Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233352e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233352e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          leur+/HulHbSRTeClEnPibT2wxn+Y/dlx9Ie/XID0OM=
Subject key identifier:   1C:B8:9D:05:91:09:CD:37:6C:4B:C1:8D:5F:1F:E8:E0:53:7F:E2:37
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       3C49452BEEDB571A4A74CFD57CEB404320FDFA42
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233352e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:53 +0000
ROA not before:           Mon 04 May 2026 16:35:53 +0000
ROA not after:            Mon 03 May 2027 16:40:53 +0000
asID:                     273261
IP address blocks:        148.224.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:49:45:2b:ee:db:57:1a:4a:74:cf:d5:7c:eb:40:43:20:fd:fa:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:53 2026 GMT
            Not After : May  3 16:40:53 2027 GMT
        Subject: CN=1CB89D059109CD376C4BC18D5F1FE8E0537FE237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:58:c5:9b:45:71:eb:80:43:3f:c8:7e:4f:
                    04:9c:dd:42:2b:36:95:58:ad:b6:e5:59:56:d5:95:
                    64:e8:5e:24:cf:84:42:77:a3:6c:fb:be:20:83:43:
                    15:89:2d:8a:b0:03:92:03:15:05:5e:de:ee:6a:ec:
                    e6:85:d2:a0:35:88:1a:6e:84:e9:a0:34:84:50:51:
                    e4:3a:21:d5:ae:d1:2f:46:2d:b3:fa:8e:ba:b1:e4:
                    7d:91:98:be:37:5f:17:9e:96:39:ef:ce:b1:fc:2f:
                    89:1b:be:da:c4:95:fb:49:41:fe:f2:05:3f:f5:bb:
                    7c:7f:05:a8:47:76:6a:05:a4:f5:88:a0:87:d6:af:
                    c3:57:ba:64:67:47:c4:6a:42:77:dc:44:f1:d0:5b:
                    b9:3e:31:4b:5c:15:8f:dc:61:e9:54:2a:bf:a3:3a:
                    75:e2:41:98:e2:f9:5c:1b:ca:06:2f:ea:46:78:5a:
                    14:48:23:db:f0:2a:dc:df:5d:2f:50:1b:36:14:00:
                    a8:bf:d2:6c:6f:74:12:6c:f5:37:d8:49:c5:d0:f9:
                    97:e7:8d:29:59:e1:51:b0:5d:05:3b:53:d8:47:93:
                    e4:f5:a2:bc:65:38:53:a9:cc:e1:1a:70:dc:89:c8:
                    76:ca:a4:a4:b7:64:97:c0:21:39:21:d9:08:ca:3f:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B8:9D:05:91:09:CD:37:6C:4B:C1:8D:5F:1F:E8:E0:53:7F:E2:37
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233352e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d1:56:b3:10:e6:fe:aa:a6:a8:09:0e:72:4c:a7:07:b6:05:
         18:3e:cf:f4:d2:b1:ee:cf:c1:59:a6:04:14:58:a9:39:d9:e7:
         90:7b:a9:eb:ce:9c:89:9e:f3:7b:d4:43:2c:f9:a1:4b:3e:78:
         fc:b4:2e:94:6d:f5:30:01:25:39:62:4c:86:99:ac:3c:6d:68:
         61:78:9b:87:f1:ab:82:2b:a5:ad:4c:59:d5:50:8f:69:1d:16:
         30:93:5c:39:2b:e0:75:6e:1b:09:f2:03:6c:83:34:5b:d1:91:
         4d:ef:1c:99:fc:d6:57:7f:c5:6b:7d:65:21:58:04:1f:ac:b2:
         4b:55:28:69:7f:73:49:13:9f:be:8f:2e:96:dd:7b:42:db:b3:
         6e:20:63:83:78:89:98:0b:e6:e5:19:98:73:e0:10:ca:64:56:
         2b:3c:74:6c:88:76:37:6c:91:76:bb:a3:e5:9b:76:bd:0f:d3:
         33:74:0b:db:00:00:0e:38:e3:8a:c6:07:d4:b9:ff:be:f2:0c:
         8a:9a:bb:aa:e1:72:28:18:8d:da:2b:99:e0:78:99:78:f4:f0:
         56:98:0d:e6:27:d0:bd:bd:82:73:2e:ed:db:e3:02:bb:8f:58:
         d1:c5:60:7e:b5:55:5c:df:33:67:75:6d:0b:e7:98:b6:d1:38:
         4f:24:e1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:46:40 2026 by rpki-client