Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234342e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3234342e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          Pxgq9ptCclUWRIIu0Pw6PP4yTeW9/DEaK+QzdHsR8D4=
Subject key identifier:   5A:8D:B1:AB:84:CB:93:2C:30:58:C8:6E:BC:21:A6:52:58:00:3A:74
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       2CB3184CEBF7DB3370E1146153198A5D5B4A728D
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234342e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:41:05 +0000
ROA not before:           Mon 04 May 2026 16:36:05 +0000
ROA not after:            Mon 03 May 2027 16:41:05 +0000
asID:                     273261
IP address blocks:        148.224.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b3:18:4c:eb:f7:db:33:70:e1:14:61:53:19:8a:5d:5b:4a:72:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:36:05 2026 GMT
            Not After : May  3 16:41:05 2027 GMT
        Subject: CN=5A8DB1AB84CB932C3058C86EBC21A65258003A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:71:9f:d8:84:a7:9d:bc:42:b2:35:ae:70:
                    4e:7d:e2:1e:ff:07:2f:d3:da:d5:92:9b:51:10:76:
                    50:fe:c3:3f:00:bd:d2:b8:a3:fb:c6:38:bc:28:3d:
                    01:b5:f3:d4:6f:9f:e4:16:0e:e9:c2:f9:4c:06:b8:
                    81:af:61:aa:b0:03:8e:fa:0e:22:a4:83:da:44:1d:
                    fd:59:12:07:5f:80:a0:84:93:4f:21:dd:e6:6e:3e:
                    ab:75:a9:00:e1:95:8d:0e:52:b2:4a:ed:83:c8:d7:
                    0e:db:7c:34:03:81:48:2a:7f:fb:b6:83:26:41:ee:
                    33:d7:51:99:37:fe:37:f1:00:35:39:61:84:16:e1:
                    d0:3d:78:4d:b6:16:9c:3d:10:4f:0d:f4:55:6e:e1:
                    43:a7:6a:4a:92:70:92:a0:6d:29:3f:ea:61:0c:48:
                    22:9c:dc:91:7b:76:ff:e2:19:2e:70:db:5b:ec:37:
                    30:49:cf:2c:0f:9e:65:1b:e2:bd:90:bd:f1:40:ab:
                    d6:d1:eb:1e:ff:64:49:cd:00:a5:a3:8c:5a:34:00:
                    2d:a3:23:a5:a5:8c:d1:6b:e0:16:84:ef:5b:05:91:
                    7c:48:ee:97:65:ed:9d:81:a2:6b:dc:bb:db:73:cf:
                    5c:bf:24:2a:93:5a:92:68:c1:b0:ff:dd:ab:2b:ca:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8D:B1:AB:84:CB:93:2C:30:58:C8:6E:BC:21:A6:52:58:00:3A:74
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234342e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:61:85:dd:7a:00:b1:71:21:62:21:fc:fd:3b:dc:42:13:d4:
         f5:80:bd:f8:df:68:cd:9a:88:27:9e:10:44:b4:d6:a1:be:3d:
         d4:e1:d1:2d:ed:ba:c1:78:7b:ca:ac:35:fa:19:e5:1e:c1:4a:
         50:b6:72:f7:cd:66:7f:40:42:44:a8:27:52:b3:df:18:2b:d0:
         c8:78:d0:8e:2d:09:8c:00:b9:7f:5c:09:95:09:5f:d1:b4:45:
         d6:d2:ab:07:72:a8:c8:fb:50:97:aa:14:20:1e:d7:4e:88:29:
         a6:35:7f:6b:2c:30:fa:0c:13:72:20:17:1e:cd:95:28:97:ed:
         83:5e:6b:d6:f2:e8:65:95:68:4d:07:8a:15:27:84:a5:d0:38:
         cd:b8:8d:e6:cd:45:cd:83:e1:87:bd:ba:94:be:34:89:54:c1:
         4f:3e:cc:1d:ca:75:18:46:09:c6:9e:8a:6d:c1:87:12:98:97:
         ad:3b:c9:5c:27:be:3a:54:c5:1f:e9:e5:fc:64:d9:cc:66:4c:
         97:e7:2d:90:0d:48:6b:b0:82:8f:92:88:06:7b:6a:84:4c:80:
         40:da:73:3a:8b:75:84:e8:d4:a5:b6:f5:01:80:02:a1:3b:78:
         0c:ea:3e:46:fc:bb:72:23:46:3a:26:c2:6b:d4:66:19:83:26:
         ce:e2:7d:e9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIULLMYTOv32zNw4RRhUxmKXVtKco0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNjA1MDQxNjM2MDVaFw0yNzA1MDMxNjQxMDVaMDMxMTAvBgNV
BAMTKDVBOERCMUFCODRDQjkzMkMzMDU4Qzg2RUJDMjFBNjUyNTgwMDNBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOj3Gf2ISnnbxCsjWucE594h7/
By/T2tWSm1EQdlD+wz8AvdK4o/vGOLwoPQG189Rvn+QWDunC+UwGuIGvYaqwA476
DiKkg9pEHf1ZEgdfgKCEk08h3eZuPqt1qQDhlY0OUrJK7YPI1w7bfDQDgUgqf/u2
gyZB7jPXUZk3/jfxADU5YYQW4dA9eE22Fpw9EE8N9FVu4UOnakqScJKgbSk/6mEM
SCKc3JF7dv/iGS5w21vsNzBJzywPnmUb4r2QvfFAq9bR6x7/ZEnNAKWjjFo0AC2j
I6WljNFr4BaE71sFkXxI7pdl7Z2Bomvcu9tzz1y/JCqTWpJowbD/3asryr3RAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWo2xq4TLkywwWMhuvCGmUlgAOnQwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzMjM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
4PQwDQYJKoZIhvcNAQELBQADggEBADRhhd16ALFxIWIh/P073EIT1PWAvfjfaM2a
iCeeEES01qG+PdTh0S3tusF4e8qsNfoZ5R7BSlC2cvfNZn9AQkSoJ1Kz3xgr0Mh4
0I4tCYwAuX9cCZUJX9G0RdbSqwdyqMj7UJeqFCAe106IKaY1f2ssMPoME3IgFx7N
lSiX7YNea9by6GWVaE0HihUnhKXQOM24jebNRc2D4Ye9upS+NIlUwU8+zB3KdRhG
Ccaeim3BhxKYl607yVwnvjpUxR/p5fxk2cxmTJfnLZANSGuwgo+SiAZ7aoRMgEDa
czqLdYTo1KW29QGAAqE7eAzqPkb8u3IjRjomwmvUZhmDJs7ifek=
-----END CERTIFICATE-----
Generated at Wed May 13 17:38:34 2026 by rpki-client