Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3132382e302f31382d3138203d3e20323733323631.roa
File:                     3134382e3232342e3132382e302f31382d3138203d3e20323733323631.roa (raw, json)
Hash identifier:          LFJ0RqL5fyWExeAtfTHzh6qzSFCaZaXajEImogeT3cE=
Subject key identifier:   11:AB:F7:86:57:45:99:CD:29:3A:4F:55:D5:00:FF:99:5F:4F:38:E6
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       256BE38495E864FB2E0789D7A3A6F1628493D1A3
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3132382e302f31382d3138203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:56 +0000
ROA not before:           Mon 04 May 2026 16:35:56 +0000
ROA not after:            Mon 03 May 2027 16:40:56 +0000
asID:                     273261
IP address blocks:        148.224.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6b:e3:84:95:e8:64:fb:2e:07:89:d7:a3:a6:f1:62:84:93:d1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:56 2026 GMT
            Not After : May  3 16:40:56 2027 GMT
        Subject: CN=11ABF786574599CD293A4F55D500FF995F4F38E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:5f:01:28:80:b9:ab:10:6e:85:ed:7e:b8:
                    2f:42:ea:cb:ef:bc:1d:56:ef:50:e3:aa:a5:32:62:
                    38:b1:28:89:6e:0f:d9:f9:3a:73:19:99:1f:aa:c6:
                    27:6b:f8:f2:41:12:4f:ef:28:f0:cf:75:b8:cd:74:
                    13:96:d1:ed:f9:03:21:a0:d0:61:b1:c1:83:fe:92:
                    67:a7:2d:0e:c0:bc:68:f8:d1:b2:fa:76:f5:7d:9e:
                    73:03:ff:15:1c:e5:e7:49:aa:81:cc:68:3d:c9:cf:
                    07:7d:5d:84:6e:76:0c:10:1b:9d:aa:cb:c0:14:6f:
                    5f:d0:e3:fb:9e:cd:40:95:c1:c7:67:6a:1d:79:bf:
                    40:b9:3e:55:e2:fb:93:4b:5b:d4:3e:c5:79:ec:3e:
                    37:26:46:75:73:bd:34:a8:cc:36:15:27:11:54:e1:
                    a1:42:71:ef:a5:0f:d6:4c:16:f2:82:ed:00:55:e2:
                    8e:fc:57:bd:03:d1:f0:3b:28:4f:61:ba:c3:48:7f:
                    54:48:f4:f0:77:c1:62:3a:0e:dd:28:07:44:57:be:
                    2b:35:c1:c5:ab:6f:64:43:62:79:91:b7:c7:c0:f4:
                    98:e5:70:18:46:0c:bd:ab:b5:53:36:e7:24:e1:49:
                    0e:b6:89:f6:bb:f7:a7:63:f6:41:b2:df:07:ed:e0:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AB:F7:86:57:45:99:CD:29:3A:4F:55:D5:00:FF:99:5F:4F:38:E6
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3132382e302f31382d3138203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:0a:75:d5:c9:c1:95:12:ed:e8:b8:d3:0e:44:b7:74:9d:
         1f:eb:d3:be:e8:eb:21:71:bc:25:1b:35:21:cd:9f:33:48:20:
         b3:f6:55:39:09:c8:16:88:5d:78:66:ec:d0:0f:fa:d0:36:19:
         43:d0:43:55:07:31:b8:73:13:fa:89:62:26:de:1f:3a:9f:ea:
         dc:af:b0:73:5d:94:18:88:ac:8d:66:8b:3c:b8:f9:b7:31:19:
         84:86:a7:38:f0:fa:02:8e:5c:62:39:e9:bd:da:c3:5b:b4:49:
         63:1d:a9:c5:c6:0f:e6:fe:0c:95:c7:4f:15:26:9e:c2:fb:34:
         3c:b0:5c:a6:05:2a:f7:a6:d2:37:71:64:02:f4:ad:3f:14:80:
         dc:69:67:58:56:d7:cc:ac:1d:fe:0a:02:66:03:bd:5b:11:8e:
         4f:45:f5:b8:f9:e2:2c:82:ab:98:1c:20:13:e7:2d:0a:c3:bc:
         66:ea:79:38:92:5c:af:3e:6b:b8:75:46:56:52:88:73:67:cd:
         11:b9:78:4e:ff:e9:cf:32:18:8c:18:f9:1f:fb:8f:d5:77:77:
         8b:c5:a9:b9:aa:c1:3b:59:49:3e:93:d2:14:68:5c:06:74:34:
         71:ae:a7:59:c6:32:24:79:a7:55:34:4a:61:a9:42:05:ba:df:
         8b:8e:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:15:02 2026 by rpki-client