Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231342e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3231342e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          gmMIl/Brx30chynDQ5kGAcGbT+FeD74PAhGBunO/oqk=
Subject key identifier:   47:35:2E:7A:23:FA:7B:36:CC:A1:14:AA:70:8E:FC:6A:2A:D5:9D:71
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       60C3E317A1333B764A98595BBACD697CBD09BD22
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231342e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:04 +0000
ROA not before:           Mon 02 Jun 2025 15:55:04 +0000
ROA not after:            Mon 01 Jun 2026 16:00:04 +0000
asID:                     273261
IP address blocks:        148.224.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 01:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:e3:17:a1:33:3b:76:4a:98:59:5b:ba:cd:69:7c:bd:09:bd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:04 2025 GMT
            Not After : Jun  1 16:00:04 2026 GMT
        Subject: CN=47352E7A23FA7B36CCA114AA708EFC6A2AD59D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:68:16:5b:9e:23:ea:7d:24:ef:2a:90:1a:
                    08:b1:0a:e4:ed:3a:2f:39:c9:12:60:f2:38:53:92:
                    61:e2:e6:67:20:1d:7a:e9:44:80:1a:f5:6a:ca:25:
                    0f:e1:94:ba:0f:96:49:30:63:59:49:88:d6:e7:bc:
                    2e:3c:fd:78:a4:44:a2:61:af:d6:ee:64:10:d3:a8:
                    50:3b:15:7a:b9:13:00:86:84:19:c9:9e:d4:8c:d0:
                    a8:2c:eb:94:96:3a:e5:b6:7f:23:72:62:20:30:91:
                    ba:a6:5f:d2:cb:f8:16:a8:b9:ed:68:40:77:3a:2d:
                    bd:e1:ba:07:e7:6b:23:dc:29:1a:31:a6:a0:0d:ff:
                    34:fd:1b:3b:51:77:18:e3:a5:da:4b:4a:9e:9f:a9:
                    85:80:e0:4d:ea:a1:9a:b0:33:32:37:d2:4c:11:1c:
                    d5:ed:a7:51:1c:3a:cf:5e:22:40:f3:50:f2:d0:fa:
                    e4:e8:14:70:78:9d:88:21:a0:26:35:ae:99:91:4c:
                    b3:53:a7:f0:1a:90:87:7e:12:5d:35:31:33:9f:06:
                    ef:22:20:10:b9:e1:59:85:2b:bb:a4:89:ea:61:94:
                    3e:4f:2c:76:e4:d6:94:3f:47:9c:8e:79:84:90:d3:
                    9f:a7:82:d0:81:b4:8a:54:25:88:04:97:57:2c:ac:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:35:2E:7A:23:FA:7B:36:CC:A1:14:AA:70:8E:FC:6A:2A:D5:9D:71
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231342e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:0a:ae:3a:49:25:ad:67:b4:98:30:cd:8e:29:e9:6f:8e:
         dc:6a:e1:cd:64:87:5b:44:33:a9:49:14:6b:f8:a6:ae:dc:27:
         16:4d:23:18:7f:37:64:2d:52:9f:82:6d:a1:18:72:cc:4c:1c:
         68:31:c6:fe:ee:1f:71:5a:e4:2c:ac:e6:e6:ab:87:00:40:fa:
         c1:d8:3f:dd:f5:8c:fd:a1:39:b4:d0:ee:9b:3f:8c:c1:55:fc:
         02:5e:bf:6c:79:a2:9f:12:62:5f:44:ce:3b:7a:15:45:e2:99:
         2d:f5:55:4f:c9:67:c8:fe:35:02:57:b6:6d:4e:22:82:0e:d4:
         57:6f:a4:35:b8:30:27:0c:8f:03:19:d1:19:dd:12:a1:c9:22:
         d2:66:d7:f2:67:10:43:3b:59:00:87:8b:e6:94:63:2c:36:92:
         eb:91:81:db:59:5d:31:61:e5:af:c9:6e:60:c4:92:94:35:58:
         fe:b0:0d:64:5f:8c:a5:29:fb:0a:0c:36:98:69:59:b8:eb:18:
         8c:0f:e6:9f:b0:e9:39:35:06:44:00:e6:c3:7d:37:4b:24:0b:
         d0:6b:a0:f8:d2:47:b6:b8:5d:9d:67:d1:b9:df:b7:74:a8:e2:
         7f:09:55:9e:1c:67:79:3e:0a:ea:0d:de:fd:ab:aa:47:85:7b:
         ee:b3:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:18:21 2025 by rpki-client