Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230372e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3230372e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          O2DAhYiFxhqA0sBhWEC4m7QfsBmgjzPNrlh6WVa4zIM=
Subject key identifier:   DF:6E:18:E5:58:1A:23:B4:CD:A3:B3:99:4C:AA:02:63:3A:14:CA:1E
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       7366B025C5CAB8FD68F4DE6CD178D47ED651610A
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230372e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:13 +0000
ROA not before:           Mon 02 Jun 2025 15:55:13 +0000
ROA not after:            Mon 01 Jun 2026 16:00:13 +0000
asID:                     273261
IP address blocks:        148.224.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:b0:25:c5:ca:b8:fd:68:f4:de:6c:d1:78:d4:7e:d6:51:61:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:13 2025 GMT
            Not After : Jun  1 16:00:13 2026 GMT
        Subject: CN=DF6E18E5581A23B4CDA3B3994CAA02633A14CA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:82:f1:b1:b0:a1:ef:96:09:7c:58:30:81:
                    b9:dd:79:af:e4:40:e2:55:14:2f:73:61:5c:04:e4:
                    7b:6b:cb:24:4f:9f:f8:32:fa:70:98:a0:5a:8b:2e:
                    6e:c9:1d:64:c6:d4:fa:96:ac:df:24:7f:c3:00:41:
                    8f:02:ed:ce:58:9f:8b:7b:78:6a:9e:cf:e9:80:c6:
                    09:ad:4e:fe:31:fa:92:92:1f:a9:7c:53:86:c0:6a:
                    a0:e1:3a:fb:23:15:fd:40:a4:1a:0d:bf:40:56:33:
                    8b:b9:6f:c4:36:0f:b8:e4:01:38:ed:88:2e:2a:29:
                    33:2a:0a:d4:c6:81:6a:fc:52:ff:fa:8c:82:cf:bc:
                    d4:d9:3d:c8:ab:a7:9f:cd:37:8c:c0:fd:71:f9:9a:
                    33:c1:e9:50:aa:df:0f:9f:ca:ee:30:32:e6:99:63:
                    89:55:ae:fa:7f:6b:93:a5:e1:12:5e:21:35:36:92:
                    16:46:f0:b7:f5:fc:d8:fe:02:65:7e:6d:ae:97:17:
                    2c:b8:48:28:b0:be:ba:2a:8f:60:fe:34:7d:f5:aa:
                    3c:a3:a1:6e:18:69:c3:a8:56:69:5f:20:70:99:be:
                    b2:0e:10:0f:e8:fc:22:ea:66:5e:4d:a7:78:a0:4d:
                    5b:54:c5:0a:fd:63:dc:13:c6:c9:d2:b1:cb:45:f8:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6E:18:E5:58:1A:23:B4:CD:A3:B3:99:4C:AA:02:63:3A:14:CA:1E
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230372e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:c6:a0:ef:0b:9e:73:07:3f:54:83:fe:f5:07:e5:4a:3d:
         56:6d:77:82:95:a8:ab:0b:4b:e3:41:36:3c:11:8c:9f:ea:bc:
         f0:47:11:0d:53:ff:49:97:e3:03:58:6f:a2:1c:60:8f:39:ef:
         90:75:cc:e2:a6:c1:9a:ef:7f:31:7c:1b:ef:9c:96:6f:12:75:
         8d:06:99:cd:62:58:5d:32:7e:3f:bf:fb:c1:fd:37:53:c1:58:
         0e:e2:c6:1b:50:90:6a:1c:86:95:f4:77:74:90:85:5f:61:fa:
         7f:0d:39:1c:9f:33:c7:5a:ce:fd:8f:59:7b:83:90:4d:e2:f1:
         d6:f0:5b:2e:d5:94:6b:fb:6e:ac:11:07:a9:c8:bb:e0:e7:a8:
         fd:27:81:33:25:7a:9f:5c:2d:a0:9f:f6:a2:2d:62:37:30:74:
         bc:ad:d9:85:33:64:84:c1:d4:b1:bb:57:c8:1c:b8:4a:a1:49:
         db:ab:91:3e:64:b5:e3:0f:94:27:cc:f2:10:6f:fc:f3:94:bc:
         e0:d6:5e:37:3d:ac:a4:93:92:2b:6f:43:25:2d:87:01:5f:0a:
         c7:c8:45:0c:56:3a:74:e5:cf:82:b8:69:33:e0:02:51:6a:3d:
         86:b1:3c:73:25:61:d9:6d:13:9a:ff:b4:bb:73:20:3e:0b:6b:
         45:cc:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:03:28 2025 by rpki-client