Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          wOPDgYccWRm1W7YmKX0t41ydKTKV8VmOF0R5zTAfyQk=
Subject key identifier:   3E:99:D5:B9:D7:38:DD:C7:98:F5:A2:92:E7:1F:C8:70:27:DC:F6:5B
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       1635E8E1F8662B51FAA2DE716888A736DA7A3366
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:58 +0000
ROA not before:           Mon 04 May 2026 16:35:58 +0000
ROA not after:            Mon 03 May 2027 16:40:58 +0000
asID:                     273261
IP address blocks:        148.224.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:35:e8:e1:f8:66:2b:51:fa:a2:de:71:68:88:a7:36:da:7a:33:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:58 2026 GMT
            Not After : May  3 16:40:58 2027 GMT
        Subject: CN=3E99D5B9D738DDC798F5A292E71FC87027DCF65B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:1c:2c:7b:b9:17:00:b5:e7:2b:5f:2b:99:
                    89:27:cc:65:34:a5:1d:a2:b1:a1:b8:f6:c4:11:1a:
                    41:d9:ed:d0:13:c4:59:69:e2:de:6b:96:2d:e2:38:
                    b5:1f:92:f0:7d:04:6d:98:a4:4e:80:be:93:ca:b9:
                    ab:62:23:36:c5:49:ea:d6:7d:45:1b:b3:7d:4d:98:
                    8c:31:d3:57:43:cd:d0:55:0b:37:29:a0:ec:a6:da:
                    06:f1:b5:83:fd:11:21:31:4c:be:44:87:a5:e8:e6:
                    8e:63:af:14:1d:b5:6d:13:df:3a:3c:9d:fc:e4:11:
                    f2:99:7b:d3:7b:2e:64:47:93:26:b5:b1:19:33:6c:
                    c9:74:99:35:e8:5e:e1:5a:4d:30:f4:b1:16:68:ef:
                    74:b6:9d:42:c8:16:50:dc:65:55:15:9c:89:d8:4f:
                    18:dc:6c:8d:26:ed:5d:8d:fe:04:d9:d2:37:e4:da:
                    26:ac:5d:d3:c8:a1:96:03:f9:10:77:ad:d1:97:f4:
                    44:c4:ec:95:ec:36:e4:a2:b6:6a:d1:91:d0:c0:6a:
                    93:67:7a:c2:99:76:d5:40:67:05:24:74:91:c3:e8:
                    2d:c2:79:3a:d2:dc:67:3c:95:0e:6b:79:d3:b9:eb:
                    fc:8c:e8:f9:30:06:80:6a:b7:cb:34:ad:7f:ab:79:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:99:D5:B9:D7:38:DD:C7:98:F5:A2:92:E7:1F:C8:70:27:DC:F6:5B
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:43:c3:04:3c:6b:aa:31:28:c3:15:6f:f1:cb:de:fe:0b:
         55:3c:ab:c1:ed:d2:c2:e1:e6:31:60:c5:6d:7a:ce:af:a8:2a:
         97:14:78:29:75:c2:41:2e:03:41:7b:26:72:b7:c8:df:cb:b2:
         db:30:7e:20:0d:72:66:b4:c7:db:ad:8c:e9:7f:ed:a7:69:50:
         2d:3a:7a:ec:db:5f:f5:2c:d7:5f:a2:d5:d0:35:ba:91:3c:13:
         6d:77:c0:ce:91:00:72:21:7a:b7:b3:d8:a1:2b:3d:07:3a:67:
         2d:6c:42:1f:be:b1:2e:af:f8:60:f3:de:18:39:8e:bb:f0:a2:
         c1:3b:27:ca:a6:11:2f:65:c1:9f:7a:2b:2e:25:36:41:f7:cb:
         f9:33:c3:c8:04:51:2a:04:db:bf:fc:2a:ce:44:2e:fa:a4:a3:
         85:7d:a5:37:89:ae:e7:4f:9a:9e:89:87:de:d7:c4:f7:f4:f6:
         64:6c:ca:0b:66:65:d0:dc:81:f6:59:3a:e6:f8:9e:a6:6e:64:
         fa:c6:eb:bc:2c:aa:55:f0:c7:6e:d9:6e:7b:71:66:11:e6:8f:
         2c:11:5c:63:42:e7:61:4a:bd:99:68:ac:fd:33:7f:d7:fa:75:
         82:07:3b:82:27:7e:a4:65:14:fc:d9:58:cc:bd:14:b0:86:49:
         d8:80:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:52:11 2026 by rpki-client