Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234372e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3234372e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          Xhof/DHhPFRotOn5LMrN/i8gkRrxmJpECGOXvIcqHr0=
Subject key identifier:   D6:8E:12:DC:93:23:51:02:E0:49:B5:32:98:F5:9B:A0:E8:38:3F:96
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       713A1CA729C53973FF6D6E7CCBB9679C8D892C95
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234372e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:40:59 +0000
ROA not before:           Mon 04 May 2026 16:35:59 +0000
ROA not after:            Mon 03 May 2027 16:40:59 +0000
asID:                     273261
IP address blocks:        148.224.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3a:1c:a7:29:c5:39:73:ff:6d:6e:7c:cb:b9:67:9c:8d:89:2c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:35:59 2026 GMT
            Not After : May  3 16:40:59 2027 GMT
        Subject: CN=D68E12DC93235102E049B53298F59BA0E8383F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:17:b7:1d:44:78:ac:6f:07:47:53:ca:5f:
                    c8:72:a7:9a:1e:2a:2f:49:cc:57:e6:89:7b:4b:47:
                    db:2d:26:80:a9:3c:76:2f:68:0f:91:d6:43:10:d1:
                    fd:ce:39:a5:55:c5:c1:8e:2b:86:32:e8:ac:bf:22:
                    5e:1e:65:cb:1d:85:7a:23:c3:70:61:00:6b:a1:68:
                    ba:e8:93:6c:fc:17:a3:73:3f:1c:a7:85:43:2b:22:
                    33:8e:4b:e5:6f:d1:55:06:20:4b:fe:bd:73:9e:e9:
                    1c:4b:d2:cc:59:fd:54:24:61:d1:86:b7:50:8d:37:
                    21:41:5e:e4:e7:e2:a5:60:f8:55:f5:13:23:bf:5a:
                    d5:f9:f7:e0:6c:a1:69:c2:6b:0b:42:69:4c:c7:0e:
                    11:58:c4:e6:2e:09:a4:6c:be:79:f5:18:66:86:56:
                    40:74:6f:12:21:e0:c8:d3:0f:eb:66:09:4f:34:76:
                    cf:9d:f9:28:d8:45:5f:2d:35:18:ae:31:78:e1:4a:
                    49:7d:8e:2e:eb:64:d3:38:11:33:ac:b7:c6:9d:eb:
                    cc:e5:99:46:71:4f:f9:75:c5:fa:e0:69:e1:46:ac:
                    b6:84:bd:40:92:20:a5:23:cb:86:c3:c5:58:ae:d3:
                    8f:63:98:27:30:89:93:59:f6:5d:1d:d0:cc:d6:c5:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8E:12:DC:93:23:51:02:E0:49:B5:32:98:F5:9B:A0:E8:38:3F:96
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3234372e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:8a:e4:c7:bb:87:ec:8e:59:de:b7:2e:0f:2d:30:d2:b1:
         12:3d:7c:2d:72:95:d2:0a:02:5b:1e:98:fc:ae:90:1d:92:d9:
         8e:eb:36:10:24:eb:2e:8c:59:0f:18:9d:47:9c:fe:ce:2d:33:
         9c:e0:25:a2:32:c9:26:b9:96:87:e0:57:0e:ce:0e:e7:9d:34:
         c9:d7:6f:0e:0b:0e:5e:6d:00:ec:5b:63:d9:d4:5b:84:0f:1e:
         df:9a:47:9f:ec:22:68:0e:fc:1e:ce:4c:24:f7:e2:df:b7:ff:
         c5:e2:ba:58:97:18:5a:0e:7a:6d:6d:d8:b2:a2:ef:57:51:b9:
         a1:de:a6:3c:c3:9a:84:7f:a1:61:39:cc:97:d0:7c:61:09:4d:
         ed:54:e1:12:72:ac:b7:1a:06:cc:f8:88:86:54:be:02:ad:46:
         98:c5:ec:f4:b5:22:ec:91:a0:0d:32:ec:b0:1c:82:5c:41:68:
         a5:89:97:72:40:5f:76:a9:a2:05:af:ce:8a:e1:0d:f3:09:ad:
         91:87:d5:7b:32:6b:71:1f:92:67:71:92:00:5d:f2:5e:27:21:
         0a:76:a3:d4:6e:64:5a:e0:09:86:ea:6d:e8:ec:5b:69:79:75:
         f7:23:45:49:49:fe:0c:69:cb:46:68:d4:7d:8f:94:09:d9:40:
         b1:4a:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:15:22 2026 by rpki-client