Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3139322e302f31382d3234203d3e203134323539.roa
File:                     3230312e3233382e3139322e302f31382d3234203d3e203134323539.roa (raw, json)
Hash identifier:          j4l0aRvdhxw5TNTk6DXgvxutm7XaDAjuxKxWZhRFbjU=
Subject key identifier:   3C:47:31:B3:82:D7:CA:8F:4F:E9:8D:DD:EA:77:36:65:C5:BD:2E:D4
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       2AC3EA0C5148F206D172EA16B606683EED2CFD09
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3139322e302f31382d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 16:55:00 +0000
ROA not before:           Tue 01 Jul 2025 16:50:00 +0000
ROA not after:            Tue 30 Jun 2026 16:55:00 +0000
asID:                     14259
IP address blocks:        201.238.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c3:ea:0c:51:48:f2:06:d1:72:ea:16:b6:06:68:3e:ed:2c:fd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:00 2025 GMT
            Not After : Jun 30 16:55:00 2026 GMT
        Subject: CN=3C4731B382D7CA8F4FE98DDDEA773665C5BD2ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:56:ef:4c:be:dc:fc:98:54:85:da:95:f6:
                    52:01:b8:bb:48:80:25:2a:c5:61:c4:c3:39:79:a2:
                    8f:75:24:69:b2:b3:f0:da:d0:81:41:82:01:c1:c6:
                    ed:d5:7b:e0:32:c9:a7:f8:00:2c:c4:f7:10:78:d3:
                    a2:b5:62:26:3c:f6:86:92:a5:ac:15:e2:2c:a4:44:
                    59:ee:9b:c1:86:1c:13:d1:51:82:48:06:a2:59:b1:
                    06:65:3c:96:b5:60:c4:e9:4a:ac:9d:ed:ee:ff:16:
                    65:5d:e9:59:cf:82:94:49:da:8b:0e:c1:04:6d:2a:
                    33:f3:11:3a:7d:ad:d0:3f:eb:00:17:af:36:cd:c5:
                    e9:76:06:d5:70:87:dc:90:ec:32:ad:20:27:23:5f:
                    ba:8a:d6:88:30:70:19:4c:c0:da:ef:d8:be:0f:55:
                    d6:a8:e4:5b:57:85:a2:d0:90:d2:cd:db:da:26:32:
                    e0:13:95:bf:2c:82:97:1e:c5:42:7a:47:3c:1e:bb:
                    b3:be:34:ce:e6:b6:92:70:1e:5a:82:7f:2a:fb:65:
                    57:ec:89:39:23:47:09:34:dc:e5:86:c9:78:7f:7b:
                    73:68:02:b2:07:7b:2f:7b:fe:2b:c1:47:11:40:cc:
                    be:88:b1:6b:08:41:f5:d8:9c:94:61:12:16:32:d6:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:47:31:B3:82:D7:CA:8F:4F:E9:8D:DD:EA:77:36:65:C5:BD:2E:D4
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3139322e302f31382d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:18:78:26:36:42:be:ae:52:9e:97:05:a9:f4:3a:fc:ab:
         10:22:38:23:8b:bb:9f:68:ed:e1:22:ea:91:73:a1:45:0b:26:
         19:27:2e:da:85:e5:28:16:c4:a1:23:02:28:ef:e3:8b:b4:e5:
         d2:0f:43:24:27:50:6a:9a:a0:98:e9:10:7c:38:0f:38:ae:3e:
         38:7a:5e:1e:0b:36:07:b0:dc:c1:74:3c:5c:8f:91:02:77:a6:
         43:17:61:b3:9c:54:c3:66:0a:68:44:5b:65:5a:af:b0:6f:a1:
         1b:e6:cb:71:f5:dc:eb:11:ba:9b:a8:6b:ae:b5:9c:ad:52:d8:
         db:de:78:73:36:32:99:63:0c:7f:c1:12:2a:1c:bc:a4:87:69:
         0f:53:d2:8b:5d:52:33:eb:d1:6e:42:1d:89:f7:55:12:49:15:
         0c:59:fc:95:df:60:12:2a:3e:86:c6:ed:70:12:81:77:3f:70:
         f1:e5:d3:ce:dc:d8:94:29:ec:a5:cd:6c:c6:23:08:f4:95:b6:
         8b:1f:d8:1b:63:60:1e:31:04:79:13:82:8b:f7:7d:a3:a9:5b:
         dc:73:c9:94:fb:85:73:2b:ad:f4:62:df:f7:16:55:aa:aa:c8:
         5c:46:8a:5c:46:a1:10:2f:ba:b6:8b:7e:53:a4:d0:3f:4c:3e:
         53:ff:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:27:53 2025 by rpki-client