Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231382e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3231382e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          G2LHBRG0WKLbyfwnZcgCROZkutd4YnLhvhnLLOMeaEw=
Subject key identifier:   10:4E:8F:64:7A:E6:F8:68:C9:91:36:44:1A:B0:6E:B7:92:3C:79:39
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       333DE9A17A86721379097F26B6BFD5AB7952D3A9
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231382e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:41:07 +0000
ROA not before:           Mon 04 May 2026 16:36:07 +0000
ROA not after:            Mon 03 May 2027 16:41:07 +0000
asID:                     273261
IP address blocks:        148.224.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3d:e9:a1:7a:86:72:13:79:09:7f:26:b6:bf:d5:ab:79:52:d3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:36:07 2026 GMT
            Not After : May  3 16:41:07 2027 GMT
        Subject: CN=104E8F647AE6F868C99136441AB06EB7923C7939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:34:57:eb:bd:58:86:92:f7:1d:13:cb:7e:
                    28:b1:bf:4c:cb:9f:f3:e1:56:2c:9d:63:58:d0:c9:
                    a7:59:e2:e4:30:0a:e0:dc:58:7b:de:4e:87:e6:2f:
                    97:9f:09:53:04:8b:5c:a3:71:f9:a3:f2:8c:74:14:
                    30:fd:d1:5d:87:64:08:96:93:97:29:f7:79:9a:ec:
                    59:25:e1:4a:40:aa:97:10:50:3b:13:8d:d8:3f:c8:
                    a5:01:ea:51:00:09:19:8e:ab:e0:d1:8d:2f:8b:05:
                    6f:b1:bc:77:80:32:9d:27:bd:a5:0a:3c:d3:16:93:
                    7b:60:11:db:01:9d:3b:e7:ec:f8:3f:04:e4:b2:44:
                    9c:1e:cb:36:65:50:c6:02:22:db:05:f5:fd:63:41:
                    34:d6:68:b2:b5:78:5d:cf:57:33:5c:07:8c:a0:7f:
                    dd:47:1d:2b:bc:ab:f8:eb:97:d5:df:c7:0a:93:a5:
                    0a:d5:45:26:04:de:71:86:eb:19:de:dc:86:36:01:
                    b4:ba:e7:21:22:17:19:d5:43:40:4e:54:37:d2:aa:
                    1d:75:ca:1b:c1:57:19:66:f6:48:ad:45:39:a5:7b:
                    93:f1:6d:9e:f1:52:e8:c0:de:60:1a:67:6a:b2:f8:
                    93:c9:2b:04:da:de:a6:1a:f9:14:8d:32:0e:32:b5:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4E:8F:64:7A:E6:F8:68:C9:91:36:44:1A:B0:6E:B7:92:3C:79:39
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3231382e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:a9:72:3b:d9:4b:24:ce:d4:8c:32:4b:09:33:e7:23:ef:
         6e:f6:f2:2a:53:a8:01:75:62:52:ab:28:81:da:8d:5b:b7:ef:
         c1:e8:d2:b2:3c:97:8e:c3:62:59:75:f8:cc:df:14:41:6f:6a:
         f8:35:ee:c3:5d:54:e3:39:32:bd:af:25:33:a0:fd:42:76:2e:
         85:73:2e:02:ca:32:bc:30:10:23:10:02:1f:e2:ae:3d:50:cf:
         87:d1:df:76:f6:1d:ef:d9:ff:c7:60:a4:97:0e:27:c0:85:9c:
         a2:6e:b7:39:ea:90:9e:c2:19:0c:cf:ea:86:68:e0:2b:cf:c0:
         81:47:fd:bb:20:69:d4:16:b6:55:bc:ff:48:09:1e:5a:c5:74:
         fb:fb:4e:01:86:47:3e:7c:dd:3f:45:91:95:5c:c4:89:2a:19:
         e4:0a:1a:df:d3:67:1d:76:56:59:5a:74:de:19:81:39:17:83:
         ff:cc:23:ce:64:4f:24:e8:f4:71:9f:ac:a4:5d:74:34:b5:f0:
         00:e2:4b:0f:f6:f2:d2:27:fb:59:df:38:84:87:6c:46:d3:92:
         fb:73:cd:f9:5e:cd:fe:aa:11:81:4b:54:30:22:75:06:ff:63:
         1d:97:cc:1c:c6:3d:8f:8d:50:02:10:85:f4:ee:1c:73:f2:e0:
         4b:b4:a3:c4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMz3poXqGchN5CX8mtr/Vq3lS06kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNjA1MDQxNjM2MDdaFw0yNzA1MDMxNjQxMDdaMDMxMTAvBgNV
BAMTKDEwNEU4RjY0N0FFNkY4NjhDOTkxMzY0NDFBQjA2RUI3OTIzQzc5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCC1DRX671YhpL3HRPLfiixv0zL
n/PhViydY1jQyadZ4uQwCuDcWHveTofmL5efCVMEi1yjcfmj8ox0FDD90V2HZAiW
k5cp93ma7Fkl4UpAqpcQUDsTjdg/yKUB6lEACRmOq+DRjS+LBW+xvHeAMp0nvaUK
PNMWk3tgEdsBnTvn7Pg/BOSyRJweyzZlUMYCItsF9f1jQTTWaLK1eF3PVzNcB4yg
f91HHSu8q/jrl9XfxwqTpQrVRSYE3nGG6xne3IY2AbS65yEiFxnVQ0BOVDfSqh11
yhvBVxlm9kitRTmle5PxbZ7xUujA3mAaZ2qy+JPJKwTa3qYa+RSNMg4ytVN7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUEE6PZHrm+GjJkTZEGrBut5I8eTkwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjMxMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4NowDQYJKoZIhvcNAQELBQADggEBADP8qXI72UskztSMMksJM+cj72728ipTqAF1
YlKrKIHajVu378Ho0rI8l47DYll1+MzfFEFvavg17sNdVOM5Mr2vJTOg/UJ2LoVz
LgLKMrwwECMQAh/irj1Qz4fR33b2He/Z/8dgpJcOJ8CFnKJutznqkJ7CGQzP6oZo
4CvPwIFH/bsgadQWtlW8/0gJHlrFdPv7TgGGRz583T9FkZVcxIkqGeQKGt/TZx12
VlladN4ZgTkXg//MI85kTyTo9HGfrKRddDS18ADiSw/28tIn+1nfOISHbEbTkvtz
zflezf6qEYFLVDAidQb/Yx2XzBzGPY+NUAIQhfTuHHPy4Eu0o8Q=
-----END CERTIFICATE-----
Generated at Wed May 13 18:52:05 2026 by rpki-client