Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3234332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          12sms0Lz+ZriubINr/qkNbCbTa2sD9pam6dWYWqS8RM=
Subject key identifier:   97:71:6C:5D:8D:69:EC:5E:4D:E5:BA:15:23:D8:43:1E:D5:12:BE:11
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       1AD32B8B1577B2CB221AFDF8A0478B071E3E0F59
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:03 +0000
ROA not before:           Mon 02 Jun 2025 15:55:03 +0000
ROA not after:            Mon 01 Jun 2026 16:00:03 +0000
asID:                     273261
IP address blocks:        148.224.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d3:2b:8b:15:77:b2:cb:22:1a:fd:f8:a0:47:8b:07:1e:3e:0f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:03 2025 GMT
            Not After : Jun  1 16:00:03 2026 GMT
        Subject: CN=97716C5D8D69EC5E4DE5BA1523D8431ED512BE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:6a:b3:fb:1e:b3:e7:22:9c:6f:cb:41:59:
                    47:66:bd:b6:7a:57:a6:26:90:8b:21:80:d7:06:b3:
                    69:31:f5:63:d6:ce:d2:d7:46:53:19:e9:b3:a9:27:
                    65:89:c7:52:af:2b:a1:2b:fc:14:05:aa:bd:76:aa:
                    b3:3e:ad:a5:ec:48:56:50:3c:f1:41:48:23:29:bd:
                    1f:3d:d8:ee:e8:79:2e:81:83:04:a7:7a:c6:25:a5:
                    3e:5f:ff:82:d7:71:7d:b1:0d:23:ef:50:02:d4:1c:
                    65:b1:99:ec:f1:22:e8:44:16:91:72:6c:15:12:37:
                    cd:55:fe:2f:fc:98:ca:db:aa:be:c2:b7:a2:fa:0c:
                    4b:d6:a1:7c:c5:83:1e:dd:b5:a6:ef:b3:b0:75:71:
                    e2:cf:60:7b:68:b1:ac:b6:f1:d6:d1:51:07:3f:2b:
                    5b:1a:a0:65:fa:f1:c8:49:b9:c2:64:63:1c:b5:fd:
                    f0:83:17:02:5c:1e:d6:99:1c:97:e2:1b:2e:c8:48:
                    be:2d:0c:a8:e4:d4:24:5f:96:9b:6f:a9:74:ae:7b:
                    cc:7f:c7:9a:9b:98:4a:29:7e:5f:a1:66:6a:2c:bf:
                    50:01:b0:03:a0:33:67:a3:35:90:ab:f0:5f:6d:e3:
                    d7:68:01:34:52:da:d0:81:47:32:a5:cf:7e:62:64:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:6C:5D:8D:69:EC:5E:4D:E5:BA:15:23:D8:43:1E:D5:12:BE:11
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:15:13:63:7d:c8:3d:c4:f2:dd:c7:eb:b7:d4:3f:3b:96:16:
         b6:62:8f:a6:a1:51:ff:78:6e:ab:42:3e:11:12:a3:71:0a:ef:
         6b:e3:80:27:46:d7:0a:b9:ba:84:47:2d:e8:52:5d:61:1a:7c:
         10:59:87:d8:6c:cf:8e:58:0f:76:40:ef:b4:3e:c1:81:9f:99:
         86:d3:b3:dc:b6:37:ac:ac:17:0c:a7:a9:27:8d:d0:c6:a2:90:
         76:1f:71:ee:08:6c:0e:68:8e:2b:42:53:67:48:b9:81:e2:aa:
         11:e7:aa:03:e2:5c:cc:cf:e8:8d:67:f2:1b:10:73:7c:32:51:
         d8:d2:d6:28:61:af:f6:23:9b:b2:4f:c4:49:7e:5c:e0:84:b0:
         23:e7:57:46:37:3d:ea:45:8c:bd:e3:c8:08:95:f4:77:90:39:
         0a:72:98:d1:9c:55:d8:ad:58:ca:72:3e:85:c4:c2:07:9d:d5:
         5b:50:99:8f:dd:9f:0a:31:0b:8c:91:7b:c3:24:d8:61:3b:12:
         58:1d:3b:ea:a4:aa:22:da:0c:67:e4:78:57:73:8e:62:2f:83:
         b5:6e:a7:b8:82:c0:cf:bd:d2:af:a0:8a:42:f1:1b:ab:24:5f:
         70:1b:cf:b4:6e:cb:36:23:68:a3:c2:e3:06:82:80:21:37:2e:
         7a:21:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:27 2025 by rpki-client