Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231352e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3231352e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          IQEw/iJm8boOQul5wi+6mwAcgQ4cpjXmipEPNJTHnbk=
Subject key identifier:   B9:D2:3F:F4:AF:E7:E3:66:D5:0E:2B:A4:E3:E1:AC:59:02:EA:FC:65
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       05ED0B980B71DF1EF0281541C5508A9E6A80016F
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231352e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:15 +0000
ROA not before:           Mon 02 Jun 2025 15:55:15 +0000
ROA not after:            Mon 01 Jun 2026 16:00:15 +0000
asID:                     273261
IP address blocks:        148.224.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 01:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ed:0b:98:0b:71:df:1e:f0:28:15:41:c5:50:8a:9e:6a:80:01:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:15 2025 GMT
            Not After : Jun  1 16:00:15 2026 GMT
        Subject: CN=B9D23FF4AFE7E366D50E2BA4E3E1AC5902EAFC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:7f:50:c2:7d:c4:b8:07:25:1c:fd:f8:4c:
                    0c:9d:46:36:44:2a:85:c9:a9:f3:43:c6:c5:46:b6:
                    fa:35:b1:8e:a8:bd:e3:d6:f8:39:40:c9:74:b4:8e:
                    01:e2:a8:37:56:4d:be:8c:37:0e:41:f2:b3:da:e0:
                    da:be:c4:8a:a2:83:b4:ac:03:7e:83:f2:cb:45:2c:
                    0e:6c:f9:b0:3f:ba:d5:e1:47:32:d6:b4:67:40:91:
                    67:e1:b4:8d:a2:64:a7:b8:3f:4c:fe:8d:89:fb:87:
                    80:82:85:b3:52:c9:3c:58:c0:6b:ea:4d:7f:f5:af:
                    20:b4:36:04:af:43:89:09:01:d1:66:06:5f:8f:52:
                    a2:3e:24:0e:86:1b:f1:9a:0d:e4:40:51:19:58:a7:
                    a7:08:5e:23:6e:04:9f:3e:6f:3f:bc:6c:fb:c9:47:
                    03:9d:0b:8c:68:d6:11:57:53:2d:2e:86:b7:63:95:
                    0c:12:72:08:96:35:82:fa:05:24:dd:6e:8a:38:a0:
                    db:9d:60:25:59:7e:c1:8a:dd:29:c2:80:fa:40:4e:
                    32:ee:26:4f:41:57:e6:f4:f1:31:19:6d:05:60:a2:
                    8c:0e:e3:55:d6:36:68:ff:47:fb:0d:df:a7:12:88:
                    c2:9c:52:0f:05:1f:4b:f7:d5:59:75:ea:1b:21:37:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D2:3F:F4:AF:E7:E3:66:D5:0E:2B:A4:E3:E1:AC:59:02:EA:FC:65
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231352e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:31:49:c5:d1:02:11:cc:99:df:4a:c3:f1:20:4e:7b:ee:
         35:44:e6:60:77:ee:6c:08:32:70:65:d2:3d:46:e0:fe:16:b7:
         03:3a:90:7a:5a:d1:e7:eb:53:bf:4d:59:92:70:00:46:16:4a:
         d4:89:e6:a0:6c:5e:2d:4e:9f:c6:d3:0d:56:f8:f0:04:cf:cd:
         6f:d6:e2:59:e1:ae:73:5d:5c:f6:4f:e3:bd:7c:c7:e5:34:96:
         ba:54:fa:1d:33:56:ab:83:a7:f9:d4:a7:1d:12:a6:43:df:b9:
         11:88:35:e9:28:14:50:68:90:fa:58:3d:88:c1:de:df:9a:6a:
         4f:1b:f4:d7:6b:c3:51:8c:7b:5b:de:eb:35:dd:4e:3f:b3:c3:
         bf:6c:6f:da:97:31:a4:cb:e7:57:ac:23:bb:8c:b9:70:62:a9:
         7b:32:98:c4:e0:ff:0f:d7:2a:d7:98:0f:52:18:ef:65:6e:4e:
         ca:83:e3:24:90:e4:53:a5:70:64:f5:4c:52:35:a6:45:c8:e9:
         44:af:1b:07:20:8c:42:6d:6b:01:58:97:de:6b:dc:25:c1:4d:
         de:dd:d1:c7:67:8c:9a:40:f9:5c:8d:01:f9:7d:c8:d5:67:36:
         11:20:02:03:7f:48:51:c5:9f:92:e2:9c:4d:f2:d3:ab:e7:88:
         c9:e6:38:11
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUBe0LmAtx3x7wKBVBxVCKnmqAAW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA2MDIxNTU1MTVaFw0yNjA2MDExNjAwMTVaMDMxMTAvBgNV
BAMTKEI5RDIzRkY0QUZFN0UzNjZENTBFMkJBNEUzRTFBQzU5MDJFQUZDNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2b39Qwn3EuAclHP34TAydRjZE
KoXJqfNDxsVGtvo1sY6ovePW+DlAyXS0jgHiqDdWTb6MNw5B8rPa4Nq+xIqig7Ss
A36D8stFLA5s+bA/utXhRzLWtGdAkWfhtI2iZKe4P0z+jYn7h4CChbNSyTxYwGvq
TX/1ryC0NgSvQ4kJAdFmBl+PUqI+JA6GG/GaDeRAURlYp6cIXiNuBJ8+bz+8bPvJ
RwOdC4xo1hFXUy0uhrdjlQwScgiWNYL6BSTdboo4oNudYCVZfsGK3SnCgPpATjLu
Jk9BV+b08TEZbQVgoowO41XWNmj/R/sN36cSiMKcUg8FH0v31Vl16hshNzMFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUudI/9K/n42bVDiuk4+GsWQLq/GUwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjMxMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4NcwDQYJKoZIhvcNAQELBQADggEBAHjHMUnF0QIRzJnfSsPxIE577jVE5mB37mwI
MnBl0j1G4P4WtwM6kHpa0efrU79NWZJwAEYWStSJ5qBsXi1On8bTDVb48ATPzW/W
4lnhrnNdXPZP4718x+U0lrpU+h0zVquDp/nUpx0SpkPfuRGINekoFFBokPpYPYjB
3t+aak8b9Ndrw1GMe1ve6zXdTj+zw79sb9qXMaTL51esI7uMuXBiqXsymMTg/w/X
KteYD1IY72VuTsqD4ySQ5FOlcGT1TFI1pkXI6USvGwcgjEJtawFYl95r3CXBTd7d
0cdnjJpA+VyNAfl9yNVnNhEgAgN/SFHFn5LinE3y06vniMnmOBE=
-----END CERTIFICATE-----
Generated at Fri Jun 13 16:14:06 2025 by rpki-client