Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3235342e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3235342e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          iqZnuDHZ5ymfNFMYI4ARaHGb1lrIzKljTaS7GmN6Cko=
Subject key identifier:   64:03:B1:D9:C1:91:CE:82:81:1B:3D:16:A3:A0:AD:C4:AF:95:9F:C7
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       66F9F4BA09B8D9D949638876125D917A4EEA0710
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3235342e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 04 May 2026 16:41:03 +0000
ROA not before:           Mon 04 May 2026 16:36:03 +0000
ROA not after:            Mon 03 May 2027 16:41:03 +0000
asID:                     273261
IP address blocks:        148.224.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f9:f4:ba:09:b8:d9:d9:49:63:88:76:12:5d:91:7a:4e:ea:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  4 16:36:03 2026 GMT
            Not After : May  3 16:41:03 2027 GMT
        Subject: CN=6403B1D9C191CE82811B3D16A3A0ADC4AF959FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:87:91:30:d5:85:c4:96:d4:c6:b8:aa:88:
                    82:b7:3e:6c:fb:3e:6a:47:e5:cd:de:60:f6:94:f8:
                    d4:50:db:73:2d:27:b7:16:0c:a3:2b:2e:7d:e0:c6:
                    6a:88:0c:c6:50:02:ea:01:f3:5f:1f:07:3d:10:72:
                    94:9c:fb:42:80:d9:81:28:72:b4:29:84:6c:1e:98:
                    88:d2:f8:be:06:cc:3f:3a:1b:1b:4d:ee:1f:83:da:
                    25:38:b3:94:9d:11:89:ee:21:04:7e:55:0f:ec:56:
                    f0:71:bf:be:81:84:17:0a:b0:69:47:a1:df:d3:95:
                    e2:3c:a6:e3:74:8f:79:d9:12:ba:18:da:5e:5c:c7:
                    e4:c5:60:9a:dd:f8:ea:11:7e:dd:b9:21:64:65:13:
                    a2:27:74:0d:6c:0a:0e:d9:50:b9:26:ac:3b:56:4a:
                    c5:9f:64:55:fc:76:ea:3a:d9:98:69:dc:6d:78:e7:
                    25:32:16:8b:10:6d:bb:34:cc:d2:ab:63:43:85:cc:
                    34:54:e7:b3:71:a0:3b:f6:4a:5c:27:c5:e0:81:a9:
                    5c:99:01:7b:00:f6:e7:58:2d:e9:e8:30:e1:2d:19:
                    e7:9c:38:e7:fb:fc:df:0c:0d:76:74:99:27:dc:88:
                    de:64:f7:24:1f:71:8f:d0:cf:9d:85:63:5a:67:f6:
                    96:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:03:B1:D9:C1:91:CE:82:81:1B:3D:16:A3:A0:AD:C4:AF:95:9F:C7
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3235342e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:5f:ff:45:78:70:99:75:cb:a9:85:e7:f7:a8:af:4f:94:cf:
         e5:ed:c2:14:55:19:b1:94:ed:f0:3f:2c:63:9d:ef:bd:fb:f1:
         cd:d6:53:76:ab:25:23:e4:7f:41:96:0e:84:2c:8b:4a:b9:38:
         2e:eb:7d:c1:46:ee:5c:a2:9d:1a:10:ac:ab:9e:87:9d:82:df:
         d2:75:a3:81:05:48:0b:55:ef:a0:01:2f:8e:77:1e:ca:06:98:
         f0:f9:0c:76:aa:46:04:57:34:31:32:eb:ca:62:59:98:12:d6:
         53:73:60:6a:22:45:39:86:ab:ce:8f:2d:d5:5e:50:e4:b7:ee:
         c5:e0:d2:da:d4:8f:86:6a:d5:90:dd:ff:bf:93:09:24:ce:0e:
         f8:3c:4b:9e:d3:f6:66:9e:8a:bd:a7:7b:13:a4:88:44:8f:00:
         c2:40:af:df:40:91:b3:c5:46:c2:b5:b3:e2:61:45:d0:2c:40:
         9a:7c:a9:2c:db:a4:9c:84:3b:9b:4b:65:b5:b0:95:65:54:78:
         c1:97:eb:31:e9:6e:14:a3:a9:76:c0:ab:4d:12:3e:79:71:09:
         23:84:61:7f:d6:17:06:93:ea:aa:37:10:52:aa:4f:f3:69:0e:
         10:5a:a0:8a:46:db:fb:36:20:33:9b:b7:15:14:a5:1d:c4:8a:
         1f:6f:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:34 2026 by rpki-client