Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          Pem7cqy/Uv+gCdCxIQOUIOzFbKcHowcOg+OVCfF6cOU=
Subject key identifier:   E5:BB:F6:B3:11:A2:0F:A3:E3:FA:C4:AC:C6:C4:F6:D7:3A:B0:CE:CD
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       014B28F0DC428725FEA9E376CD97C966F2641333
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:56 +0000
ROA not before:           Mon 04 May 2026 16:35:56 +0000
ROA not after:            Mon 03 May 2027 16:40:56 +0000
asID:                     273261
IP address blocks:        148.224.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4b:28:f0:dc:42:87:25:fe:a9:e3:76:cd:97:c9:66:f2:64:13:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:56 2026 GMT
            Not After : May  3 16:40:56 2027 GMT
        Subject: CN=E5BBF6B311A20FA3E3FAC4ACC6C4F6D73AB0CECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:98:df:31:86:eb:56:f4:1f:ef:68:0d:a5:
                    29:7b:e4:3a:fb:9d:56:fb:40:b5:74:ea:0b:7b:99:
                    40:41:e7:c8:35:a8:98:0a:2e:5e:88:f8:36:b1:60:
                    dd:13:7f:8e:93:89:cb:1f:55:0b:9d:ce:05:a0:b7:
                    a8:a5:ba:30:eb:77:df:5f:8a:19:dd:51:7f:3b:b2:
                    38:8a:29:5f:48:30:b0:04:b1:25:2b:6d:fe:9c:d9:
                    5e:c8:8e:d6:d4:e0:5a:70:df:d3:08:c0:36:97:95:
                    ae:26:56:c3:ca:33:85:cc:2a:cc:36:6a:7e:f4:e0:
                    c9:42:47:a9:33:4f:bb:f1:8f:17:36:7f:93:9e:df:
                    85:8f:70:6f:1b:44:f4:da:98:7f:3b:96:85:f4:7e:
                    6e:b4:01:73:02:9d:f6:6c:b8:22:b2:8a:50:c5:7e:
                    72:97:75:53:15:34:47:af:01:76:f1:dd:31:04:ae:
                    0f:dc:36:21:77:a3:b0:c6:2c:61:a9:20:2e:b2:37:
                    fe:79:dd:ad:3d:ad:39:d0:55:39:e2:d3:3f:df:5b:
                    49:03:75:ad:8d:ee:47:a8:2d:fb:c8:c4:0f:6b:55:
                    ec:57:a9:b3:94:93:1a:bf:74:e3:80:39:b4:f9:da:
                    73:5f:08:9a:29:dd:13:34:e7:f4:6c:39:30:ee:33:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:F6:B3:11:A2:0F:A3:E3:FA:C4:AC:C6:C4:F6:D7:3A:B0:CE:CD
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3232332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:28:e4:91:97:1f:2b:a5:8e:81:7b:c5:5b:b9:70:e1:2d:
         3d:e2:ed:75:04:2b:1e:7e:a0:58:86:71:78:1b:b7:c8:85:0a:
         22:f5:de:a3:b4:45:c9:ab:9d:5a:b5:16:01:2f:a2:8e:8e:db:
         5c:bf:4c:ba:ab:7e:03:37:11:e8:2e:e3:b4:2b:b4:b1:14:4e:
         81:ca:7f:d1:9d:53:6c:ab:1f:ce:fa:34:9f:9d:e5:3b:47:c4:
         b0:3b:ba:45:07:a7:4e:6e:ca:17:5b:ec:18:22:32:fd:6c:39:
         9c:8a:3f:2d:17:6c:68:54:cf:5b:19:0f:fe:dc:9b:10:8b:42:
         9f:1f:2f:25:71:3a:79:fa:48:4a:90:30:a4:4b:95:b4:a7:c3:
         fb:68:74:30:39:83:4e:fe:2c:9b:ef:e2:9b:34:a2:07:2e:61:
         65:5a:aa:d2:69:d7:ed:5a:c1:dd:84:21:e9:1a:59:0b:be:b3:
         16:54:d2:a3:68:3f:af:42:70:41:09:81:b7:a5:70:11:61:9c:
         67:33:2a:b0:6f:69:4d:f4:10:8f:d3:da:26:b6:f6:11:f9:27:
         71:e8:93:70:aa:99:50:d4:17:24:9c:88:9a:24:f6:34:20:56:
         e8:36:8e:2e:fa:c8:d6:71:be:51:b4:90:d5:36:8a:a2:b2:a0:
         fd:b3:6a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:46:58 2026 by rpki-client