Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3232352e302f32342d3234203d3e203138383232.roa
File:                     3230312e3233382e3232352e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          93CyrlgZDCnE0U1EFXr7/RXAOLkrvMENHhnSMk9Ad3E=
Subject key identifier:   0E:76:DA:10:CC:72:3F:3A:C5:26:A1:52:A7:33:62:8F:16:9B:51:50
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       014E843EDEF1E74B14622F5B68E862A73A365501
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3232352e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:15 +0000
ROA not before:           Tue 01 Jul 2025 16:50:15 +0000
ROA not after:            Tue 30 Jun 2026 16:55:15 +0000
asID:                     18822
IP address blocks:        201.238.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4e:84:3e:de:f1:e7:4b:14:62:2f:5b:68:e8:62:a7:3a:36:55:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:15 2025 GMT
            Not After : Jun 30 16:55:15 2026 GMT
        Subject: CN=0E76DA10CC723F3AC526A152A733628F169B5150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:1a:67:a8:21:66:ab:1a:40:02:27:4e:f4:
                    f5:5f:1b:f6:6e:e7:d2:97:72:b3:20:14:88:dc:41:
                    09:55:7e:aa:eb:8e:c6:a5:c5:ac:f0:0a:e4:fd:f4:
                    5b:fb:c7:d0:76:b3:e1:e1:b1:c8:76:1e:0c:c5:19:
                    75:47:47:de:61:b6:43:21:00:10:d6:c4:b9:35:69:
                    82:be:8f:9c:9b:4b:8f:a4:88:e7:dc:69:fa:8e:dd:
                    0b:fa:2c:b4:3b:fe:41:81:c8:d9:3a:71:40:6b:d7:
                    99:34:a9:c7:15:c7:e2:40:8f:ac:1a:d2:1d:e4:19:
                    20:24:2a:e4:71:21:f7:ab:99:e1:f2:63:d4:77:22:
                    a9:0f:27:14:26:03:aa:7e:7c:f9:89:f1:6b:17:7b:
                    12:0c:07:c0:f6:6c:8c:34:c0:2e:23:95:89:07:4d:
                    4b:e6:73:88:67:c0:f3:e2:29:0d:42:c6:3d:d4:83:
                    40:6d:25:91:dd:48:5d:4f:60:27:fb:78:be:9b:1f:
                    b2:15:7b:e3:a3:a8:f5:e0:13:67:dd:dd:68:8b:a6:
                    7e:06:41:3a:57:96:2d:e4:27:2f:44:7e:c6:41:91:
                    48:e9:13:c7:cf:bb:55:ee:4f:b2:5b:47:78:5a:42:
                    8d:e5:79:0a:7d:a1:1d:cf:d7:95:90:46:99:47:16:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:76:DA:10:CC:72:3F:3A:C5:26:A1:52:A7:33:62:8F:16:9B:51:50
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3232352e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a3:28:c1:fb:95:80:16:7b:27:9b:f8:44:d3:1f:ba:c6:87:
         73:c1:92:92:63:2f:fe:1c:22:68:25:e7:a0:f6:6f:15:53:71:
         dc:9f:21:74:3b:d8:1c:7b:0c:b4:08:c1:6c:dd:92:b0:8d:42:
         27:51:7d:4a:a8:95:82:30:3d:f2:a9:d4:f8:5a:b2:4c:d3:1e:
         18:a6:5e:f9:15:24:37:bd:67:e6:89:b5:54:ba:43:47:29:6e:
         7c:00:f2:7a:68:ae:4f:ff:25:5d:b7:c5:a0:af:7e:9e:08:7f:
         77:71:fa:91:89:de:ab:a4:ca:58:24:c3:37:e6:31:56:c3:2b:
         5f:6a:e3:0c:82:ef:56:fb:ed:e6:5c:ee:a8:e9:7d:12:d0:e6:
         5d:9b:a5:d3:1a:fc:48:74:83:35:4a:07:6e:6f:61:d4:c4:78:
         98:6b:ea:26:4e:64:69:35:6f:6b:95:cf:a8:2b:6c:f1:b8:23:
         e2:4c:99:b1:c5:10:d2:92:e7:5c:db:66:71:62:31:3d:cf:0e:
         ad:aa:31:fc:42:8b:55:3f:d9:0e:7d:b1:a1:6c:02:94:c4:9e:
         ef:df:8e:04:46:3f:5b:c7:0c:be:61:1e:41:eb:0e:ba:03:25:
         aa:6d:58:dc:b2:d6:cd:27:d2:20:69:22:a3:55:d4:c1:ff:03:
         9d:87:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:11:16 2025 by rpki-client