Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232312e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3232312e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          gY14tAlpWEGWc88Vi+/DtdCP6Fsqs4/uq9CBpuFRfLo=
Subject key identifier:   8D:5A:7C:F3:68:24:D7:A1:51:E0:66:D2:7A:F6:64:47:68:45:D1:EC
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       20ECD4B4358FD46E9589FD85ECAD1055761C5F9C
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232312e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:51 +0000
ROA not before:           Mon 04 May 2026 16:35:51 +0000
ROA not after:            Mon 03 May 2027 16:40:51 +0000
asID:                     273261
IP address blocks:        148.224.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ec:d4:b4:35:8f:d4:6e:95:89:fd:85:ec:ad:10:55:76:1c:5f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:51 2026 GMT
            Not After : May  3 16:40:51 2027 GMT
        Subject: CN=8D5A7CF36824D7A151E066D27AF664476845D1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:35:91:3d:1d:b9:76:d7:f1:e9:6d:d7:6e:
                    bf:5b:2b:c3:ce:87:d8:0a:ee:78:10:09:cc:7b:7e:
                    96:40:cb:1f:83:73:e9:5f:6b:4d:a6:d6:c6:df:c5:
                    c8:f4:c0:68:7b:5b:43:b7:ce:b6:5c:b6:ce:23:6c:
                    ff:d4:41:da:df:ee:e6:43:6d:98:f4:26:cf:41:bf:
                    20:7b:66:c9:ce:eb:35:9e:be:0a:54:82:88:c8:72:
                    88:33:0e:2e:dc:99:3a:0e:1e:9c:cf:68:7c:af:7e:
                    c8:00:96:68:10:8b:e9:ef:a4:55:8b:f2:a8:a1:19:
                    ec:4f:de:63:ba:ab:e6:c2:e5:c5:ef:75:d7:45:de:
                    6e:8d:f4:79:ff:32:a0:ea:7b:be:1a:f8:bb:a0:8a:
                    ea:f0:92:b8:86:83:59:c9:1a:c7:9e:c8:b5:45:4c:
                    4c:7d:90:6f:21:e0:49:c7:ea:c0:0d:8f:ec:a4:7c:
                    4a:06:e8:f1:9b:d8:ed:df:8d:74:f6:ac:de:19:9a:
                    37:d2:81:cb:c4:60:39:5a:7d:70:f2:0f:59:37:f7:
                    64:b6:3b:32:f6:01:a4:08:d4:41:c5:3b:86:37:7b:
                    2d:ce:0a:95:34:67:d2:5b:41:c5:12:94:b1:99:76:
                    e0:ed:07:cb:6c:d7:e1:d7:36:11:29:57:bf:54:68:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:7C:F3:68:24:D7:A1:51:E0:66:D2:7A:F6:64:47:68:45:D1:EC
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232312e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:f9:80:43:d5:09:7b:ce:85:f5:ce:92:26:e2:56:24:12:
         f9:03:36:33:f2:93:d2:ff:1b:59:42:05:7d:39:dc:23:43:7e:
         b8:10:3f:10:03:a3:58:cd:c0:e4:20:0a:c7:62:60:6b:44:e8:
         b1:8b:35:c5:3d:62:99:54:f2:e9:3b:e4:7b:b3:98:eb:ee:7c:
         ff:71:37:79:20:d9:05:2f:ed:80:e3:45:8d:94:3a:25:e1:68:
         25:ce:c6:f7:66:f8:1a:01:90:8a:cd:34:de:86:b2:b6:01:dc:
         28:6a:c8:02:df:75:64:1f:f3:73:7c:0a:90:79:d7:45:80:7d:
         27:3e:01:08:51:38:62:ef:98:25:9a:e0:47:4a:03:84:86:67:
         af:7a:1f:65:37:6e:2f:cb:9d:d8:41:42:ca:40:c9:8d:b3:80:
         a1:60:41:44:4b:39:fc:4f:8d:b4:a5:1e:7a:c5:33:52:5f:cd:
         85:18:b0:8a:a1:78:08:de:e9:d1:1c:1a:94:21:9c:10:94:33:
         10:a9:d6:40:24:57:1f:af:c4:7b:8e:5b:9b:2a:92:41:af:a4:
         ca:37:2c:6b:aa:bf:73:b2:b5:6d:ca:f6:c8:ae:7c:82:91:0e:
         bf:eb:9b:23:30:26:b4:40:8e:85:e4:35:4b:24:68:e2:56:23:
         ec:09:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:52:07 2026 by rpki-client