Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36312e302f32342d3234203d3e203231353037.roa
File:                     3134382e3232342e36312e302f32342d3234203d3e203231353037.roa (raw, json)
Hash identifier:          fnP0YJIPfBTAwzco+LZK1UdJMrHlAc3YadNoemkDBMI=
Subject key identifier:   3B:D0:1A:21:7B:8C:33:CF:87:CE:E5:04:44:A3:C1:88:F8:C8:8E:F6
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       443B9FFFA6C784ABA7CEE3E7FC84928C815A0DD6
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36312e302f32342d3234203d3e203231353037.roa
Signing time:             Wed 16 Jul 2025 19:35:03 +0000
ROA not before:           Wed 16 Jul 2025 19:30:03 +0000
ROA not after:            Wed 15 Jul 2026 19:35:03 +0000
asID:                     21507
IP address blocks:        148.224.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Aug 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3b:9f:ff:a6:c7:84:ab:a7:ce:e3:e7:fc:84:92:8c:81:5a:0d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jul 16 19:30:03 2025 GMT
            Not After : Jul 15 19:35:03 2026 GMT
        Subject: CN=3BD01A217B8C33CF87CEE50444A3C188F8C88EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:36:32:5a:06:d8:95:39:4f:8e:9c:33:d0:
                    64:f6:59:b1:6b:69:d7:a5:85:34:e2:43:7e:ee:1e:
                    12:fd:3f:84:15:2b:2d:71:ce:de:22:4e:33:eb:ae:
                    11:54:89:da:38:0e:00:8b:a8:84:9c:5a:37:cb:e1:
                    9b:93:8b:e4:d4:a1:de:07:63:38:98:e1:8c:be:0f:
                    6f:29:28:18:c5:b3:b3:d1:76:8c:05:2a:07:62:40:
                    a1:0c:0a:4d:cb:70:a2:e0:75:78:f1:6b:9f:b8:da:
                    6d:d0:28:cb:c8:0e:0c:b4:65:4a:3c:24:6c:75:b8:
                    0c:19:af:14:54:e6:9b:f4:c8:96:5c:4f:64:28:79:
                    4f:ac:24:6f:52:01:c6:4b:bc:db:32:f7:dc:af:00:
                    3f:42:c0:fe:d3:08:ec:d1:a2:fa:23:fa:ac:ca:d4:
                    b2:22:f5:12:a7:70:13:ca:bc:b0:a8:18:bc:6f:bf:
                    2c:05:2c:4a:79:89:b1:a2:ba:23:0d:83:f9:dc:ba:
                    0a:e2:ab:ae:f0:b8:c4:3c:d7:d9:96:5f:85:2e:49:
                    20:65:41:aa:53:99:0e:81:34:c3:e4:cf:93:ba:78:
                    ce:5b:50:b0:ea:fe:53:e5:0b:2d:8e:89:cb:bc:ad:
                    39:1c:f3:61:19:82:ac:db:e7:31:e1:86:2e:ff:2f:
                    23:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:1A:21:7B:8C:33:CF:87:CE:E5:04:44:A3:C1:88:F8:C8:8E:F6
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36312e302f32342d3234203d3e203231353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:56:7b:c3:f3:3f:ff:89:fe:e7:33:c9:2f:d7:05:45:71:fe:
         0c:d2:12:67:0a:00:03:30:4b:5b:08:e3:82:ae:59:e6:5e:fd:
         01:44:9e:ad:2a:2b:3f:74:31:1a:29:44:de:f1:84:eb:18:91:
         b8:17:79:0f:c7:60:20:d7:fa:5f:37:6e:03:33:92:a3:4f:2b:
         69:c6:9e:be:c8:86:81:06:dd:d9:5e:23:1c:e5:43:f7:5d:bc:
         a2:e3:07:ef:54:24:1b:5e:44:3a:1b:ab:36:69:c6:25:a1:d1:
         d7:7d:2e:db:88:36:e0:de:57:7c:1f:f8:c3:7c:49:bc:8d:49:
         89:18:36:71:03:73:90:b0:bc:f9:6b:bf:11:ae:e9:e2:7c:84:
         5a:7f:12:26:cb:de:0d:19:b3:c8:1b:07:dc:d4:e9:19:81:36:
         a2:95:19:20:dc:44:73:61:ad:ac:f6:74:fd:c4:9d:e1:21:aa:
         02:81:e4:bd:99:be:a7:ad:08:6f:81:6a:1f:d6:40:ca:03:7c:
         43:f0:c1:31:15:88:f8:4b:3f:5e:9e:fb:5a:7c:1a:ea:d6:0c:
         04:86:dc:eb:45:a4:0e:fb:da:8c:69:41:c7:72:f4:76:0a:49:
         3c:bc:7c:8d:8a:7a:60:3a:b7:db:df:15:05:41:a8:2c:78:45:
         29:fa:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:48 2025 by rpki-client