63:93:ee:
                    6e:86:f1:ff:64:19:f0:6d:51:d5:96:61:8e:35:99:
                    bd:6a:56:dc:99:f2:1f:fc:d5:fc:be:c2:d9:8c:93:
                    dd:e9:ad:09:09:06:08:c5:d2:49:c9:33:90:21:07:
                    7c:48:1e:83:f4:d8:38:12:81:0e:b5:30:78:c5:49:
                    89:09:e1:8d:be:9d:c9:8d:cc:70:ff:d7:a5:c7:b6:
                    10:ad:45:38:b0:38:2f:c1:03:90:f2:0a:82:45:ad:
                    62:fc:8b:1a:a1:db:8d:13:5f:5c:8e:ab:81:47:25:
                    b9:33:da:02:f9:c9:de:7f:fa:7f:ff:1c:ca:91:5b:
                    5f:4a:d0:25:5c:f4:c5:71:b4:d0:5b:56:0d:19:b2:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:33:47:DA:69:BE:1C:9B:C2:77:66:F2:01:39:A7:37:F1:0E:51
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e35362e302f32332d3233203d3e203231353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:68:bf:4e:66:40:50:42:a2:a0:ea:3a:41:e4:02:7f:d7:
         1a:d1:d9:c4:96:f3:fb:7b:9a:00:d8:30:3d:d3:ac:55:e0:ed:
         7b:5d:bb:81:85:8a:99:6e:ac:d1:58:ec:c3:e3:91:fa:3a:cc:
         9a:6a:c5:34:c5:92:f5:63:3f:cd:91:59:62:aa:92:36:9a:97:
         a5:ba:d8:97:e8:bd:af:83:f2:99:38:6b:72:a4:cb:17:c2:4f:
         f6:66:63:bb:04:5c:f4:6e:8d:d1:d5:e7:c6:eb:39:a1:92:14:
         ff:a7:4f:cb:7b:f4:03:74:df:1b:95:a3:85:a4:2e:a4:41:85:
         f7:7a:cc:68:a1:67:af:23:17:82:b8:b1:ac:19:77:da:81:79:
         78:8b:83:1b:d3:5f:ee:47:44:a0:b7:df:6e:b5:8a:c0:a1:81:
         4b:d8:a5:96:a2:f1:c4:2c:96:0b:58:b5:26:d1:e2:99:2b:16:
         86:70:7f:a8:5d:00:39:e2:0b:10:84:74:ae:67:1b:d8:8f:dc:
         2e:4d:d1:1d:a0:ec:2b:73:e0:cc:49:5b:cc:a3:f3:98:41:50:
         2d:71:bd:9d:5b:9f:4f:1c:ca:33:5b:c5:97:f4:5d:e2:79:f3:
         dc:c5:1c:15:43:f3:aa:82:e8:53:15:f5:14:7f:69:b7:bc:71:
         bf:82:33:f9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKO6Aq3y3If5uTGu9ZTi1s1w128owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA3MTYxOTMwMDFaFw0yNjA3MTUxOTM1MDFaMDMxMTAvBgNV
BAMTKDVGQjYzMzQ3REE2OUJFMUM5QkMyNzc2NkYyMDEzOUE3MzdGMTBFNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFS0RQY+uICLsZhtowbCbtUUc
o0K8vGxCjBmCX5qBui1TOOulJKMr1RG7lta6/qXE1abu3mRrnbJKrQOO3rlkq02G
kNQWNUE+qe29bWiN2PRt4/PZl5LNyEs4NRQjL4rH3eiI6kXb8L6EYp8W+yW1RhE/
vmOT7m6G8f9kGfBtUdWWYY41mb1qVtyZ8h/81fy+wtmMk93prQkJBgjF0knJM5Ah
B3xIHoP02DgSgQ61MHjFSYkJ4Y2+ncmNzHD/16XHthCtRTiwOC/BA5DyCoJFrWL8
ixqh240TX1yOq4FHJbkz2gL5yd5/+n//HMqRW19K0CVc9MVxtNBbVg0Zso/ZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUX7YzR9ppvhybwndm8gE5pzfxDlEwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzNTM2MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzMTM1MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZTgODAN
BgkqhkiG9w0BAQsFAAOCAQEAP9Vov05mQFBCoqDqOkHkAn/XGtHZxJbz+3uaANgw
PdOsVeDte127gYWKmW6s0Vjsw+OR+jrMmmrFNMWS9WM/zZFZYqqSNpqXpbrYl+i9
r4PymThrcqTLF8JP9mZjuwRc9G6N0dXnxus5oZIU/6dPy3v0A3TfG5WjhaQupEGF
93rMaKFnryMXgrixrBl32oF5eIuDG9Nf7kdEoLffbrWKwKGBS9illqLxxCyWC1i1
JtHimSsWhnB/qF0AOeILEIR0rmcb2I/cLk3RHaDsK3PgzElbzKPzmEFQLXG9nVuf
TxzKM1vFl/Rd4nnz3MUcFUPzqoLoUxX1FH9pt7xxv4Iz+Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:49 2025 by rpki-client