Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3235352e302f32342d3234203d3e203138383232.roa
File:                     3230312e3233382e3235352e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          YbOwuTN4NeC1E6Jy8lsua9TFYnTHPYEflFxGFmk0zA8=
Subject key identifier:   F9:48:E6:02:0C:62:FB:5C:04:15:96:D8:AF:50:45:65:E9:4E:F7:47
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       49E67E032B3FF1698C0BE94D467CEF6BBBFDB323
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3235352e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:14 +0000
ROA not before:           Tue 01 Jul 2025 16:50:14 +0000
ROA not after:            Tue 30 Jun 2026 16:55:14 +0000
asID:                     18822
IP address blocks:        201.238.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e6:7e:03:2b:3f:f1:69:8c:0b:e9:4d:46:7c:ef:6b:bb:fd:b3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:14 2025 GMT
            Not After : Jun 30 16:55:14 2026 GMT
        Subject: CN=F948E6020C62FB5C041596D8AF504565E94EF747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:10:db:81:4d:72:20:9d:ce:8a:67:16:d1:
                    1a:90:93:d8:dd:90:44:c0:8b:f6:ef:f2:25:c5:76:
                    98:10:d2:39:f6:d7:99:03:b2:b9:8f:ab:bb:d2:ab:
                    59:7b:bd:ed:9c:42:5b:c9:cf:3c:4f:a6:cf:53:7b:
                    aa:0a:23:25:f4:b0:40:97:5b:85:b3:9f:65:2f:2e:
                    b3:d3:70:33:63:b3:02:66:81:15:db:fa:a2:ad:ad:
                    fd:60:20:76:f4:f6:5e:1f:bb:b2:8a:a3:9a:47:d7:
                    f9:26:3d:ce:d0:13:92:9a:73:34:19:64:fd:45:0f:
                    6c:bc:9f:38:a5:3a:25:15:b0:55:06:f8:6f:b3:65:
                    b3:97:4e:42:6a:35:27:cb:24:6b:aa:49:43:ff:ba:
                    0c:f1:ec:3f:fc:3a:13:1f:a6:6a:72:63:63:27:70:
                    84:08:cb:79:2c:c3:3e:a8:5b:17:b5:5c:f7:46:44:
                    6b:09:0d:60:c1:02:fb:ef:74:81:25:53:e6:e1:31:
                    9a:85:bd:d1:d5:fc:42:ef:c1:46:11:62:5f:4e:a6:
                    01:7b:bf:cf:22:2f:d6:43:c3:59:fc:5e:20:7c:f6:
                    0d:2a:f7:27:d7:b5:6c:29:5e:5f:2e:a9:41:c8:a4:
                    0f:98:91:9c:48:f8:69:7d:1d:24:0d:cb:6c:fc:b4:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:48:E6:02:0C:62:FB:5C:04:15:96:D8:AF:50:45:65:E9:4E:F7:47
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3235352e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:c9:fa:a1:2b:8a:c5:a0:05:cb:5d:0d:fc:a5:9f:b9:13:
         67:d2:18:ab:a4:b5:2f:16:c9:18:ef:d0:f4:39:52:dd:07:2d:
         cc:ed:65:14:af:6d:18:c8:35:75:10:3b:63:93:7e:5a:c5:5a:
         37:20:d1:e1:f9:62:81:05:e1:de:d8:df:04:da:14:70:ef:19:
         a5:12:f6:ef:77:80:d1:f2:aa:60:86:c8:30:6e:12:cd:f9:2d:
         2a:17:89:14:03:5c:bf:47:ab:01:ce:86:63:d2:e2:76:cb:94:
         da:9e:74:e1:b0:87:39:d2:11:12:8e:50:16:93:f8:cd:f9:b1:
         08:dc:2b:5e:be:73:ae:0f:25:b1:73:8f:73:90:b7:40:c7:9a:
         5d:eb:a5:98:ee:2f:d6:45:aa:53:8f:03:7d:0d:bd:c3:a2:bd:
         6e:c8:ba:56:44:c4:a4:71:62:30:73:03:36:a5:fe:7b:e3:87:
         44:6b:9e:0b:f4:9b:3c:cd:c0:74:f5:30:af:47:bf:b9:d1:4a:
         73:af:45:ce:e5:b7:b7:ab:2b:57:b0:b8:80:03:d6:54:9d:38:
         7f:41:b0:61:3b:4d:96:f2:d6:32:83:d1:48:27:ff:a7:5f:dc:
         26:b8:8e:1e:66:be:e8:fe:24:d3:ea:83:fd:80:46:c6:6e:17:
         9d:ef:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:11:12 2025 by rpki-client