Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          gTCAFsZpdB7G5O6X4UcTkoOZtwG373njZyY84DJT0CI=
Subject key identifier:   C9:CE:DF:65:CB:A6:F7:7F:32:FC:BD:9D:EA:C2:4E:2A:03:12:4F:6D
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       11B61624640C98E043E1E49D13F77D40C0210C80
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:11 +0000
ROA not before:           Mon 02 Jun 2025 15:55:11 +0000
ROA not after:            Mon 01 Jun 2026 16:00:11 +0000
asID:                     273261
IP address blocks:        148.224.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b6:16:24:64:0c:98:e0:43:e1:e4:9d:13:f7:7d:40:c0:21:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:11 2025 GMT
            Not After : Jun  1 16:00:11 2026 GMT
        Subject: CN=C9CEDF65CBA6F77F32FCBD9DEAC24E2A03124F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:ce:8d:57:6c:8e:12:40:13:ce:c6:54:d0:
                    a9:02:ec:f0:e5:fe:f1:50:af:6f:71:c8:50:a6:d2:
                    77:99:95:e1:b4:3a:9e:c2:6c:9e:8f:c1:94:d4:59:
                    f2:39:50:6c:ef:bb:42:ed:1e:ec:43:ce:54:61:ba:
                    fb:d7:ca:4e:5f:3e:f2:6a:d5:61:8b:6f:d0:6a:5c:
                    2a:12:ad:f4:cb:9d:79:f3:c5:54:4b:b3:9d:82:67:
                    c2:b7:e3:91:bd:e7:55:50:a7:ee:66:ce:b3:bd:29:
                    57:63:46:6e:42:d1:bc:87:4b:bd:00:fd:17:9c:62:
                    d0:a3:c4:4f:b3:8d:36:4f:6c:f2:18:1e:55:c2:38:
                    a7:aa:69:2b:7d:64:4b:d6:f8:f1:b0:ea:79:0a:ce:
                    a2:7a:cc:7c:06:30:cd:ee:be:ae:54:c1:80:43:f1:
                    52:79:69:15:f2:14:6b:d4:95:4c:b2:e5:51:d7:2f:
                    3e:a9:12:af:ab:a9:a5:82:c8:44:0f:1d:76:00:41:
                    85:a4:ab:34:bd:8d:1c:48:d9:eb:38:6b:73:84:fd:
                    f1:76:fc:8e:a8:13:9d:54:0f:e1:3f:ba:3a:17:21:
                    a1:14:af:02:e6:23:40:f3:69:09:f4:db:06:6a:3b:
                    33:8d:a7:9e:c0:77:fb:3a:5e:e1:fc:d6:34:42:4d:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CE:DF:65:CB:A6:F7:7F:32:FC:BD:9D:EA:C2:4E:2A:03:12:4F:6D
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233332e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:4a:a7:f2:d0:7c:b0:9e:81:20:3a:d8:9f:1b:d8:4e:9d:
         b6:d5:6d:5e:b6:ce:3a:30:3c:ec:74:60:e2:a1:22:77:c7:ef:
         2f:40:06:12:30:79:67:92:fb:e4:92:c6:85:ca:56:df:56:ca:
         bd:99:5f:cc:84:c8:6b:f4:69:7f:bf:e4:2e:89:b8:a8:91:75:
         c6:16:f9:a8:6c:ab:20:f1:68:b0:f5:44:81:80:77:56:35:e0:
         aa:b6:e7:f6:d9:0c:83:fa:d1:09:ac:52:23:98:36:6e:6a:69:
         cb:d2:d2:39:02:12:e9:1f:40:02:3a:36:0d:f8:4b:e0:e7:b4:
         34:8f:5b:b7:e9:a9:f8:5a:88:5e:47:45:1b:ea:21:b7:d8:5d:
         f3:05:b0:02:d3:19:c6:e9:4e:39:fb:d8:b7:5d:52:f8:6d:2a:
         84:26:9f:9a:d1:74:7d:a4:21:7e:6a:67:db:03:09:a5:23:aa:
         08:ca:44:c0:e3:6c:1f:70:ce:c5:54:6e:83:cb:5a:63:59:07:
         57:97:0f:b7:2a:51:aa:d4:62:39:04:84:b9:6e:e0:80:0e:2d:
         2e:29:7e:29:0c:a9:66:78:74:9d:4f:0e:98:63:d5:23:17:1f:
         47:b8:cc:15:cb:02:da:ea:a9:36:b1:e5:cb:26:4a:b4:3e:09:
         f3:85:b6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:04:53 2025 by rpki-client