Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234362e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3234362e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          puVjnUnzTmpgt80FOgC7fTR7NFZEb/5L5PckowzIkHU=
Subject key identifier:   FB:31:F6:FB:1A:F0:32:5C:95:9D:F2:D2:03:A6:52:EA:B8:6B:7A:F4
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       79CFE73D154A3394C80B86F7AEDF71B96B67CDD9
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234362e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:08 +0000
ROA not before:           Mon 02 Jun 2025 15:55:08 +0000
ROA not after:            Mon 01 Jun 2026 16:00:08 +0000
asID:                     273261
IP address blocks:        148.224.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cf:e7:3d:15:4a:33:94:c8:0b:86:f7:ae:df:71:b9:6b:67:cd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:08 2025 GMT
            Not After : Jun  1 16:00:08 2026 GMT
        Subject: CN=FB31F6FB1AF0325C959DF2D203A652EAB86B7AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:2e:a6:5a:9c:72:e3:04:f9:db:ec:e1:e1:
                    55:32:14:5d:17:9c:99:0b:9a:86:18:e7:48:67:63:
                    3a:ed:bb:c9:d0:e7:91:b1:af:86:0a:00:cf:1a:07:
                    62:cb:87:d3:32:63:cb:29:9c:78:b4:89:15:0f:c6:
                    81:b8:61:fe:33:be:17:50:4b:5c:e6:fc:29:2d:21:
                    09:98:8d:9e:c9:62:3f:a7:ce:c0:c4:ae:df:d2:3d:
                    e1:ed:71:40:9c:e2:4e:14:c1:d1:fd:52:73:bd:d6:
                    da:f5:5f:01:ab:af:b6:da:31:a1:8f:35:fb:39:e0:
                    42:d5:d5:f5:84:e0:0a:a7:fe:02:a2:2f:8b:de:76:
                    60:56:3a:a5:b4:61:ce:c3:87:c1:59:e6:e2:f8:d3:
                    09:d9:62:36:e0:7a:06:00:15:3b:3b:3b:6a:fd:e1:
                    92:8d:f8:dd:c0:37:d8:93:53:27:90:c2:e2:c1:93:
                    a0:95:95:8c:9f:ad:64:24:38:a6:c6:4f:81:f7:13:
                    50:77:c5:d5:74:4c:1b:a3:50:a7:a9:b6:c4:31:6b:
                    e4:f4:6a:3b:c6:1b:61:06:a2:e4:66:9d:d6:3b:23:
                    47:af:76:50:22:26:35:49:a7:94:af:59:9a:86:88:
                    e6:7d:96:0c:a8:f7:32:4c:c1:ce:85:8c:82:b3:c1:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:F6:FB:1A:F0:32:5C:95:9D:F2:D2:03:A6:52:EA:B8:6B:7A:F4
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234362e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:de:fe:dd:66:51:38:29:da:7d:7c:6c:e4:cb:47:02:27:8f:
         fb:49:43:65:94:ad:2c:72:d6:08:f6:8d:67:12:a6:c3:3b:c9:
         40:f8:54:6e:d4:de:48:56:a5:4e:03:2c:a4:82:0a:2b:80:27:
         d5:ab:e2:c3:a0:5f:53:11:a3:f9:ba:2c:47:ee:7c:6a:af:21:
         b4:5b:30:5f:94:3d:14:8b:02:c3:99:fb:bc:0c:d3:f8:dd:fc:
         ff:c5:5c:2b:31:7e:c9:82:84:2c:f2:b9:4b:f7:69:0f:ff:34:
         17:72:c5:69:bc:90:a9:8f:35:bb:a2:4e:0d:7f:b1:cd:8f:6c:
         e0:08:9a:5a:0b:f1:f0:76:95:01:1f:29:b5:fc:57:d9:65:13:
         3e:1f:0a:03:c0:29:68:60:b0:26:c5:6b:8e:8e:d7:77:d5:6f:
         91:be:c5:5c:22:70:52:0a:69:8f:32:37:24:1e:1c:2b:07:36:
         3f:8b:d8:94:78:47:b1:63:f6:c5:1d:a0:62:4d:15:da:d7:9e:
         16:95:c3:12:d9:1c:49:3b:ea:f8:ff:cf:2e:d8:51:71:ef:4e:
         51:fe:b6:47:e7:d0:64:83:86:1a:79:e6:e1:26:71:d3:74:78:
         ea:52:44:ae:3f:97:e6:0f:53:ca:54:77:5d:a5:a6:6f:c2:48:
         da:29:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:27 2025 by rpki-client