Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3134382e3232342e32392e302f32342d3234203d3e20323734303435.roa
File:                     3134382e3232342e32392e302f32342d3234203d3e20323734303435.roa (raw, json)
Hash identifier:          JsV0un9R5LGN9EhlEdZvVZ/iEufMRnC7CZto8P6fEKU=
Subject key identifier:   6D:08:E8:7A:63:A9:91:23:89:22:D8:F6:F6:74:D8:69:6E:4E:F1:B4
Certificate issuer:       /CN=3C71C9BDEE849C2C8DBF16E801BD88F2351069B6
Certificate serial:       7659AB5757DB324E9AF10614ED94F63D69796FD2
Authority key identifier: 3C:71:C9:BD:EE:84:9C:2C:8D:BF:16:E8:01:BD:88:F2:35:10:69:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3134382e3232342e32392e302f32342d3234203d3e20323734303435.roa
Signing time:             Sat 31 May 2025 00:05:00 +0000
ROA not before:           Sat 31 May 2025 00:00:00 +0000
ROA not after:            Sat 30 May 2026 00:05:00 +0000
asID:                     274045
IP address blocks:        148.224.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:ab:57:57:db:32:4e:9a:f1:06:14:ed:94:f6:3d:69:79:6f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C71C9BDEE849C2C8DBF16E801BD88F2351069B6
        Validity
            Not Before: May 31 00:00:00 2025 GMT
            Not After : May 30 00:05:00 2026 GMT
        Subject: CN=6D08E87A63A991238922D8F6F674D8696E4EF1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:4d:81:bc:b4:d3:8f:73:af:e7:54:65:d6:
                    29:07:94:79:54:a2:34:0e:b0:dd:b7:e6:18:6d:ad:
                    fb:30:bf:95:2c:ef:bc:76:0d:48:d4:5a:30:37:01:
                    36:4f:a8:e4:1e:d3:fc:f8:4a:ad:27:e9:67:68:6d:
                    e3:cb:a3:55:fd:ad:3a:76:ad:65:98:e6:09:a2:87:
                    03:3f:bf:b4:9b:a2:ef:cc:f4:79:eb:4a:d4:cd:99:
                    f3:9d:52:aa:6a:18:bf:71:88:1c:dd:74:d9:6e:8d:
                    1e:d5:b4:5e:bc:2d:21:78:e1:d8:00:d1:56:ee:ec:
                    6e:85:50:e8:bb:4e:df:06:f3:72:0b:e7:ad:17:fe:
                    ad:fb:f5:e1:74:a8:a1:8c:65:da:f0:6b:59:b7:30:
                    2a:68:58:86:cf:79:f2:54:c7:88:c4:1b:69:45:3b:
                    64:a4:32:95:fd:ae:98:0e:c3:fd:06:e0:83:c9:46:
                    72:b1:31:1d:bf:78:d9:dc:b6:1c:19:45:bf:55:1f:
                    4e:ca:45:c0:e7:40:c5:c4:fc:8a:f4:c4:6e:00:bb:
                    e4:1c:ca:6c:33:1d:5e:34:dc:9c:50:26:0d:b1:d1:
                    b9:ac:80:92:ff:e4:45:4a:c0:4f:9e:84:ea:97:cc:
                    98:34:4f:d9:bb:7c:17:79:ef:8d:70:3c:df:9f:49:
                    04:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:E8:7A:63:A9:91:23:89:22:D8:F6:F6:74:D8:69:6E:4E:F1:B4
            X509v3 Authority Key Identifier:
                keyid:3C:71:C9:BD:EE:84:9C:2C:8D:BF:16:E8:01:BD:88:F2:35:10:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3134382e3232342e32392e302f32342d3234203d3e20323734303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:9e:77:1d:62:91:bd:64:09:c8:ec:b9:81:a6:0b:c0:65:
         68:fa:92:1f:e4:9c:98:39:e3:d9:59:f3:33:87:41:af:61:5d:
         48:83:af:ae:6b:d5:81:c6:de:bd:1c:5b:f0:1f:61:ce:d5:b3:
         f2:07:3e:a8:8f:e2:47:eb:6c:5e:b2:f0:52:15:75:b9:35:cc:
         c7:a1:18:45:ab:67:22:93:b0:0f:5c:08:ed:12:e0:2a:dc:82:
         02:f2:57:a0:cf:09:68:7a:bf:23:f6:38:e5:10:d1:0c:1c:b9:
         0c:87:58:c5:ed:f4:55:05:02:18:fc:ff:29:dd:34:db:02:3f:
         59:9a:19:14:61:f1:31:0d:e4:a9:2a:ae:78:fe:9e:f4:da:ad:
         64:db:fb:9c:b7:7c:da:c5:63:a6:a2:ab:10:50:4b:6e:c8:4a:
         5c:16:13:23:29:a8:ec:5c:ca:2a:1e:83:60:5c:94:10:88:47:
         00:15:86:de:e5:02:77:03:d7:9a:1f:4a:39:d4:ce:f1:52:0f:
         ae:bf:d5:c0:38:8f:50:6a:92:66:b5:38:7c:55:20:5f:dc:43:
         0c:4d:d6:55:a4:aa:f4:d4:91:5a:46:74:7b:9f:cb:ca:b9:3f:
         a6:42:ae:e6:c3:49:b6:cf:63:46:92:eb:95:b4:74:3c:fe:3b:
         0f:c3:2d:db
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdlmrV1fbMk6a8QYU7ZT2PWl5b9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3MUM5QkRFRTg0OUMyQzhEQkYxNkU4MDFCRDg4RjIz
NTEwNjlCNjAeFw0yNTA1MzEwMDAwMDBaFw0yNjA1MzAwMDA1MDBaMDMxMTAvBgNV
BAMTKDZEMDhFODdBNjNBOTkxMjM4OTIyRDhGNkY2NzREODY5NkU0RUYxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJyU2BvLTTj3Ov51Rl1ikHlHlU
ojQOsN235hhtrfswv5Us77x2DUjUWjA3ATZPqOQe0/z4Sq0n6WdobePLo1X9rTp2
rWWY5gmihwM/v7Sbou/M9HnrStTNmfOdUqpqGL9xiBzddNlujR7VtF68LSF44dgA
0Vbu7G6FUOi7Tt8G83IL560X/q379eF0qKGMZdrwa1m3MCpoWIbPefJUx4jEG2lF
O2SkMpX9rpgOw/0G4IPJRnKxMR2/eNncthwZRb9VH07KRcDnQMXE/Ir0xG4Au+Qc
ymwzHV403JxQJg2x0bmsgJL/5EVKwE+ehOqXzJg0T9m7fBd5741wPN+fSQSfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbQjoemOpkSOJItj29nTYaW5O8bQwHwYDVR0j
BBgwFoAUPHHJve6EnCyNvxboAb2I8jUQabYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FODYyMjgwRjhCNDIwQkU1RTMzODc2MDEzNjI3OEVEODVB
N0E2MDJENzI2NTE1NkI1ODI1RTQ3Q0E2RDdDRjY1LzAvM0M3MUM5QkRFRTg0OUMy
QzhEQkYxNkU4MDFCRDg4RjIzNTEwNjlCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzcxQzlCREVFODQ5QzJDOERC
RjE2RTgwMUJEODhGMjM1MTA2OUI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTg2MjI4MEY4QjQyMEJFNUUzMzg3NjAxMzYyNzhFRDg1QTdBNjAyRDcy
NjUxNTZCNTgyNUU0N0NBNkQ3Q0Y2NS8wLzMxMzQzODJlMzIzMjM0MmUzMjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzAzNDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlOAd
MA0GCSqGSIb3DQEBCwUAA4IBAQAn2J53HWKRvWQJyOy5gaYLwGVo+pIf5JyYOePZ
WfMzh0GvYV1Ig6+ua9WBxt69HFvwH2HO1bPyBz6oj+JH62xesvBSFXW5NczHoRhF
q2cik7APXAjtEuAq3IIC8legzwloer8j9jjlENEMHLkMh1jF7fRVBQIY/P8p3TTb
Aj9ZmhkUYfExDeSpKq54/p702q1k2/uct3zaxWOmoqsQUEtuyEpcFhMjKajsXMoq
HoNgXJQQiEcAFYbe5QJ3A9eaH0o51M7xUg+uv9XAOI9QapJmtTh8VSBf3EMMTdZV
pKr01JFaRnR7n8vKuT+mQq7mw0m2z2NGkuuVtHQ8/jsPwy3b
-----END CERTIFICATE-----
Generated at Fri Jun 6 07:26:34 2025 by rpki-client