Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231302e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3231302e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          7b+mQg1w5OI+XSG6WhlCNeIh3NH98txeD5JTS5ECmyo=
Subject key identifier:   E9:64:8A:A0:FA:7F:07:22:A7:79:41:34:9F:C4:CE:E0:EE:F1:48:E7
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       4E4D6D1184BFEF031BD79EBF518BC307942B0FF1
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231302e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:41:04 +0000
ROA not before:           Mon 04 May 2026 16:36:04 +0000
ROA not after:            Mon 03 May 2027 16:41:04 +0000
asID:                     273261
IP address blocks:        148.224.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4d:6d:11:84:bf:ef:03:1b:d7:9e:bf:51:8b:c3:07:94:2b:0f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:36:04 2026 GMT
            Not After : May  3 16:41:04 2027 GMT
        Subject: CN=E9648AA0FA7F0722A77941349FC4CEE0EEF148E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:f2:f9:6b:4d:9b:2d:ff:71:e3:27:8d:88:
                    96:36:d9:66:ec:e3:ff:07:6e:ca:4c:4b:53:99:7d:
                    39:0c:43:67:0c:42:42:f5:12:e9:05:6d:be:65:63:
                    47:bd:db:7d:d3:64:27:a3:a2:e1:e7:4b:f3:d2:f7:
                    24:c6:31:a9:74:c7:d7:9c:e3:af:42:99:41:ab:3b:
                    c0:b3:d6:c9:f8:a6:7a:23:b2:f5:13:84:f2:da:fd:
                    d2:02:5b:59:d7:3f:10:1e:bf:0a:e2:65:93:45:55:
                    31:02:21:64:a2:a1:20:e8:4a:43:00:a5:e9:f7:67:
                    04:fd:71:fa:f4:2f:6a:87:15:aa:2f:b8:00:01:aa:
                    90:e0:14:5b:c8:33:5c:68:12:48:30:00:97:e9:ac:
                    03:96:25:10:b5:2e:20:d2:6d:f9:bd:b5:53:ad:b9:
                    97:e1:43:df:4f:35:92:d6:77:56:73:3e:23:c2:ba:
                    0b:fc:14:62:0b:7b:79:ad:e8:ed:90:d7:f5:3d:f5:
                    22:cd:4b:e9:a9:d3:b5:81:98:02:4d:2f:f6:46:a8:
                    15:e9:17:b4:2a:b1:09:b1:1b:7a:e1:e6:01:3e:00:
                    d8:6b:60:94:51:ea:ae:d7:70:73:7b:2c:31:bc:02:
                    7a:ec:c5:a8:56:e5:3a:d1:8a:59:b9:10:f3:7f:87:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:8A:A0:FA:7F:07:22:A7:79:41:34:9F:C4:CE:E0:EE:F1:48:E7
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231302e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:fe:7f:54:ba:e6:45:ef:13:9d:07:cb:53:75:f0:c8:64:
         3b:c6:2c:5f:9e:5d:ef:2b:90:4a:2e:52:6c:4b:a0:55:16:2c:
         d2:12:fe:ab:14:14:e0:63:79:43:82:71:07:86:32:d2:32:dc:
         37:4c:10:99:10:6a:1f:2a:91:d0:c9:38:9e:24:68:62:00:17:
         7c:4a:87:c5:0b:f6:42:fa:25:a5:a0:d3:96:16:d7:d3:23:6c:
         90:a4:1c:51:d0:5c:df:0f:41:e6:70:db:fb:15:5c:eb:a1:7f:
         e9:00:0b:7e:96:68:e5:a8:14:d7:3b:ec:e0:06:58:53:24:5c:
         96:d1:58:21:6c:47:25:3b:13:04:79:2a:56:a7:de:ff:f7:bb:
         7e:26:ce:e3:d0:11:a5:a6:9c:70:a5:fb:5c:f8:fc:7f:d2:9d:
         84:10:b5:53:9a:14:82:3b:31:77:06:8b:41:1b:cc:50:14:6a:
         11:e0:ae:0a:3e:59:43:6d:9a:d3:6a:80:19:70:45:da:5a:39:
         9d:c5:62:53:51:e0:47:c9:1f:e7:9e:e7:48:4b:d7:8a:1b:84:
         a2:08:41:00:6a:62:e3:41:3e:59:a7:ec:88:c2:93:c3:e4:d7:
         06:1f:5e:3a:b5:7c:a7:25:39:6d:ae:4b:7e:74:8a:29:7c:08:
         12:e4:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:14:58 2026 by rpki-client