Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36322e302f32332d3233203d3e203231353037.roa
File:                     3134382e3232342e36322e302f32332d3233203d3e203231353037.roa (raw, json)
Hash identifier:          zeK9A1tERqu/J6McRi6Yuf30QR/nMd4SgKcpToATqhA=
Subject key identifier:   E0:F6:3B:F4:EB:A9:7D:BF:77:EC:7C:71:79:A4:17:96:E5:55:36:95
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       4CE306CACC9BEEC07276BB2DCEC2149993C0CB88
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36322e302f32332d3233203d3e203231353037.roa
Signing time:             Wed 16 Jul 2025 19:35:03 +0000
ROA not before:           Wed 16 Jul 2025 19:30:03 +0000
ROA not after:            Wed 15 Jul 2026 19:35:03 +0000
asID:                     21507
IP address blocks:        148.224.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Aug 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:06:ca:cc:9b:ee:c0:72:76:bb:2d:ce:c2:14:99:93:c0:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jul 16 19:30:03 2025 GMT
            Not After : Jul 15 19:35:03 2026 GMT
        Subject: CN=E0F63BF4EBA97DBF77EC7C7179A41796E5553695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:55:9f:12:9b:91:ab:d5:f9:9a:47:1c:c3:
                    8c:95:d3:37:15:48:33:83:65:be:5f:04:ea:ef:74:
                    49:ff:98:34:ab:bd:4a:3c:4f:7e:9b:b5:67:c5:ac:
                    81:57:74:21:db:96:41:e3:bf:bb:32:cf:8f:24:52:
                    27:5e:2a:00:2b:9a:91:af:2b:a0:0d:bd:0b:fa:9b:
                    2e:22:52:f5:03:3d:61:cd:6d:eb:91:2d:d2:93:b0:
                    6d:f5:b8:24:bd:2d:08:f4:a8:cc:e6:6e:50:6a:10:
                    e9:6d:96:e9:ac:d2:93:9d:2d:22:db:9e:5b:00:6b:
                    4c:9f:cc:5b:ec:40:98:1f:f4:ba:9b:07:44:11:c3:
                    73:6e:92:fe:49:91:53:36:15:e6:e0:51:7c:49:87:
                    9a:cd:72:11:66:ea:1c:cd:9c:86:cd:96:c2:22:db:
                    03:38:77:72:e3:74:04:45:58:8f:a6:6c:d4:01:fe:
                    8d:8d:93:fd:44:fa:78:9b:3a:9d:41:15:ad:1f:65:
                    31:93:b4:ab:8d:c9:75:ab:32:54:4a:6f:f8:24:6c:
                    e3:d8:78:eb:40:61:a9:7a:86:f6:7d:38:af:46:11:
                    c8:27:d7:86:8a:dd:6b:15:5a:39:ad:a0:58:c7:90:
                    94:26:ae:ca:08:66:b1:cd:80:0c:6b:d0:78:d2:cf:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F6:3B:F4:EB:A9:7D:BF:77:EC:7C:71:79:A4:17:96:E5:55:36:95
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e36322e302f32332d3233203d3e203231353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:e9:52:ca:56:38:a7:c4:88:54:0d:36:a6:d4:d1:75:c2:48:
         3f:c2:28:55:26:04:1a:05:f2:95:f5:0a:4d:44:cb:44:1c:b7:
         2c:99:b1:be:84:41:ce:71:a8:3c:7d:70:0c:41:a1:a8:a1:50:
         e5:cd:18:cc:63:4a:f5:5a:78:fd:bb:da:56:00:34:cb:5b:44:
         e8:ba:99:c9:b3:f6:3b:f6:4d:35:be:d2:49:2e:67:28:70:27:
         4c:e8:3e:eb:cf:cb:14:00:e4:b6:96:0f:01:1d:f3:cc:4d:a7:
         98:6e:d2:af:34:96:73:a3:12:20:43:61:fb:a2:8b:41:45:d0:
         bf:72:0c:e0:06:d8:0b:f7:a4:7a:5c:b9:2d:3c:78:00:d5:c8:
         c9:64:f0:32:4b:86:52:c3:8e:cf:c4:4e:a5:83:02:f0:ab:e2:
         e0:cd:08:0e:e7:c5:8c:aa:3b:26:ea:65:f0:67:d9:76:c5:1a:
         05:bc:80:12:67:2e:9b:c1:1a:93:c4:3f:00:1b:21:c0:e1:dc:
         e4:4a:36:8f:17:04:2e:eb:38:d3:e0:72:5f:8e:1b:95:88:15:
         7b:87:b1:c4:d8:91:13:78:06:f2:81:91:33:3b:94:a2:2e:69:
         24:ec:f2:ec:d5:c1:ca:7d:5c:86:b5:e8:84:8a:d8:7f:f1:eb:
         a6:b9:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:53 2025 by rpki-client