Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139352e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139352e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          2hO3S8WmTnsz3pUYJwPVCnzwuIydTIRN8/FYC+H+GMc=
Subject key identifier:   09:AC:CA:29:FA:B9:F7:AB:EC:DA:80:BC:96:A8:37:BF:62:EB:AD:F4
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       31378B307736B54458683F7407506CF64D36F3EA
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139352e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:06 +0000
ROA not before:           Mon 02 Jun 2025 15:55:06 +0000
ROA not after:            Mon 01 Jun 2026 16:00:06 +0000
asID:                     273261
IP address blocks:        148.224.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:37:8b:30:77:36:b5:44:58:68:3f:74:07:50:6c:f6:4d:36:f3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:06 2025 GMT
            Not After : Jun  1 16:00:06 2026 GMT
        Subject: CN=09ACCA29FAB9F7ABECDA80BC96A837BF62EBADF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:6b:2a:5d:ba:c7:17:b5:cc:5e:e9:dd:47:
                    ab:0e:59:f5:0b:94:2f:73:1a:0c:08:fa:46:d0:c5:
                    16:2d:02:06:9c:77:d9:0d:77:44:19:2f:b7:1d:3e:
                    de:88:23:87:26:b8:2f:e1:ce:a0:7b:c0:ca:45:a0:
                    1e:db:7e:39:4f:09:ec:db:7c:aa:f4:34:80:04:72:
                    63:84:a0:00:9e:98:da:f4:3e:48:83:41:73:63:2a:
                    12:c8:4f:76:fe:13:42:4d:4b:81:ab:4c:ef:27:65:
                    dd:75:cb:45:32:39:e7:bf:55:83:67:d7:20:85:8c:
                    e7:72:bb:cb:8a:59:d1:03:9e:86:f3:9e:5f:fc:bb:
                    47:ca:d8:18:01:a7:bd:46:31:09:af:c8:be:40:3c:
                    45:59:ba:2d:6f:5f:9c:82:87:5b:cc:46:db:49:17:
                    93:ec:c9:6d:a7:c6:91:6b:16:2d:2d:df:7f:40:8d:
                    96:ac:4d:f8:db:ee:f0:23:44:19:2a:66:85:e4:50:
                    7a:ba:c2:10:63:4a:e5:55:9a:f1:d3:1a:90:8d:07:
                    b1:2a:0d:47:d4:02:5c:03:94:01:76:59:e2:7f:a0:
                    93:4d:3d:ba:49:35:03:2a:c1:43:80:8a:cb:b5:1f:
                    59:29:d1:5e:36:b8:6f:28:5a:ff:b9:0d:97:ad:84:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:CA:29:FA:B9:F7:AB:EC:DA:80:BC:96:A8:37:BF:62:EB:AD:F4
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139352e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:d5:9e:24:da:0c:e4:e4:03:a2:51:37:0d:a3:42:91:3c:03:
         71:3a:0e:17:e1:7b:d7:35:7a:3d:4b:ed:c3:95:f2:00:22:ae:
         5d:dd:93:7f:6b:50:ca:b9:da:a8:7d:de:ff:19:94:6d:37:c9:
         d2:bb:85:19:66:ff:7e:09:16:17:2c:84:cd:ed:d6:55:d2:f0:
         29:37:c9:52:f1:a0:ea:2e:2d:b9:64:13:02:0b:26:18:56:23:
         7f:38:85:c0:d9:d9:e8:6b:b1:70:a5:7a:43:86:ab:ea:11:10:
         35:a3:37:9b:1c:3f:a5:20:38:aa:bb:db:69:4c:93:f5:66:82:
         1a:0f:eb:b3:bb:04:3f:c8:a2:c7:cb:3c:5d:83:63:5e:70:04:
         8f:08:bf:ee:67:a4:3c:40:20:87:ac:71:14:56:ad:51:dc:9e:
         2b:1b:dd:c1:2c:1a:c8:82:08:2a:70:b6:7d:4c:81:fc:32:39:
         6f:e4:ab:2a:e9:52:c2:87:e7:2c:7c:bc:6b:7c:ab:63:09:c8:
         fa:58:6b:82:db:2c:c2:d5:7d:f4:78:c4:16:88:00:d3:b0:3b:
         cc:9b:3b:ab:bd:16:5e:ef:12:76:6f:6d:d7:89:d6:b1:71:a1:
         7c:02:09:13:4e:59:46:4e:4a:9a:c2:9a:34:d4:3f:2d:e5:1d:
         b5:bc:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:30 2025 by rpki-client