Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          fajb0Pkl6Xy1JU239LAqS/GjPokBQdh4hI9d9fsNnnE=
Subject key identifier:   58:FB:E3:05:EA:CC:1D:6A:EB:ED:59:D4:88:3F:FA:A3:87:2A:AC:6E
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       476A9125661069D6A57061EE90B5D50CC32F25C1
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:08 +0000
ROA not before:           Mon 02 Jun 2025 15:55:08 +0000
ROA not after:            Mon 01 Jun 2026 16:00:08 +0000
asID:                     273261
IP address blocks:        148.224.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:91:25:66:10:69:d6:a5:70:61:ee:90:b5:d5:0c:c3:2f:25:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:08 2025 GMT
            Not After : Jun  1 16:00:08 2026 GMT
        Subject: CN=58FBE305EACC1D6AEBED59D4883FFAA3872AAC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:8c:d4:91:d0:3d:8a:14:b7:d9:f0:59:93:
                    78:ad:01:9a:32:4f:9e:fe:03:44:0e:5a:19:f0:04:
                    2e:e5:dc:49:64:fc:8b:82:16:21:30:e9:bd:07:5b:
                    b7:5c:76:14:17:2e:36:8f:18:a8:95:8e:5a:01:ae:
                    3d:8d:2d:4b:c4:3b:84:9c:dc:fd:e8:6c:c1:ad:08:
                    a9:a2:73:10:c3:ac:33:27:16:01:57:ce:1a:92:64:
                    be:26:fd:37:66:8b:2d:cb:0c:2e:89:d4:28:5d:1f:
                    20:d6:6b:fb:ee:57:97:1a:74:98:e7:c9:60:9f:1a:
                    b5:b8:36:b4:c3:8b:23:ee:88:df:fc:cc:6b:9e:1f:
                    ee:45:22:3c:f0:1e:92:e2:e8:e3:dd:2b:26:82:fc:
                    7a:39:e6:2c:67:64:ca:a8:08:1d:8f:39:e5:68:f4:
                    32:ad:e2:a1:0f:44:cc:11:8c:18:aa:1b:df:04:1f:
                    92:ed:94:16:0e:8d:e7:f7:56:e2:ea:6c:99:75:dd:
                    7b:d5:83:31:b1:4e:53:4e:79:24:0c:89:4e:c6:7a:
                    f8:e4:f6:0d:72:96:08:0b:f4:77:6e:d8:c4:e9:51:
                    00:2b:2e:b0:6f:55:69:b4:d3:dd:f8:49:96:13:78:
                    d7:f7:1c:ba:5d:47:10:61:66:ec:5f:78:ec:90:5b:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FB:E3:05:EA:CC:1D:6A:EB:ED:59:D4:88:3F:FA:A3:87:2A:AC:6E
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:8d:e4:5c:e9:ed:63:c5:ca:a1:da:f7:26:fc:09:ef:f8:
         88:d5:de:1d:ef:58:77:bf:0a:2e:ce:69:8d:d4:3b:62:97:58:
         e9:de:a2:b5:11:c2:6e:bd:85:ff:e2:84:f0:d0:d4:79:a4:14:
         41:1b:13:e4:8b:69:c0:6f:93:88:21:c5:29:e2:d3:0b:1e:77:
         86:3e:a8:c0:ef:dd:75:68:9e:04:ac:81:4a:dd:45:a6:3a:fa:
         fc:66:1b:ab:48:10:65:12:da:40:b6:1c:44:d3:cd:11:09:11:
         1d:fd:e7:e1:c9:6d:1c:92:87:80:3e:a7:97:30:6c:65:94:f8:
         73:cf:ce:f6:57:f8:17:03:71:a0:9a:90:c9:a1:bd:00:f9:32:
         80:7e:73:19:bd:2c:56:f0:59:6d:77:b4:fc:fc:0c:0b:b7:c4:
         e4:02:b1:cf:06:09:82:4a:fd:81:e5:12:08:b3:d0:60:e3:f1:
         9e:09:8d:fa:1a:16:d3:c8:ce:c1:c5:b5:81:24:c3:b4:a2:0d:
         7b:03:68:bf:82:8a:80:0b:8b:36:58:19:08:74:32:23:3b:c4:
         bc:47:a0:b5:2b:83:c2:76:2e:88:d0:77:aa:74:53:c4:88:3a:
         4a:6e:20:6a:02:35:91:85:07:d4:03:19:76:11:1d:85:b9:99:
         55:be:e2:1d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUR2qRJWYQadalcGHukLXVDMMvJcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA2MDIxNTU1MDhaFw0yNjA2MDExNjAwMDhaMDMxMTAvBgNV
BAMTKDU4RkJFMzA1RUFDQzFENkFFQkVENTlENDg4M0ZGQUEzODcyQUFDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aozUkdA9ihS32fBZk3itAZoy
T57+A0QOWhnwBC7l3Elk/IuCFiEw6b0HW7dcdhQXLjaPGKiVjloBrj2NLUvEO4Sc
3P3obMGtCKmicxDDrDMnFgFXzhqSZL4m/Tdmiy3LDC6J1ChdHyDWa/vuV5cadJjn
yWCfGrW4NrTDiyPuiN/8zGueH+5FIjzwHpLi6OPdKyaC/Ho55ixnZMqoCB2POeVo
9DKt4qEPRMwRjBiqG98EH5LtlBYOjef3VuLqbJl13XvVgzGxTlNOeSQMiU7Gevjk
9g1ylggL9Hdu2MTpUQArLrBvVWm00934SZYTeNf3HLpdRxBhZuxfeOyQW1xZAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWPvjBerMHWrr7VnUiD/6o4cqrG4wHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjMwMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4MswDQYJKoZIhvcNAQELBQADggEBAH9BjeRc6e1jxcqh2vcm/Anv+IjV3h3vWHe/
Ci7OaY3UO2KXWOneorURwm69hf/ihPDQ1HmkFEEbE+SLacBvk4ghxSni0wsed4Y+
qMDv3XVongSsgUrdRaY6+vxmG6tIEGUS2kC2HETTzREJER395+HJbRySh4A+p5cw
bGWU+HPPzvZX+BcDcaCakMmhvQD5MoB+cxm9LFbwWW13tPz8DAu3xOQCsc8GCYJK
/YHlEgiz0GDj8Z4JjfoaFtPIzsHFtYEkw7SiDXsDaL+CioALizZYGQh0MiM7xLxH
oLUrg8J2LojQd6p0U8SIOkpuIGoCNZGFB9QDGXYRHYW5mVW+4h0=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:00:53 2025 by rpki-client