Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          ++ap+rDxCndjMxsgMlRpyHrcmLkDuexUI8WyH3/TlZ0=
Subject key identifier:   21:52:BF:7F:03:0B:7D:EA:F5:EE:EE:45:FD:8D:A4:D4:2B:64:3A:02
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       24892D205EF562A99393CC8456ADB3D3061DAE6C
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:41:04 +0000
ROA not before:           Mon 04 May 2026 16:36:04 +0000
ROA not after:            Mon 03 May 2027 16:41:04 +0000
asID:                     273261
IP address blocks:        148.224.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:89:2d:20:5e:f5:62:a9:93:93:cc:84:56:ad:b3:d3:06:1d:ae:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:36:04 2026 GMT
            Not After : May  3 16:41:04 2027 GMT
        Subject: CN=2152BF7F030B7DEAF5EEEE45FD8DA4D42B643A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:83:bb:ca:03:76:b2:63:7c:fb:75:d0:f2:
                    58:5d:d5:6a:56:57:3b:74:b3:9e:4d:65:4d:7f:ef:
                    1c:fe:5f:51:ff:f9:d7:ef:0b:6c:17:3b:65:43:2c:
                    c2:1d:cd:05:ad:9a:e4:45:8c:64:15:1e:5d:00:00:
                    c0:05:83:fb:b4:3f:45:9b:e0:c4:8e:1c:19:32:3a:
                    02:8d:21:44:cf:52:81:e4:de:93:97:10:8b:fd:5b:
                    e8:96:fd:f8:07:bb:21:7b:62:31:63:4f:f1:b3:c7:
                    a5:f6:ce:88:57:06:5f:db:c1:6e:01:4b:bc:5c:c5:
                    f8:ad:ba:e1:50:52:fa:2c:5b:81:75:b7:2b:7a:b0:
                    fc:d9:ea:8a:3a:58:8f:41:1e:19:29:a0:10:db:ad:
                    b3:b7:d1:52:15:b0:28:53:f7:91:da:eb:49:e9:c5:
                    e6:ad:73:c5:d5:89:7a:57:e7:63:42:83:fa:94:77:
                    45:37:cc:fe:88:98:ca:e8:66:e9:db:5b:75:27:45:
                    d5:ad:ef:ab:bd:1f:ef:4d:df:c5:fd:34:d2:c3:b7:
                    03:b6:f4:34:7e:25:af:2d:65:d5:8c:ed:d1:eb:54:
                    d4:d3:cb:fc:94:3c:a5:e3:3c:f3:e9:5e:1a:6a:97:
                    ed:c3:1b:32:c9:d7:8a:a8:47:65:75:49:05:b0:d0:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:52:BF:7F:03:0B:7D:EA:F5:EE:EE:45:FD:8D:A4:D4:2B:64:3A:02
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:06:7b:c7:19:02:7c:b0:a1:ad:b8:78:5b:96:58:e1:05:
         09:59:a4:1b:4c:ad:e1:37:fb:2d:f6:c1:3b:7a:f6:16:71:2e:
         35:bb:7f:63:74:f0:12:0b:7d:55:00:ed:97:1d:b8:75:fd:80:
         87:46:3f:d7:96:47:9a:fc:b3:fb:3d:ee:8f:24:0f:3c:a6:bf:
         40:dc:5e:59:8b:6b:ce:2f:b4:96:44:64:92:0d:cd:8d:91:5c:
         61:40:2b:6c:4c:cb:10:9d:f6:34:27:31:7d:ac:34:67:3e:23:
         76:6d:c8:a7:21:04:19:89:34:93:ed:48:33:45:93:fd:53:5b:
         80:78:0f:98:8d:d3:13:ec:c0:d1:a4:ed:54:db:5e:b4:c0:f9:
         bb:3d:2f:be:24:e3:4c:58:9d:fd:f5:c1:e6:ce:fe:8a:ef:8c:
         66:4f:6b:d2:67:ee:69:56:9a:2b:d9:91:42:04:4f:59:35:85:
         dd:06:68:b3:a7:79:05:ec:91:50:28:c6:04:18:34:fe:95:ed:
         cd:52:b6:53:4b:d4:60:d0:ef:30:85:a9:60:66:d7:d9:b5:b7:
         4b:56:ba:fe:53:c6:5f:9b:cf:ed:1e:b7:8c:e2:e1:bf:99:a0:
         e9:75:4e:3d:0d:d4:77:b1:34:aa:80:36:0c:e6:87:f2:50:a9:
         69:a4:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:46:58 2026 by rpki-client