Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230302e37352e302e302f31392d3234203d3e203134323539.roa
File:                     3230302e37352e302e302f31392d3234203d3e203134323539.roa (raw, json)
Hash identifier:          VHRNilHoS0qsGz42WBtwJprfrtI9Du230KAm4XRwIHk=
Subject key identifier:   7B:68:AC:47:8E:EA:8B:21:D2:39:0D:6D:BE:A6:CE:2D:55:6D:A5:91
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       2510582316076FCC642277D3CDF9BD7EE4A93B6A
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230302e37352e302e302f31392d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 16:55:17 +0000
ROA not before:           Tue 01 Jul 2025 16:50:17 +0000
ROA not after:            Tue 30 Jun 2026 16:55:17 +0000
asID:                     14259
IP address blocks:        200.75.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:10:58:23:16:07:6f:cc:64:22:77:d3:cd:f9:bd:7e:e4:a9:3b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:17 2025 GMT
            Not After : Jun 30 16:55:17 2026 GMT
        Subject: CN=7B68AC478EEA8B21D2390D6DBEA6CE2D556DA591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:0c:81:a7:10:45:66:07:f4:ba:cd:05:52:
                    95:3f:76:ad:7c:d7:ec:26:3f:e7:57:f3:b0:4d:05:
                    5f:63:e5:d3:09:d6:4b:24:db:58:cf:bf:72:3d:5c:
                    b9:6d:29:92:45:23:d1:e0:be:1a:78:4d:c4:07:dd:
                    a2:ab:91:f9:16:83:fe:9e:f9:69:63:71:0e:da:f6:
                    96:d6:8f:2e:43:bb:a1:a3:ae:1e:9e:e1:01:01:9f:
                    1c:47:6e:7b:a1:cb:4f:09:e3:d2:88:92:fe:58:53:
                    e9:ab:cc:78:94:40:70:69:bf:ca:a4:48:d0:d4:d4:
                    71:e9:41:c5:1c:b8:67:a6:b7:00:9a:b9:12:eb:ec:
                    0e:ce:cf:f5:8c:87:18:9b:fc:be:fe:4c:0c:c8:bc:
                    6a:85:ad:23:4a:7a:9b:59:4d:f9:a3:f6:c6:88:41:
                    28:3f:9a:6e:2d:8e:18:e0:ca:c9:60:79:6d:a2:fc:
                    28:5e:eb:5a:79:ab:a1:88:9b:77:9e:c5:05:3e:54:
                    26:2c:4f:a8:2c:94:d9:dd:29:7d:d7:c1:5b:e0:41:
                    7f:fe:47:bf:3e:98:e4:98:05:95:83:d1:e3:60:1a:
                    4c:0f:12:20:ba:d7:8c:d7:03:5c:3b:ec:5b:5d:c4:
                    e9:f9:18:4a:fe:4d:cb:3d:df:e2:a1:06:93:00:1f:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:68:AC:47:8E:EA:8B:21:D2:39:0D:6D:BE:A6:CE:2D:55:6D:A5:91
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230302e37352e302e302f31392d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:82:b2:82:c5:b1:a1:dd:59:f5:4b:67:6a:cb:cc:32:f8:32:
         c0:19:6e:c2:41:3b:67:3c:c6:f9:37:74:82:3f:1e:ea:8c:fd:
         26:ac:e3:f8:44:90:d6:9f:b9:ff:78:cb:4a:82:45:00:e7:99:
         30:67:02:9f:05:39:17:41:2b:c4:c5:80:68:3d:5b:8d:e5:32:
         7f:d0:59:75:28:19:23:a8:07:c7:7f:f1:4c:e8:03:30:e8:b9:
         52:ed:f8:cf:34:00:3d:54:bd:08:ad:e4:4b:79:9d:2a:7b:82:
         04:cf:1f:02:5b:fe:a7:28:57:4e:f4:d6:72:ab:e7:05:8d:80:
         d5:7c:e9:bb:c1:81:c8:1c:49:06:1e:47:f0:a9:be:c5:43:f3:
         e9:ea:a3:01:82:2f:ac:90:4b:a8:69:9f:fc:38:62:6f:cb:f0:
         81:7a:0c:6b:c2:00:94:16:8c:ff:73:f7:00:69:5d:55:59:4e:
         14:5a:36:30:c9:ed:03:d7:d5:0d:9f:d8:f2:25:23:3f:c5:fc:
         c6:3c:69:08:f4:45:84:a3:11:2b:23:8b:46:94:cd:9f:bf:5b:
         ad:09:9c:82:bf:32:d1:8d:6f:95:79:f8:96:19:bb:61:ac:0a:
         71:7c:4e:c7:40:74:d1:4c:bc:d3:8e:55:06:57:a4:4a:5a:85:
         af:71:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:25:57 2025 by rpki-client