Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230322e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3230322e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          o5BKjiWjU+zN/cygp2KnjjYt5BxpSNDubjltaBCIDag=
Subject key identifier:   D7:26:6B:29:E2:A6:24:2C:58:4C:86:C9:45:F2:C3:E3:E4:BD:BE:5B
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       0D8D40912A86FB89EA3D561140E98223A7009A23
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230322e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:58 +0000
ROA not before:           Mon 04 May 2026 16:35:58 +0000
ROA not after:            Mon 03 May 2027 16:40:58 +0000
asID:                     273261
IP address blocks:        148.224.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8d:40:91:2a:86:fb:89:ea:3d:56:11:40:e9:82:23:a7:00:9a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:58 2026 GMT
            Not After : May  3 16:40:58 2027 GMT
        Subject: CN=D7266B29E2A6242C584C86C945F2C3E3E4BDBE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:e7:df:4f:62:8a:ef:a0:4d:9c:87:64:15:
                    e9:d2:68:81:86:0c:a7:46:d9:70:6e:ec:70:97:a6:
                    dd:32:a8:7a:33:56:2d:75:00:22:7a:75:3f:2f:53:
                    81:f6:97:60:fb:62:3a:59:d8:c4:eb:fe:6c:6e:de:
                    a2:cb:ec:a7:b5:67:e6:68:d2:f3:61:72:85:af:05:
                    15:c9:47:5c:c2:19:71:f2:c1:3f:6c:aa:4a:ad:7a:
                    61:dc:f7:79:62:a5:6c:60:b6:e2:26:ce:80:70:a0:
                    15:9f:56:0a:3a:33:4e:03:2a:01:f3:02:a3:81:e6:
                    48:5d:cc:cf:3e:c9:11:00:d1:10:8c:16:01:1a:fa:
                    13:a3:10:7c:a8:e7:54:9d:35:c3:67:fd:27:95:7a:
                    87:ab:21:52:ec:23:8f:9b:56:dd:91:93:2b:5c:9f:
                    4e:fb:a9:d1:75:a4:f6:9c:8a:cb:64:1d:3a:72:b3:
                    a1:05:a7:b5:c8:e3:c1:c8:4e:49:87:99:7e:9c:ae:
                    66:9a:5e:ef:13:a8:30:d1:a2:69:7b:74:74:b3:69:
                    0e:d3:96:1d:c9:59:a8:3d:6a:aa:cb:7d:8a:cb:50:
                    02:e8:3f:a0:2d:ce:d8:16:31:63:df:7e:c3:a3:37:
                    49:31:67:45:5f:a0:55:ca:21:34:8f:3f:2e:b0:f4:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:6B:29:E2:A6:24:2C:58:4C:86:C9:45:F2:C3:E3:E4:BD:BE:5B
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230322e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:87:db:de:e6:5e:6e:b3:ce:d0:ec:33:57:de:a9:c1:89:
         68:0b:79:46:a0:11:ef:fa:77:81:58:ab:11:76:f0:34:a4:91:
         79:43:12:06:6e:9a:49:4d:7d:15:46:0f:57:1e:f5:ec:97:aa:
         23:22:3f:88:8c:3e:fb:13:ac:8e:40:9e:d5:5b:de:6b:f4:fb:
         04:76:40:8a:1a:25:5d:54:35:e8:fb:9e:76:1d:3d:ce:25:d0:
         6c:4a:66:a9:28:8a:40:3f:e8:8a:7e:c9:0b:da:94:8c:e9:5f:
         17:c7:b6:a2:60:35:c5:f7:78:e7:f9:d1:77:8a:a5:2b:47:75:
         c0:c2:d6:1d:93:5c:6f:4e:1e:06:9c:c8:62:af:9e:58:42:62:
         46:ad:6d:49:1d:84:04:5b:99:d6:9e:8e:b8:67:7c:e8:db:c1:
         c3:34:2a:04:e5:2f:08:d4:66:87:17:66:d5:07:ba:99:a1:aa:
         f7:95:0f:24:5d:5b:15:4e:ff:da:e3:ae:4e:51:3d:2f:63:7a:
         95:da:4a:6a:21:3b:1d:43:18:34:99:bf:3d:0a:fa:ca:9a:ae:
         fd:87:8b:0d:78:aa:d6:a1:22:96:fd:39:0d:7f:80:13:e4:50:
         f9:6e:1d:88:71:42:06:72:70:55:60:01:e6:35:ae:32:0f:64:
         dc:d5:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:47 2026 by rpki-client