Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1847EBCD8CAE7D0F02FF7EE5266B025BE7CC9E435E920FFE98EED4D3994239AE/0/3134382e3232342e34372e302f32342d3234203d3e20323734343133.roa
File:                     3134382e3232342e34372e302f32342d3234203d3e20323734343133.roa (raw, json)
Hash identifier:          ihZYXCWPJfR/rn/1hdxOZ4DuYv4+CjDW8g5p81fSZGQ=
Subject key identifier:   8C:13:45:5D:6F:81:99:F1:18:8D:D6:EB:1B:36:62:B6:EA:03:E2:05
Certificate issuer:       /CN=554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100
Certificate serial:       4994A8569CB52435624BE69AA6CDCD2D5E6FD4BB
Authority key identifier: 55:4A:44:65:A1:9A:7E:E1:DB:E7:5A:1E:3E:78:06:B0:FC:F3:C1:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1847EBCD8CAE7D0F02FF7EE5266B025BE7CC9E435E920FFE98EED4D3994239AE/0/3134382e3232342e34372e302f32342d3234203d3e20323734343133.roa
Signing time:             Wed 13 May 2026 00:15:00 +0000
ROA not before:           Wed 13 May 2026 00:10:00 +0000
ROA not after:            Wed 12 May 2027 00:15:00 +0000
asID:                     274413
IP address blocks:        148.224.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1847EBCD8CAE7D0F02FF7EE5266B025BE7CC9E435E920FFE98EED4D3994239AE/0/554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1847EBCD8CAE7D0F02FF7EE5266B025BE7CC9E435E920FFE98EED4D3994239AE/0/554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:94:a8:56:9c:b5:24:35:62:4b:e6:9a:a6:cd:cd:2d:5e:6f:d4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100
        Validity
            Not Before: May 13 00:10:00 2026 GMT
            Not After : May 12 00:15:00 2027 GMT
        Subject: CN=8C13455D6F8199F1188DD6EB1B3662B6EA03E205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:87:a3:3c:31:21:f1:90:d5:8c:48:b3:e6:
                    40:10:3b:37:55:d1:33:88:2f:6d:4f:b7:7e:21:1c:
                    67:b4:ba:79:ba:25:a9:ab:16:1e:59:1f:b5:4c:84:
                    0b:7c:32:b0:68:d5:fb:f7:5f:e6:81:33:07:81:a9:
                    3c:66:9f:ed:03:b0:2d:c5:f6:05:e3:fb:4f:b1:e0:
                    64:da:a1:02:62:c0:44:fe:e4:7d:45:5e:87:94:72:
                    c4:7e:e5:b5:be:c9:2a:b8:ca:45:05:bf:b4:97:c7:
                    28:79:1c:95:4a:1b:22:17:9e:94:72:1d:c8:1c:1e:
                    bc:f3:d5:ed:92:8a:aa:48:03:39:7c:0e:ec:4a:9f:
                    d8:e1:4c:d4:c3:2f:ea:6d:c6:f6:00:f1:3a:d8:1f:
                    84:48:b8:13:36:26:0c:2d:ff:05:ba:84:0b:a8:ea:
                    82:7b:71:c0:35:71:b4:28:48:57:a1:07:69:e1:13:
                    7f:76:f0:6f:76:a7:84:34:3d:91:d2:49:9a:fc:cb:
                    1f:d6:e6:3a:87:bf:95:e2:d2:40:1c:fa:b4:12:ba:
                    f2:0a:ef:fa:47:27:bb:cd:8a:f0:b0:be:4b:49:80:
                    66:e8:a4:01:e1:21:26:ed:65:59:84:d9:1a:8d:17:
                    6d:f7:50:ca:e9:7d:05:62:86:13:23:b9:04:f4:85:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:13:45:5D:6F:81:99:F1:18:8D:D6:EB:1B:36:62:B6:EA:03:E2:05
            X509v3 Authority Key Identifier:
                keyid:55:4A:44:65:A1:9A:7E:E1:DB:E7:5A:1E:3E:78:06:B0:FC:F3:C1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1847EBCD8CAE7D0F02FF7EE5266B025BE7CC9E435E920FFE98EED4D3994239AE/0/554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/554A4465A19A7EE1DBE75A1E3E7806B0FCF3C100.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1847EBCD8CAE7D0F02FF7EE5266B025BE7CC9E435E920FFE98EED4D3994239AE/0/3134382e3232342e34372e302f32342d3234203d3e20323734343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:01:ee:3a:8b:d5:c2:01:0c:0a:ec:a5:60:b2:4c:bd:5a:
         bf:16:b6:44:0c:49:ef:17:01:08:5d:05:57:8c:8b:9a:d3:d3:
         86:1e:b9:e0:fa:12:19:2a:0d:ef:7d:c1:ea:95:1b:87:dd:ca:
         99:d2:0e:83:c8:cf:91:9a:e8:92:ce:0f:94:28:aa:24:db:01:
         86:cc:c3:ee:c9:b0:8a:53:93:4f:13:5a:6c:b4:94:4c:27:0b:
         8e:d6:d1:a8:21:95:c5:9c:29:cd:85:78:0d:ae:23:96:5d:a2:
         4b:fc:ad:a0:91:25:1d:3c:a4:6c:38:01:5c:3a:40:c9:7e:2f:
         76:e9:c5:ba:bf:5d:01:81:ac:f8:8c:d0:9d:ba:2e:a9:77:86:
         9c:85:c1:ec:42:d1:ce:2c:a2:58:52:cf:94:26:5a:64:9c:5a:
         d0:71:e8:8f:d7:9a:91:c9:b3:9f:7b:11:f9:2c:68:be:35:74:
         4e:ba:f5:a6:ed:b9:b3:f5:a3:c2:11:fd:6f:88:46:fb:e2:fb:
         8b:81:69:33:e4:65:9f:87:8b:5f:8f:3b:b9:02:1d:c8:9e:c8:
         9f:15:50:6b:6b:b2:0c:27:cf:78:57:76:ef:d8:f0:fb:29:d9:
         89:86:ab:c5:b6:2e:03:4c:6f:bd:b1:1c:f3:78:d7:cc:52:9e:
         2a:b4:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:44:22 2026 by rpki-client