Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233322e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233322e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          JimpTO90gGjjFKBruv2kKcFHP1VLTkZLs+TcuyqS+Aw=
Subject key identifier:   37:BF:BA:D0:F1:8D:83:90:C6:2D:5F:B2:3B:7C:27:B3:0A:45:02:4E
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       168BB79FBACF33DCFD031825418A414EA44F0766
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233322e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:05 +0000
ROA not before:           Mon 02 Jun 2025 15:55:05 +0000
ROA not after:            Mon 01 Jun 2026 16:00:05 +0000
asID:                     273261
IP address blocks:        148.224.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8b:b7:9f:ba:cf:33:dc:fd:03:18:25:41:8a:41:4e:a4:4f:07:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:05 2025 GMT
            Not After : Jun  1 16:00:05 2026 GMT
        Subject: CN=37BFBAD0F18D8390C62D5FB23B7C27B30A45024E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:68:5e:05:f4:67:8a:a5:61:37:87:d9:de:
                    d2:65:3d:33:d7:be:bb:e2:d7:b1:d6:99:a8:93:4c:
                    da:c1:f1:23:27:5b:83:33:57:5c:22:bf:30:6f:3b:
                    9f:60:94:33:4f:76:27:85:e9:ef:75:09:40:08:63:
                    3f:2d:12:28:62:82:57:31:9c:77:8b:45:94:17:4d:
                    ff:e5:d8:14:73:2f:40:fd:64:c8:1e:eb:37:f4:2e:
                    98:ea:6c:85:f5:27:fb:d7:a2:e1:00:b4:82:b2:dd:
                    8f:12:06:c6:9d:05:a3:32:c0:fb:e3:49:65:ba:4b:
                    10:fe:8b:9a:db:11:f0:c3:70:a3:29:f7:a4:91:b5:
                    64:49:b6:70:2a:75:e0:58:7d:c8:fd:6d:4c:ce:f6:
                    8a:ed:ec:5a:10:dd:54:a4:a0:83:d2:77:5b:93:c1:
                    91:71:5c:bf:e1:0c:16:21:1f:2f:44:b1:63:4f:91:
                    5a:ef:1a:16:9d:1c:3f:04:6e:dc:66:19:bb:a6:75:
                    35:95:f7:7b:7d:d1:7b:32:14:e5:72:f1:a2:7a:31:
                    15:8f:40:23:eb:db:0b:2d:b7:c4:1a:aa:f1:4d:55:
                    02:5b:70:78:b9:94:34:88:5f:2e:b4:db:c6:61:03:
                    bd:d6:82:0a:e6:cd:ae:b0:4c:34:d9:9c:5f:c8:ff:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BF:BA:D0:F1:8D:83:90:C6:2D:5F:B2:3B:7C:27:B3:0A:45:02:4E
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233322e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:e5:b2:7c:88:c7:fd:1f:d6:38:fc:63:0a:64:a7:28:74:
         28:ae:6f:95:5e:8f:a0:56:f9:33:d7:01:f7:78:10:7b:0b:5f:
         59:10:63:a9:15:d3:ff:fd:c2:c5:9a:40:92:97:2f:7b:d7:2d:
         89:93:7f:88:75:46:63:61:53:b6:3d:3c:84:60:12:f7:b3:6f:
         4d:f4:08:a3:e3:3e:53:84:10:d5:cd:97:18:11:2e:f6:66:47:
         19:50:68:91:c9:54:96:3b:e5:e5:ce:39:43:73:4f:29:7c:28:
         35:62:a5:a8:46:b9:92:e9:cb:d7:ac:2e:4c:dd:de:a8:0b:19:
         0e:19:f9:39:02:c9:e8:3c:79:f9:30:e7:61:a8:6c:4d:2c:48:
         81:e4:60:e4:b3:f3:29:90:d2:9d:47:29:4f:30:68:a1:0a:f9:
         b0:a9:31:87:e7:1d:db:6a:bf:ea:e9:77:ec:62:6a:32:b6:da:
         e5:d2:84:c9:b0:d6:12:a7:5c:80:45:93:50:44:bc:54:29:7f:
         cb:61:b8:e5:2c:4a:38:df:8a:80:d8:ce:4c:13:08:4b:8d:2a:
         73:09:57:65:bc:1e:70:cc:c7:3d:86:8c:ef:0d:fa:06:83:4d:
         d4:ba:f6:f7:d7:4d:e7:72:11:5e:53:8b:cb:78:bf:e3:f4:08:
         5b:a5:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:57:11 2025 by rpki-client