Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139322e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139322e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          r+PB2cFchFMdTajC8b7KWRBR12ZkXGzMIYEgRoGi0g4=
Subject key identifier:   25:03:5E:70:FA:B8:5D:5E:D4:23:16:0C:FF:D5:A5:63:99:B4:CF:12
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       50007B4399B83588D085A60B5C5D11BD9234F78B
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139322e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:18 +0000
ROA not before:           Mon 02 Jun 2025 15:55:18 +0000
ROA not after:            Mon 01 Jun 2026 16:00:18 +0000
asID:                     273261
IP address blocks:        148.224.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:00:7b:43:99:b8:35:88:d0:85:a6:0b:5c:5d:11:bd:92:34:f7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:18 2025 GMT
            Not After : Jun  1 16:00:18 2026 GMT
        Subject: CN=25035E70FAB85D5ED423160CFFD5A56399B4CF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:b3:0d:75:20:e5:42:00:0c:2d:12:f5:4e:
                    ba:a2:1f:b6:49:41:1f:de:01:22:1c:f0:57:24:fa:
                    f8:4f:29:3d:a7:1b:eb:df:3b:8f:fc:a1:4a:d2:0e:
                    10:da:58:5f:36:2e:8f:95:98:95:ab:78:40:e0:b0:
                    53:34:8d:f1:f0:ff:56:97:b8:80:47:5c:85:ac:e3:
                    92:c1:08:78:00:b3:a3:98:ea:91:d3:b0:fa:d9:42:
                    c9:ee:53:24:ff:3c:62:25:f5:b0:79:17:41:e4:d4:
                    61:4a:f7:f9:d7:d8:59:01:ca:e3:44:29:14:bc:ed:
                    2f:ae:f7:d6:fd:8d:d8:fc:ca:b7:e1:27:ba:29:e3:
                    ab:c2:fc:63:77:30:ba:8d:51:88:af:cd:d1:8a:b2:
                    8f:43:f6:4b:f7:c3:f1:14:4c:d9:fb:c0:27:1c:66:
                    76:03:c2:2e:0c:4c:0d:5e:60:af:4a:8d:69:e1:43:
                    d0:31:90:0d:8c:4f:ea:9f:49:2c:a7:4d:1f:0f:bb:
                    69:ea:0c:2a:6f:05:b1:e9:11:5c:dc:b4:7a:e6:74:
                    cd:09:5f:b4:68:f3:6a:8f:9e:32:b1:82:64:8f:81:
                    0a:41:4b:a6:66:de:c7:a6:10:35:59:a9:6c:f2:45:
                    f3:89:a2:21:ff:47:77:20:b8:e6:57:ae:bd:e5:1b:
                    72:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:03:5E:70:FA:B8:5D:5E:D4:23:16:0C:FF:D5:A5:63:99:B4:CF:12
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139322e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:64:92:07:54:df:32:8e:dc:91:11:21:03:c6:73:44:ec:
         94:c5:d9:df:8a:16:12:97:67:2c:06:02:1c:44:e2:be:9e:d2:
         8f:63:75:07:ea:fc:f6:fa:8e:06:0f:cf:6e:72:cc:f2:82:3f:
         83:1d:93:4b:e2:12:6d:4c:3b:9b:d0:2d:b9:09:55:2b:ed:cf:
         2f:03:df:6a:28:bc:fa:73:16:f1:d8:10:9c:e4:fa:99:4c:0e:
         bd:7a:1d:7c:ac:f6:23:da:35:71:e8:9c:f2:9c:64:d7:94:7b:
         1a:c5:57:61:f3:3d:dc:41:bf:0e:f6:b9:c0:04:1c:40:ef:93:
         01:21:54:c5:62:c1:ae:fb:eb:70:c8:f1:f9:23:1f:19:a2:49:
         b0:43:e2:a2:52:10:9b:3e:cc:c4:e9:53:e4:01:08:ce:c0:25:
         da:8b:bd:9a:a2:ed:b8:2f:d0:a0:82:e5:24:f7:3e:d2:d3:9d:
         da:4e:47:0b:5d:ec:d6:ff:f7:57:48:96:85:61:77:f9:cd:c5:
         34:dd:50:81:55:a8:6a:bf:e1:ea:36:36:08:eb:91:7e:26:4e:
         7b:81:9b:19:e7:d4:ed:06:c0:38:41:36:61:23:b2:ce:e7:1a:
         0a:6a:56:e9:82:16:f2:10:a8:3d:77:1c:e0:a5:40:bc:4d:4f:
         46:c9:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:25:12 2025 by rpki-client