Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139382e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139382e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          Zok5+g5NefGfe2zFpC6P7njKt6S76Omjz3D+5K4+9RQ=
Subject key identifier:   BD:C0:6B:B8:3A:EF:9E:2C:06:FD:AF:B9:B1:35:10:CC:4A:B2:82:28
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       43FE628EBA3C1F3C1A338354AE10D44755C8CC20
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139382e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:59 +0000
ROA not before:           Mon 04 May 2026 16:35:59 +0000
ROA not after:            Mon 03 May 2027 16:40:59 +0000
asID:                     273261
IP address blocks:        148.224.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fe:62:8e:ba:3c:1f:3c:1a:33:83:54:ae:10:d4:47:55:c8:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:59 2026 GMT
            Not After : May  3 16:40:59 2027 GMT
        Subject: CN=BDC06BB83AEF9E2C06FDAFB9B13510CC4AB28228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:a0:29:a3:d8:e5:c4:76:91:72:3c:c8:8b:
                    3d:78:4e:69:4a:cf:09:23:94:61:7b:de:43:0b:01:
                    a0:41:ed:ad:41:2c:69:84:49:bb:ec:d4:7a:ea:01:
                    7b:0d:f7:a6:bb:65:ac:57:82:a7:a6:3e:f1:9a:63:
                    98:f8:4f:b2:93:8c:33:0e:99:ac:14:23:c2:06:ff:
                    97:5e:46:43:22:bf:3d:00:72:ac:bc:d1:2b:6b:d0:
                    de:7f:81:d2:ae:c9:5a:b9:3e:27:88:30:90:62:92:
                    0a:89:a8:a1:d3:9f:8d:9f:6d:85:49:74:c4:68:a0:
                    28:06:a6:35:fd:07:86:3a:17:c4:86:32:bf:e2:f2:
                    03:05:98:dd:38:ab:7b:dd:4d:b7:07:14:39:74:ec:
                    72:24:36:fb:06:f5:74:2d:6b:8e:ad:0b:67:5e:92:
                    59:a7:13:64:46:97:02:d2:5d:4b:1c:d2:2a:16:ae:
                    d8:95:19:ca:0f:b0:81:c2:4b:7b:a4:96:d2:c5:9d:
                    d8:33:d1:29:95:f9:b4:e4:1a:c5:15:9b:78:8b:62:
                    94:f3:71:68:34:34:5b:42:48:23:d9:b5:41:9d:18:
                    9b:f3:9d:f2:48:d4:f2:98:62:24:f8:bf:5c:45:56:
                    25:ce:6e:ea:ae:e1:73:ee:26:96:21:34:18:2f:fc:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C0:6B:B8:3A:EF:9E:2C:06:FD:AF:B9:B1:35:10:CC:4A:B2:82:28
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139382e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:83:53:8a:11:89:de:9d:9c:ae:04:c9:02:0e:46:77:8b:
         7d:ee:ce:67:98:0d:95:f2:2c:62:6f:14:4d:b1:0b:3d:31:6f:
         2b:38:3c:1c:ee:b1:1d:b7:b8:24:cc:55:42:c6:77:00:b5:8a:
         2c:a4:c2:24:20:3f:b9:23:44:0d:23:e1:0a:7d:7d:72:b8:24:
         d1:dc:6f:e8:9e:ee:6e:77:f8:db:94:eb:d8:79:79:d3:b2:2b:
         0f:f4:4d:a1:00:7f:58:18:40:d3:22:2b:69:b8:6d:a5:a8:63:
         18:b2:d7:a0:f1:ce:be:3c:60:c5:64:f9:3d:78:f6:16:1d:59:
         27:c8:6b:95:93:7d:14:9e:c4:f2:7b:d5:0f:25:d6:20:25:6f:
         9f:a4:dc:b2:80:4d:bc:8e:4e:de:b1:86:aa:05:b4:89:88:c5:
         fb:bb:f7:b7:ca:74:1d:21:82:21:33:ef:0d:33:f4:68:9d:e1:
         41:a7:b4:55:95:25:1c:09:57:63:5a:7a:34:28:9b:31:ea:83:
         28:b1:59:34:ed:70:a7:13:97:8e:0a:6c:05:a1:ee:bd:da:51:
         a6:c7:49:cf:9b:ad:e2:05:20:47:2a:61:8e:51:25:ea:b9:68:
         b8:ad:0d:ea:6d:da:67:f3:99:cc:9f:0d:a4:32:b9:a4:5f:b9:
         41:70:2e:c7
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQ/5ijro8HzwaM4NUrhDUR1XIzCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNjA1MDQxNjM1NTlaFw0yNzA1MDMxNjQwNTlaMDMxMTAvBgNV
BAMTKEJEQzA2QkI4M0FFRjlFMkMwNkZEQUZCOUIxMzUxMENDNEFCMjgyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcKApo9jlxHaRcjzIiz14TmlK
zwkjlGF73kMLAaBB7a1BLGmESbvs1HrqAXsN96a7ZaxXgqemPvGaY5j4T7KTjDMO
mawUI8IG/5deRkMivz0Acqy80Str0N5/gdKuyVq5PieIMJBikgqJqKHTn42fbYVJ
dMRooCgGpjX9B4Y6F8SGMr/i8gMFmN04q3vdTbcHFDl07HIkNvsG9XQta46tC2de
klmnE2RGlwLSXUsc0ioWrtiVGcoPsIHCS3ukltLFndgz0SmV+bTkGsUVm3iLYpTz
cWg0NFtCSCPZtUGdGJvznfJI1PKYYiT4v1xFViXObuqu4XPuJpYhNBgv/AHHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUvcBruDrvniwG/a+5sTUQzEqygigwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMTM5Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4MYwDQYJKoZIhvcNAQELBQADggEBAJTBg1OKEYnenZyuBMkCDkZ3i33uzmeYDZXy
LGJvFE2xCz0xbys4PBzusR23uCTMVULGdwC1iiykwiQgP7kjRA0j4Qp9fXK4JNHc
b+ie7m53+NuU69h5edOyKw/0TaEAf1gYQNMiK2m4baWoYxiy16Dxzr48YMVk+T14
9hYdWSfIa5WTfRSexPJ71Q8l1iAlb5+k3LKATbyOTt6xhqoFtImIxfu797fKdB0h
giEz7w0z9Gid4UGntFWVJRwJV2NaejQomzHqgyixWTTtcKcTl44KbAWh7r3aUabH
Sc+breIFIEcqYY5RJeq5aLitDept2mfzmcyfDaQyuaRfuUFwLsc=
-----END CERTIFICATE-----
Generated at Wed May 13 18:15:37 2026 by rpki-client