Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139392e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139392e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          h2q9j5LvsWtL/7AMLVPXd/YVjrMObfJkPV0+TobAZVg=
Subject key identifier:   55:6B:1D:7E:D0:EC:4D:B8:80:88:FC:18:B7:7E:76:46:16:DB:02:9E
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       06CA52EEB37623F03B2C32B5CAB94A4B14929C6F
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139392e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:58 +0000
ROA not before:           Mon 04 May 2026 16:35:58 +0000
ROA not after:            Mon 03 May 2027 16:40:58 +0000
asID:                     273261
IP address blocks:        148.224.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:52:ee:b3:76:23:f0:3b:2c:32:b5:ca:b9:4a:4b:14:92:9c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:58 2026 GMT
            Not After : May  3 16:40:58 2027 GMT
        Subject: CN=556B1D7ED0EC4DB88088FC18B77E764616DB029E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:90:a2:05:fb:92:25:89:09:60:19:b3:3f:
                    5d:ea:14:d3:02:95:35:e7:78:a3:16:2b:9c:1d:ca:
                    45:13:6a:bd:3c:06:2c:bc:fd:79:49:9d:ba:0a:ba:
                    6a:ed:db:7b:39:86:46:b1:6a:77:06:70:3d:de:2f:
                    61:80:d6:89:77:3c:d3:4a:bf:4c:21:7c:aa:cb:89:
                    3f:a3:8a:45:c1:d5:a3:c2:48:ec:9e:cb:d2:fa:f1:
                    a4:06:ad:02:0b:cc:92:32:cb:ab:0f:26:74:40:3d:
                    f6:f9:d3:19:64:2e:4a:92:58:2d:81:bc:e0:e6:c3:
                    41:9d:57:ed:e4:79:d6:f4:4f:87:7b:b8:7d:e2:ac:
                    c5:eb:db:92:be:11:63:3d:67:c7:15:e0:09:65:5a:
                    21:2a:10:40:c3:0e:8f:78:17:f6:59:a8:2e:a0:0a:
                    56:e2:7d:03:a5:b2:79:00:54:80:bb:42:b1:3c:8a:
                    2d:c8:af:0b:a6:63:cb:93:ee:32:5a:24:ea:18:d2:
                    18:00:87:47:78:56:1d:77:af:a6:0d:fd:78:5d:9f:
                    44:bd:6e:1d:9d:03:8c:6b:e5:07:05:5e:be:df:3b:
                    38:f5:6e:f5:86:f9:78:b6:a4:7d:c1:c4:1d:f8:fd:
                    b7:eb:97:13:23:cb:bf:68:b7:39:cb:ab:6a:14:ef:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6B:1D:7E:D0:EC:4D:B8:80:88:FC:18:B7:7E:76:46:16:DB:02:9E
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139392e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:08:33:30:5f:c9:cc:e3:d2:10:37:d1:df:34:59:8a:a5:19:
         17:a6:1a:6f:30:5c:fe:25:6c:b3:fc:5b:cb:86:81:6b:30:66:
         98:e0:44:24:64:eb:b7:48:9d:0c:fb:17:68:cf:88:5d:80:92:
         95:05:4b:92:c8:5b:c1:7a:5b:bf:a9:c1:73:bc:95:00:6b:f4:
         41:3d:b3:8e:5e:e9:0e:23:7f:4e:66:2b:19:d5:2e:45:b5:35:
         1e:74:7b:f8:48:1a:73:ab:dc:85:51:54:21:27:19:dc:82:5c:
         6c:25:e8:40:98:52:cb:99:36:75:2b:3c:b3:f9:4f:f3:c3:57:
         9f:18:ac:4f:30:0f:83:c7:89:37:0c:70:3f:79:d2:8b:30:ac:
         06:ba:2e:c2:04:de:48:7f:f6:43:75:47:4a:cc:33:9f:a9:e5:
         fb:cd:6e:ff:88:ef:94:35:31:c0:9c:11:1a:ff:5e:4f:cd:40:
         49:41:a5:96:5e:1e:5c:5e:c7:1f:ca:05:ec:9d:6d:cd:3c:f5:
         d4:d3:74:98:58:4e:92:2e:68:31:5c:85:1b:59:17:c9:ed:a9:
         6e:be:49:9f:fd:ff:d0:dc:88:db:24:bc:89:2b:60:92:84:b9:
         0d:15:80:c7:1c:bb:30:e4:f6:f9:bf:aa:9b:15:af:64:a0:a0:
         f5:3b:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:15:31 2026 by rpki-client