Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          VrR10g0xvMqLtQ9Mj9VbnQOgWOzf2JTBcS/an8FIkFk=
Subject key identifier:   A9:6C:FC:B8:6E:C6:05:91:7F:CD:AB:90:FD:0D:18:27:70:87:05:54
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       57016F0045B02B85F2ED5F57F4265E0A24960961
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:12 +0000
ROA not before:           Mon 02 Jun 2025 15:55:12 +0000
ROA not after:            Mon 01 Jun 2026 16:00:12 +0000
asID:                     273261
IP address blocks:        148.224.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:01:6f:00:45:b0:2b:85:f2:ed:5f:57:f4:26:5e:0a:24:96:09:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:12 2025 GMT
            Not After : Jun  1 16:00:12 2026 GMT
        Subject: CN=A96CFCB86EC605917FCDAB90FD0D182770870554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a0:dc:bd:b7:bb:0e:27:9a:b5:7c:9d:b4:fa:
                    87:0a:9f:62:c3:72:36:45:c7:8d:b8:43:ca:dc:83:
                    53:da:f7:62:f9:6a:0a:4a:11:85:ef:7c:d5:45:f3:
                    fd:1d:73:c2:e4:a4:2c:70:f9:26:8e:3e:a4:b7:08:
                    1d:36:ce:85:1e:03:45:ad:b1:fd:54:c6:9e:9a:05:
                    ef:3d:ea:71:18:ef:15:04:33:2a:90:19:5c:46:f7:
                    a4:b0:4f:97:fe:ef:e4:ee:60:3a:a4:37:7b:35:5c:
                    53:ea:dc:76:06:86:57:8e:a1:bc:ba:ca:5b:83:93:
                    4b:75:6c:ba:c2:75:55:28:13:97:71:69:73:bc:c1:
                    81:68:d8:96:11:f4:05:ee:e1:03:40:ea:16:01:ea:
                    8c:37:ff:24:67:d6:2d:9d:7f:0c:84:47:85:75:e4:
                    dc:6a:cb:7f:14:9d:ba:a8:4a:39:0a:b3:d6:4f:79:
                    1b:a0:aa:de:be:de:d2:1f:27:e0:23:61:fe:0d:e8:
                    c3:5d:65:68:78:17:bb:f0:f5:4b:e8:92:8b:d6:02:
                    4f:e8:42:36:cf:f7:fb:aa:e3:f8:02:21:8d:46:19:
                    21:8e:b2:62:fa:a2:56:b7:0a:9f:49:6f:14:15:6d:
                    19:00:54:e3:db:a7:7d:8e:ad:47:69:a3:ac:46:86:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6C:FC:B8:6E:C6:05:91:7F:CD:AB:90:FD:0D:18:27:70:87:05:54
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:50:bf:09:42:77:83:66:c6:41:e1:ba:d6:e0:1c:15:ae:20:
         b5:17:ff:c7:26:93:63:19:17:cd:b1:f9:fd:24:99:7f:29:4f:
         5f:b7:4a:53:cc:e9:04:92:66:70:07:f7:af:75:c5:24:d2:70:
         55:2e:9e:8c:7b:62:b4:56:3a:08:7b:35:80:1b:c8:12:6e:22:
         9b:68:3b:05:4d:c0:fd:c0:20:87:30:53:95:19:e2:9e:10:b8:
         69:2e:7a:a5:77:3a:7b:5a:6d:d5:3d:a3:52:ff:05:f7:c3:cd:
         50:5a:4d:0d:17:c8:be:3e:6f:34:51:b4:c1:91:ba:a7:bc:aa:
         a1:4b:d7:0e:49:fc:d4:11:b1:76:bd:00:9f:d2:14:23:f0:78:
         6f:87:29:42:d5:d6:0b:fd:78:44:67:71:26:ee:e6:c1:41:8d:
         db:25:44:da:81:95:dc:f1:97:31:d7:3a:39:ae:08:17:c3:5f:
         02:5f:93:64:0d:32:0b:fd:82:3d:0e:df:9e:11:ff:a7:79:a5:
         13:e9:03:33:11:dd:c9:86:60:fc:41:af:4a:66:ef:58:0f:1a:
         04:8e:f9:66:98:54:2b:b4:38:d0:33:23:b1:52:d2:be:5f:05:
         81:df:a8:03:00:03:6f:3f:21:22:7f:5b:73:1c:57:c4:73:08:
         40:61:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:42 2025 by rpki-client