Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3135322e3233302e302e302f31362d3234203d3e203138383232.roa
File:                     3135322e3233302e302e302f31362d3234203d3e203138383232.roa (raw, json)
Hash identifier:          a2ERSLQ1hxOK9wYiM0URhvw3xHKs2KvRGVTjOaqPPyc=
Subject key identifier:   E2:1F:7A:B1:6F:A2:A1:D8:A3:DE:D7:23:9B:9F:9E:25:21:29:0A:8E
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       5EB2CAA013C93ABC9BD755F3D14453B6379559FC
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3135322e3233302e302e302f31362d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 17:30:00 +0000
ROA not before:           Tue 01 Jul 2025 17:25:00 +0000
ROA not after:            Tue 30 Jun 2026 17:30:00 +0000
asID:                     18822
IP address blocks:        152.230.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b2:ca:a0:13:c9:3a:bc:9b:d7:55:f3:d1:44:53:b6:37:95:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 17:25:00 2025 GMT
            Not After : Jun 30 17:30:00 2026 GMT
        Subject: CN=E21F7AB16FA2A1D8A3DED7239B9F9E2521290A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:78:64:05:3f:39:0c:41:92:34:07:e7:10:
                    56:9d:69:7e:9a:20:36:21:48:bb:bf:61:08:5c:54:
                    a6:34:db:55:89:a2:61:8c:de:4d:bc:1c:f4:10:7d:
                    58:ec:80:9c:61:79:80:5b:4e:71:b3:a5:81:39:cf:
                    39:37:d2:15:aa:cd:f2:ff:f2:38:52:02:0a:3d:f9:
                    3f:ff:c6:3d:7d:bc:ce:ba:0a:b1:41:99:3e:df:c7:
                    14:1e:3a:7f:f3:62:78:7b:44:81:58:46:c7:36:12:
                    4c:f8:b6:15:26:a1:7b:2b:06:c7:ee:fb:64:56:fd:
                    d4:33:92:73:f6:d6:51:aa:46:60:32:3c:69:a9:e8:
                    6e:5b:7d:62:4a:91:46:10:f3:82:10:09:b9:3f:88:
                    bd:16:5d:6a:25:84:a1:af:f4:67:74:d5:7c:88:ac:
                    5f:77:ff:2b:a1:4c:29:33:49:b2:65:90:c2:47:79:
                    cb:6b:95:ca:0a:65:79:1d:94:b6:fc:ef:8b:c3:fb:
                    e9:24:cb:2d:6c:0c:3a:4b:2c:b9:62:24:90:30:86:
                    1e:80:f8:8a:d8:38:7e:5b:96:31:42:b4:85:8a:75:
                    eb:8f:82:11:4e:bd:3e:83:81:13:d1:d2:0d:da:57:
                    1f:a8:71:82:7d:1c:ef:79:36:88:27:87:4c:c6:2e:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1F:7A:B1:6F:A2:A1:D8:A3:DE:D7:23:9B:9F:9E:25:21:29:0A:8E
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3135322e3233302e302e302f31362d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:a4:47:c5:2b:73:13:bd:c1:fe:bd:e4:71:03:07:80:37:
         28:58:15:7f:ed:ef:da:40:ea:57:84:ec:94:cb:10:06:3e:ee:
         bc:99:53:27:b3:c3:68:75:31:b6:6b:99:c4:cc:f1:56:28:f1:
         0c:e5:06:ae:54:43:ff:f5:ec:d6:5f:5e:4d:ee:eb:35:bd:54:
         24:64:b5:e3:67:be:17:a4:ac:e4:70:5e:15:1f:15:c6:93:b3:
         35:97:65:35:d5:fa:5b:37:55:0b:17:14:59:c6:b7:01:f2:27:
         f0:b0:66:10:8c:b4:30:38:9f:93:76:08:40:eb:01:f7:03:06:
         c0:48:75:8b:ee:c8:7b:bb:63:a9:c5:49:e4:77:5f:23:25:da:
         95:c5:29:20:51:c5:71:bc:b2:ce:dc:e7:f9:75:7e:05:65:8a:
         2f:52:72:f8:27:30:9f:65:02:a6:96:99:d1:02:93:b0:a4:9c:
         70:61:33:83:6a:0e:68:8c:be:6e:a5:20:f4:08:c4:e6:e5:23:
         1d:4d:40:2f:0f:69:ca:cd:5a:2c:de:1c:d1:d0:53:df:c1:02:
         67:79:10:f7:76:46:67:18:65:50:5f:f6:b9:eb:c3:41:de:a7:
         fd:c0:ab:6a:f1:6e:cf:68:55:48:5e:08:4a:85:66:b5:36:ed:
         8b:4f:8d:52
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXrLKoBPJOryb11Xz0URTtjeVWfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNTA3MDExNzI1MDBaFw0yNjA2MzAxNzMwMDBaMDMxMTAvBgNV
BAMTKEUyMUY3QUIxNkZBMkExRDhBM0RFRDcyMzlCOUY5RTI1MjEyOTBBOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKHhkBT85DEGSNAfnEFadaX6a
IDYhSLu/YQhcVKY021WJomGM3k28HPQQfVjsgJxheYBbTnGzpYE5zzk30hWqzfL/
8jhSAgo9+T//xj19vM66CrFBmT7fxxQeOn/zYnh7RIFYRsc2Ekz4thUmoXsrBsfu
+2RW/dQzknP21lGqRmAyPGmp6G5bfWJKkUYQ84IQCbk/iL0WXWolhKGv9Gd01XyI
rF93/yuhTCkzSbJlkMJHectrlcoKZXkdlLb874vD++kkyy1sDDpLLLliJJAwhh6A
+IrYOH5bljFCtIWKdeuPghFOvT6DgRPR0g3aVx+ocYJ9HO95Nognh0zGLtvTAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU4h96sW+iodij3tcjm5+eJSEpCo4wHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzUzMjJlMzIzMzMwMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzgzODMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCY5jANBgkq
hkiG9w0BAQsFAAOCAQEAPVKkR8UrcxO9wf695HEDB4A3KFgVf+3v2kDqV4TslMsQ
Bj7uvJlTJ7PDaHUxtmuZxMzxVijxDOUGrlRD//Xs1l9eTe7rNb1UJGS142e+F6Ss
5HBeFR8VxpOzNZdlNdX6WzdVCxcUWca3AfIn8LBmEIy0MDifk3YIQOsB9wMGwEh1
i+7Ie7tjqcVJ5HdfIyXalcUpIFHFcbyyztzn+XV+BWWKL1Jy+Ccwn2UCppaZ0QKT
sKSccGEzg2oOaIy+bqUg9AjE5uUjHU1ALw9pys1aLN4c0dBT38ECZ3kQ93ZGZxhl
UF/2uevDQd6n/cCravFuz2hVSF4ISoVmtTbti0+NUg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 12:54:34 2025 by rpki-client