Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32342d3234203d3e203634313630.roa
File:                     3134382e3232342e32342e302f32342d3234203d3e203634313630.roa (raw, json)
Hash identifier:          7C3HcC55OulfTVh2x+wiQwfSV65avIupRP/Azb299Mc=
Subject key identifier:   D9:A4:30:80:89:14:37:D8:58:E2:8A:DB:6B:99:AC:4A:18:CE:D0:42
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       675CC933F51C659C3DA3B6C3F289699491A6F32D
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32342d3234203d3e203634313630.roa
Signing time:             Fri 14 Aug 2026 09:25:28 +0000
ROA not before:           Fri 14 Aug 2026 09:20:28 +0000
ROA not after:            Fri 13 Aug 2027 09:25:28 +0000
asID:                     64160
IP address blocks:        148.224.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 31 Aug 2026 08:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5c:c9:33:f5:1c:65:9c:3d:a3:b6:c3:f2:89:69:94:91:a6:f3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Aug 14 09:20:28 2026 GMT
            Not After : Aug 13 09:25:28 2027 GMT
        Subject: CN=D9A43080891437D858E28ADB6B99AC4A18CED042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:38:64:2a:cb:93:5a:eb:38:c2:ce:f5:1a:
                    7d:2b:c8:04:07:85:af:28:96:2f:ad:3c:a7:c4:6b:
                    51:5d:25:f4:e8:bf:73:a1:d1:21:25:41:b6:76:43:
                    b3:27:54:2f:d0:9b:99:a1:a2:78:0a:15:59:ae:36:
                    7d:c5:c4:5e:46:6b:0f:8a:f8:f8:ca:bb:f2:e2:f8:
                    52:9f:54:48:65:10:7d:82:91:7f:3a:c2:1c:a0:cc:
                    eb:73:8a:70:0e:ec:09:75:fc:cb:20:63:2f:8b:a9:
                    a7:ac:b8:76:e0:54:5a:06:e9:1a:30:71:bb:37:33:
                    af:4b:d4:ec:d9:a2:a9:36:11:2a:a6:c1:28:d6:1b:
                    a6:cc:cc:dd:d3:2b:12:62:72:3c:f8:2b:8e:fa:23:
                    47:fc:a3:31:20:62:7f:71:bd:f4:59:1b:dd:74:61:
                    2f:bc:b2:81:d5:15:f7:96:cb:d3:8c:28:c6:55:85:
                    52:32:d6:8f:f5:b5:d0:77:42:c5:29:b6:40:b9:3c:
                    76:90:de:57:bf:f5:a1:7d:62:23:c3:12:d0:6b:0e:
                    b0:e8:9a:0f:a9:92:27:48:6f:0c:bf:89:7e:ef:78:
                    c3:ee:06:56:23:94:1b:47:d0:f9:dc:eb:66:fd:6c:
                    34:df:25:7b:ed:a8:63:06:ff:30:68:2c:fc:dd:15:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A4:30:80:89:14:37:D8:58:E2:8A:DB:6B:99:AC:4A:18:CE:D0:42
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32342d3234203d3e203634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:06:d6:1f:47:22:22:2f:09:c4:59:0e:68:39:25:4f:b5:ad:
         dc:f0:89:cc:ad:9f:94:4f:41:b9:bd:2a:56:b8:3b:da:54:ee:
         db:fc:9a:b3:7f:dc:53:39:1c:82:42:f2:f0:95:9e:4f:29:53:
         8f:86:2a:5f:1b:81:99:5b:24:c7:db:c1:39:8c:0b:ce:c9:e6:
         4c:10:16:6b:22:a9:66:a3:fe:e5:a4:12:5f:f8:c2:ad:f3:99:
         48:a1:74:36:f3:1d:15:92:15:c9:3f:67:b1:7e:35:b3:5d:97:
         f7:84:47:b0:ff:43:bf:20:64:3e:96:06:e1:e5:12:d0:3d:75:
         27:10:1d:3f:89:df:56:9c:5c:83:92:27:67:ea:7f:cc:ff:2d:
         18:f1:ea:35:ef:d3:42:1d:fd:f8:95:cc:d6:0f:6b:b7:d8:39:
         e1:c0:0d:49:ce:c4:14:a0:f7:a3:27:ab:cd:5e:d4:83:fd:8a:
         44:3c:9c:c7:48:ae:0b:14:95:d5:67:e6:bc:ab:be:d2:d6:ef:
         66:e8:8e:77:39:4b:53:65:4d:44:3f:57:f5:c8:80:90:64:c8:
         58:b0:ef:14:f9:04:64:be:51:27:af:37:92:39:a0:8a:dc:d5:
         c7:52:bf:7d:e2:64:fd:f9:31:71:bc:fd:fa:59:66:b6:c1:1d:
         cb:08:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:58 2026 by rpki-client