Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230312e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3230312e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          KJLhar4vYuOi4b89pGNLsYfrSgPRA9BBNguHssUHyCY=
Subject key identifier:   1C:DA:26:AA:77:09:01:BB:4A:77:7F:BF:28:BA:97:F5:31:EF:5B:0D
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       6DCB4343AFC5687149E237BB8DAE4768EF38168B
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230312e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:41:02 +0000
ROA not before:           Mon 04 May 2026 16:36:02 +0000
ROA not after:            Mon 03 May 2027 16:41:02 +0000
asID:                     273261
IP address blocks:        148.224.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:43:43:af:c5:68:71:49:e2:37:bb:8d:ae:47:68:ef:38:16:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:36:02 2026 GMT
            Not After : May  3 16:41:02 2027 GMT
        Subject: CN=1CDA26AA770901BB4A777FBF28BA97F531EF5B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:9e:5b:ef:90:ff:7c:cc:81:40:02:15:3a:
                    8d:10:26:17:cd:4b:71:dd:1f:b4:45:2b:df:b2:51:
                    63:73:0d:6a:cf:07:9b:cd:47:b3:5f:37:d7:26:2a:
                    14:84:59:7a:6f:d5:61:e6:67:0f:6e:da:bb:fd:07:
                    58:db:df:fd:45:f2:ae:98:8a:6b:bb:44:d7:10:ae:
                    10:98:77:8f:87:7d:19:9d:d1:2e:2b:48:94:b1:2b:
                    dc:c4:3b:9c:1e:b7:45:e7:f0:62:50:59:af:66:a9:
                    31:7d:9e:da:a1:c6:5d:c8:47:37:2d:1a:41:d2:0b:
                    99:56:93:06:6f:56:30:84:5c:0e:69:c6:11:33:45:
                    71:ae:3b:f9:63:67:55:89:99:61:c3:ab:09:59:0c:
                    3e:57:22:8e:c6:4c:1c:cb:52:1a:4b:9c:00:d2:6b:
                    28:d5:0e:92:90:f6:23:b8:11:a1:4b:d0:59:4b:43:
                    3f:11:46:fb:35:89:6d:d3:d7:38:29:69:60:0c:21:
                    c9:c8:f2:53:22:78:46:ad:f9:e7:c1:62:4f:8d:73:
                    2d:49:63:51:d4:c1:34:33:12:90:eb:64:3e:2f:ae:
                    4d:c7:3c:10:4b:ca:d5:22:8d:05:60:e2:60:2d:95:
                    b3:7b:aa:60:ca:93:41:d8:c3:65:83:1c:8c:15:0f:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:26:AA:77:09:01:BB:4A:77:7F:BF:28:BA:97:F5:31:EF:5B:0D
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230312e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a2:af:06:82:94:0b:78:22:9f:18:b8:8a:b9:73:fe:18:89:
         5f:10:4f:73:3d:67:3a:54:3e:ce:d3:9a:b2:a0:c9:31:31:04:
         c7:e2:82:4a:1c:b5:b5:a7:33:23:4e:e3:66:81:8c:73:6c:4d:
         18:16:89:23:e2:ca:0a:12:8b:18:28:da:fc:93:4b:7e:3e:8b:
         18:30:0a:0e:86:55:49:d0:79:10:8d:43:c9:79:cd:12:e3:4f:
         3d:61:fd:31:11:a9:12:b1:ec:55:3d:fd:e9:48:f7:b7:82:ab:
         a5:2d:50:54:4b:29:52:b9:21:48:8b:b5:5e:de:7d:d4:93:f6:
         6b:e0:75:96:53:d0:72:63:50:b6:b0:e9:1e:5a:2e:92:a5:ed:
         2a:03:ae:c0:12:b2:06:2a:4e:7b:db:b5:c5:2e:8d:9a:ed:3e:
         8f:85:39:04:68:14:af:b7:94:c1:fb:d9:d7:6e:70:63:62:74:
         85:6a:d1:b7:d3:9c:65:d4:56:85:dd:41:36:90:cb:24:dd:ef:
         9e:12:66:ee:4c:a7:28:fe:88:f0:7a:d5:40:12:0d:98:f5:e1:
         cf:ca:c4:2a:90:5c:02:97:e3:9a:de:31:ca:31:5c:a5:6e:46:
         13:c3:7e:27:f5:f5:5a:4c:32:ea:82:e4:ad:d9:c6:2b:bf:90:
         55:c4:8c:00
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUbctDQ6/FaHFJ4je7ja5HaO84FoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNjA1MDQxNjM2MDJaFw0yNzA1MDMxNjQxMDJaMDMxMTAvBgNV
BAMTKDFDREEyNkFBNzcwOTAxQkI0QTc3N0ZCRjI4QkE5N0Y1MzFFRjVCMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbp5b75D/fMyBQAIVOo0QJhfN
S3HdH7RFK9+yUWNzDWrPB5vNR7NfN9cmKhSEWXpv1WHmZw9u2rv9B1jb3/1F8q6Y
imu7RNcQrhCYd4+HfRmd0S4rSJSxK9zEO5wet0Xn8GJQWa9mqTF9ntqhxl3IRzct
GkHSC5lWkwZvVjCEXA5pxhEzRXGuO/ljZ1WJmWHDqwlZDD5XIo7GTBzLUhpLnADS
ayjVDpKQ9iO4EaFL0FlLQz8RRvs1iW3T1zgpaWAMIcnI8lMieEat+efBYk+Ncy1J
Y1HUwTQzEpDrZD4vrk3HPBBLytUijQVg4mAtlbN7qmDKk0HYw2WDHIwVD3U/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUHNomqncJAbtKd3+/KLqX9THvWw0wHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjMwMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4MkwDQYJKoZIhvcNAQELBQADggEBALCirwaClAt4Ip8YuIq5c/4YiV8QT3M9ZzpU
Ps7TmrKgyTExBMfigkoctbWnMyNO42aBjHNsTRgWiSPiygoSixgo2vyTS34+ixgw
Cg6GVUnQeRCNQ8l5zRLjTz1h/TERqRKx7FU9/elI97eCq6UtUFRLKVK5IUiLtV7e
fdST9mvgdZZT0HJjULaw6R5aLpKl7SoDrsASsgYqTnvbtcUujZrtPo+FOQRoFK+3
lMH72dducGNidIVq0bfTnGXUVoXdQTaQyyTd754SZu5Mpyj+iPB61UASDZj14c/K
xCqQXAKX45reMcoxXKVuRhPDfif19VpMMuqC5K3Zxiu/kFXEjAA=
-----END CERTIFICATE-----
Generated at Wed May 13 18:52:19 2026 by rpki-client