Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          uaT8fIZm0rtUdkoYiehmH6OJN67czAbJh5UhAePR9CY=
Subject key identifier:   38:32:12:20:60:1E:18:3E:14:EB:73:A9:20:54:D1:43:ED:E1:DB:23
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       2AAD6127D57FDC95FA43BA72E88DA89776C20A17
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:56 +0000
ROA not before:           Mon 04 May 2026 16:35:56 +0000
ROA not after:            Mon 03 May 2027 16:40:56 +0000
asID:                     273261
IP address blocks:        148.224.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ad:61:27:d5:7f:dc:95:fa:43:ba:72:e8:8d:a8:97:76:c2:0a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:56 2026 GMT
            Not After : May  3 16:40:56 2027 GMT
        Subject: CN=38321220601E183E14EB73A92054D143EDE1DB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5c:a6:77:00:c7:e6:f4:9a:d4:50:80:d7:fd:
                    c8:e9:2d:cf:6c:7b:5a:1a:50:25:f7:87:0d:21:7d:
                    41:72:5b:c2:97:94:61:29:90:77:6d:20:73:5c:d3:
                    30:0c:9b:85:b9:82:4c:31:9e:51:9c:af:2b:4d:d2:
                    4d:33:3f:c7:98:79:12:67:f1:dc:4b:65:e9:76:ce:
                    c1:73:78:3a:9c:2d:a0:cc:08:38:d0:fc:cc:8a:0a:
                    f2:2a:c3:a3:9f:f2:d7:61:8f:8f:18:24:70:62:e6:
                    7c:82:6d:c6:93:a2:58:28:72:83:0a:58:98:e1:1c:
                    68:34:85:36:f3:1b:cd:da:55:c7:08:d4:34:49:3e:
                    31:03:ff:fb:6e:17:43:96:04:a0:8d:68:3a:74:71:
                    ff:e2:37:de:17:42:d6:07:05:98:b8:49:d7:5c:d2:
                    d3:ec:1a:0b:c3:8a:e9:30:09:69:24:37:24:6f:aa:
                    74:7d:c4:37:0d:b2:fd:97:5e:81:04:67:3f:ab:06:
                    81:99:f9:14:47:4b:16:b9:e6:b6:7c:54:a5:5f:e4:
                    a5:33:09:a2:c5:8c:ed:26:cb:14:6c:3b:18:26:9e:
                    9e:1b:44:0a:ee:1a:68:d1:6d:12:57:cc:fe:f3:d5:
                    01:81:97:9f:e0:6b:6f:ab:97:60:24:02:e1:88:d2:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:12:20:60:1E:18:3E:14:EB:73:A9:20:54:D1:43:ED:E1:DB:23
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3230332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:27:72:06:eb:aa:25:2c:e3:1d:5a:f6:a6:d8:82:c4:4b:33:
         37:c9:67:b1:e9:be:35:d1:1f:24:ce:f6:65:47:dc:fe:bc:7c:
         b0:e5:62:11:74:31:eb:0a:e6:b0:4c:05:e8:18:5c:61:56:4e:
         a5:7c:fa:4e:18:84:c1:f7:1a:94:44:dc:c6:90:ba:6a:f2:1b:
         fe:d7:bf:5d:5b:47:a8:2b:74:56:9f:89:e1:9d:12:17:df:83:
         a0:c6:70:57:db:f6:a1:fa:a9:db:cd:3b:10:4d:3a:f2:2a:fc:
         28:f4:e9:cf:c8:4a:93:fc:f7:5f:19:71:eb:ba:6c:8c:76:a9:
         ec:3f:b2:d4:bb:50:40:89:d9:34:2d:bf:61:00:1e:8e:ca:28:
         88:91:e0:08:d5:34:70:9e:3b:20:00:71:de:a0:a4:ec:f5:63:
         a5:32:c8:c0:56:d9:ba:e9:de:3a:30:16:e1:da:29:9c:78:dc:
         76:a4:84:d5:87:30:65:0c:7a:63:19:9f:12:e7:6a:66:fa:94:
         c9:fb:c2:52:75:11:02:59:a7:9d:b8:b9:b6:b2:92:f6:3d:08:
         2f:6b:21:b8:fa:8e:ca:b9:37:98:aa:3f:20:b5:29:a2:06:5f:
         35:e4:41:14:19:3e:80:df:e9:67:88:17:06:91:d8:10:ab:ab:
         25:93:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:13 2026 by rpki-client