Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139362e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139362e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          woIGrB7Ea7lwpaxFd/XafHPVZJlND4H7PceYOOPwKNA=
Subject key identifier:   14:89:2C:B6:9B:16:D1:39:2F:F6:35:A3:74:D1:05:79:40:E4:D1:53
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       06144387DE94D2F496818C7AC610416EDECF1A77
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139362e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:55 +0000
ROA not before:           Mon 04 May 2026 16:35:55 +0000
ROA not after:            Mon 03 May 2027 16:40:55 +0000
asID:                     273261
IP address blocks:        148.224.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:14:43:87:de:94:d2:f4:96:81:8c:7a:c6:10:41:6e:de:cf:1a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:55 2026 GMT
            Not After : May  3 16:40:55 2027 GMT
        Subject: CN=14892CB69B16D1392FF635A374D1057940E4D153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:93:6d:36:9b:5f:9b:80:ce:91:41:9b:50:
                    78:c7:29:51:96:2f:29:06:e0:45:63:0f:6f:f7:3f:
                    a9:c6:4d:ff:74:a8:0f:8b:1b:8d:26:29:42:54:1d:
                    66:9d:67:5d:ab:b2:11:ee:45:cd:1f:c9:67:44:8f:
                    1f:46:81:13:8e:ec:62:ed:3c:c4:da:16:ed:a1:7e:
                    31:4e:f5:53:96:7f:4a:fe:08:7b:8d:99:d5:90:63:
                    f7:ed:ff:c2:70:8e:68:a2:2f:cb:d1:de:65:4a:ac:
                    7d:98:e4:f8:da:86:96:05:78:36:06:08:a8:29:c2:
                    eb:64:1b:28:c0:01:8e:9a:1d:4b:1e:3e:fa:2e:2c:
                    e2:d7:28:9d:12:c9:d6:9f:da:bd:38:56:2c:09:ef:
                    09:9e:09:15:94:ac:a2:98:e6:76:5a:01:63:cd:d0:
                    5d:35:64:49:f5:06:03:a7:03:ae:56:f1:aa:92:d1:
                    c9:1d:ec:5e:7e:86:f2:92:f4:33:1b:5c:84:90:78:
                    d9:24:f0:76:d7:9d:d6:8e:8d:90:9c:4d:8a:7a:57:
                    34:20:32:a9:04:cc:9f:6e:bc:98:7f:6b:ef:39:31:
                    e1:20:31:6a:75:70:49:0c:fa:de:3e:f4:90:21:60:
                    f4:12:88:7a:98:70:35:d0:2a:a4:fc:9c:8a:b9:32:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:89:2C:B6:9B:16:D1:39:2F:F6:35:A3:74:D1:05:79:40:E4:D1:53
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139362e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:70:63:a2:39:5b:3b:43:f4:8b:82:2b:1a:b6:8f:5d:ff:94:
         77:9b:29:7a:a0:83:14:9c:3c:cf:56:62:f8:85:65:0f:02:e7:
         cf:4d:b4:58:a0:97:62:18:26:b7:fa:e1:f7:ab:43:a2:ea:b9:
         58:68:dc:d2:21:92:51:11:31:90:7b:29:f8:5f:d2:85:19:4f:
         a8:ef:35:6d:f1:9c:6b:01:cc:b7:db:f8:94:0c:d4:2c:09:2f:
         b0:d2:8e:5c:42:e8:c5:32:e0:87:6f:68:00:4a:86:4a:cc:fd:
         8e:a4:12:d2:e4:78:7d:37:76:90:ab:ce:8b:09:ad:d5:a4:99:
         2c:77:2c:f2:0a:c5:fe:eb:7a:8e:f7:4e:42:7a:b3:bf:b7:d1:
         31:2e:81:bc:d9:72:79:27:04:d1:87:c8:7c:c2:4c:ee:49:7b:
         c5:73:d2:3d:01:08:5d:56:4f:eb:20:42:67:54:56:2a:61:92:
         6f:e5:90:b1:7d:71:ff:ea:c6:e1:a2:f8:0f:b7:1f:bb:72:d7:
         b3:55:39:a2:37:31:c6:3f:d8:6c:45:b0:9a:64:dd:c7:82:2c:
         c3:00:3b:db:58:f4:48:85:58:76:86:2e:e7:0d:c0:ec:a2:9e:
         94:5d:9d:d5:d0:6b:d2:48:3d:53:e7:f1:3b:99:2f:4a:4a:81:
         5b:4e:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:15:44 2026 by rpki-client