Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3230382e302f32342d3234203d3e203237383838.roa
File:                     3230312e3233382e3230382e302f32342d3234203d3e203237383838.roa (raw, json)
Hash identifier:          RtlzNPC8PJjhSRwZNE4q57h1D0Y3blhFoaP0OPipiGI=
Subject key identifier:   FA:81:95:31:BC:5D:96:28:8C:69:44:38:03:05:50:2D:8E:06:AD:ED
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       252B67745EEEE61CC14E9888C1D7B7762B93AC96
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3230382e302f32342d3234203d3e203237383838.roa
Signing time:             Tue 04 Feb 2025 18:01:57 +0000
ROA not before:           Tue 04 Feb 2025 17:56:57 +0000
ROA not after:            Tue 03 Feb 2026 18:01:57 +0000
asID:                     27888
IP address blocks:        201.238.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 17:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:67:74:5e:ee:e6:1c:c1:4e:98:88:c1:d7:b7:76:2b:93:ac:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Feb  4 17:56:57 2025 GMT
            Not After : Feb  3 18:01:57 2026 GMT
        Subject: CN=FA819531BC5D96288C6944380305502D8E06ADED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bd:49:e8:eb:ae:56:b7:f0:a8:69:63:fa:a9:
                    78:07:d1:ea:40:92:74:1e:8e:f4:33:61:cd:c8:e6:
                    86:8e:3d:cc:ed:eb:cb:59:80:06:c8:24:be:24:49:
                    f8:cd:e5:d8:6f:fc:8d:8c:67:87:d8:89:77:5d:fd:
                    08:ad:be:f2:bc:24:1d:d2:1d:2b:fb:c5:4b:7d:de:
                    bb:f4:7e:a2:7b:47:c7:3a:53:40:3a:7b:f4:a6:65:
                    77:1d:45:20:05:f7:40:47:16:14:d5:d2:d5:d4:61:
                    16:a7:3e:59:0a:c7:53:d5:68:3c:e5:7d:aa:87:4f:
                    86:a9:3e:40:53:57:05:e2:16:a1:4f:32:50:f3:b6:
                    78:d8:87:6b:91:81:b9:2b:43:6a:bc:c1:82:e5:c5:
                    68:f2:8a:bf:2d:cc:fd:f8:3d:b0:52:3b:8f:2e:80:
                    79:25:0d:1b:2a:28:82:02:27:42:46:fc:b6:9b:c0:
                    62:56:cc:64:93:52:e4:cb:4a:f7:81:44:68:37:42:
                    61:c0:16:65:f8:4b:44:9e:06:cc:36:82:5d:bc:ff:
                    3d:ad:59:ab:78:1e:6f:dd:09:d5:c9:22:20:6f:88:
                    f9:c8:37:5d:d6:e3:68:c7:51:d9:c5:83:ba:71:e7:
                    fa:13:88:97:bb:5a:a5:99:82:42:46:8e:30:a5:b3:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:81:95:31:BC:5D:96:28:8C:69:44:38:03:05:50:2D:8E:06:AD:ED
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3230382e302f32342d3234203d3e203237383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:0d:97:98:8b:06:56:6a:ee:a7:97:0a:ca:e2:6e:54:6f:
         e0:1b:65:6f:5b:d3:17:54:56:27:f7:71:cc:ec:9a:86:f6:6d:
         06:93:d5:3a:75:89:d7:d7:f2:c2:9d:81:f8:a9:f2:6e:b6:16:
         84:59:2a:72:b9:06:55:e9:08:21:23:44:7a:c8:fa:39:6e:f3:
         5f:62:b5:56:5d:11:d8:78:f2:57:85:5e:64:14:ad:11:3d:5d:
         3e:a7:27:32:88:f8:d7:16:2d:10:74:98:86:9d:c5:99:b7:26:
         19:25:2f:85:82:19:a2:aa:87:ae:95:e4:5c:d9:73:b4:9e:42:
         79:70:2c:9d:8f:17:f5:5c:08:9c:56:60:ae:e8:f8:24:17:1d:
         a0:a9:90:dc:6e:41:4e:9b:67:4c:09:1d:df:aa:10:ec:90:d0:
         aa:32:3f:b2:92:60:ee:7c:23:80:d3:c3:2a:42:10:32:26:2d:
         87:90:bc:d2:36:0e:2d:b6:da:68:ca:39:0b:e7:36:b1:f1:95:
         51:36:68:21:cc:0f:ca:1c:00:1e:bf:7f:d9:7f:e5:1d:78:c9:
         28:8d:6f:7b:51:7b:2e:2f:95:10:82:42:58:0a:79:17:d9:67:
         a5:57:14:7f:f3:0b:72:77:94:60:f6:14:ad:ed:18:29:7e:a6:
         f0:e7:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:40:25 2025 by rpki-client