Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233392e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3233392e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          I0e9ZhrY0CX2W2WHBWwMtz8LlSwoYL9hYYw5+lKpKqM=
Subject key identifier:   A6:5B:BB:C9:CC:9A:6F:A6:1B:72:D8:0D:EC:AE:B5:08:D2:D1:62:72
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       308C57B386EEE90FD3EAF4561317787FFEE12222
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233392e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:41:07 +0000
ROA not before:           Mon 04 May 2026 16:36:07 +0000
ROA not after:            Mon 03 May 2027 16:41:07 +0000
asID:                     273261
IP address blocks:        148.224.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8c:57:b3:86:ee:e9:0f:d3:ea:f4:56:13:17:78:7f:fe:e1:22:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:36:07 2026 GMT
            Not After : May  3 16:41:07 2027 GMT
        Subject: CN=A65BBBC9CC9A6FA61B72D80DECAEB508D2D16272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:05:fc:fd:73:75:b0:bc:d8:9d:25:a2:d0:45:
                    f7:a2:cc:07:7f:1f:94:e9:8b:a9:cc:9e:a3:7f:97:
                    aa:7f:9e:53:35:18:e6:83:d6:3b:10:0e:08:3e:46:
                    83:b0:5f:fd:90:25:93:46:4d:97:7b:d7:5e:c9:c1:
                    08:83:f1:c4:cb:b6:d8:3b:8e:29:08:6e:b2:d8:e1:
                    3b:ae:90:3e:8e:23:91:36:44:36:6b:28:13:d4:5f:
                    cf:be:2b:f8:45:50:a5:02:35:1a:ee:97:c5:23:d8:
                    13:50:4c:da:d6:40:5e:45:2c:c6:03:da:30:e5:ce:
                    ba:18:b0:28:1a:43:63:f7:69:d0:df:ee:a1:ec:21:
                    d4:ee:94:b6:29:43:dd:93:1a:4d:90:f3:4e:3a:ee:
                    86:f8:94:e2:b5:d3:cb:75:76:82:36:58:6f:76:fd:
                    74:b6:dc:89:47:9c:52:e9:b1:aa:ca:a5:15:39:2e:
                    62:b5:27:47:d0:f0:ba:93:8f:97:52:30:2d:9a:80:
                    23:2e:03:60:bc:34:45:5d:eb:b8:52:99:53:78:a7:
                    4e:94:83:fa:a0:93:e0:cf:ae:89:c8:9e:6e:3a:cf:
                    ef:92:18:c7:5e:7b:14:69:3e:e5:bd:67:3b:71:2a:
                    15:20:e4:86:94:92:ce:61:18:8f:a8:a2:8f:56:c6:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5B:BB:C9:CC:9A:6F:A6:1B:72:D8:0D:EC:AE:B5:08:D2:D1:62:72
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3233392e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:26:7c:10:d3:ca:82:56:36:f0:14:59:cc:ac:8e:9a:13:
         5c:d6:9c:08:4e:ec:15:d8:da:11:4a:4a:b6:58:a5:15:24:4e:
         0f:ee:78:d2:2e:37:45:08:a9:b2:c1:4c:4f:11:ff:b0:97:5d:
         60:50:fe:7c:0d:d5:d0:fd:74:9b:30:3a:d1:99:8a:94:f8:db:
         9e:03:49:e7:f3:ae:9a:12:e4:3b:8b:92:5d:93:4d:86:28:ae:
         71:1b:b6:fd:8b:1a:fc:5d:79:92:15:73:53:f5:4d:13:d8:55:
         89:6c:9d:97:44:cc:55:f4:f5:9f:10:41:b9:b7:88:f4:f1:cb:
         b5:72:41:cb:e3:4c:f8:0b:22:73:af:92:49:9a:c6:7c:1f:a6:
         87:ba:8a:87:e8:08:b9:84:df:c2:55:f2:4e:11:12:b1:45:99:
         3d:ba:02:bd:4b:61:6d:71:3a:58:35:b9:7c:68:f7:0c:66:eb:
         5b:01:be:08:3a:39:a1:19:66:61:b2:4a:4f:59:d5:05:46:df:
         6f:8a:66:ca:96:70:13:a7:bc:5b:d6:76:b8:8c:74:9c:35:a6:
         8f:59:db:6d:15:ba:38:c7:5f:34:92:73:49:b1:1b:1c:24:82:
         5f:be:5f:7b:2d:33:a9:d9:70:6a:4d:03:e0:b3:c4:57:8c:bb:
         fb:91:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:14:56 2026 by rpki-client