Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3232382e302f32342d3234203d3e203138383232.roa
File:                     3230312e3233382e3232382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          L7P3Gx0azN772hbiWq7z6mvAINZ3LR+hRbKVdpMEUuU=
Subject key identifier:   F6:CA:F0:6F:6B:EC:B8:9D:C1:CD:6C:04:AF:AF:F4:13:E9:F0:13:E3
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       3104DC5E1272EAE9F547CD5CF567E7647CE750A4
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3232382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:24 +0000
ROA not before:           Tue 01 Jul 2025 16:50:24 +0000
ROA not after:            Tue 30 Jun 2026 16:55:24 +0000
asID:                     18822
IP address blocks:        201.238.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:04:dc:5e:12:72:ea:e9:f5:47:cd:5c:f5:67:e7:64:7c:e7:50:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:24 2025 GMT
            Not After : Jun 30 16:55:24 2026 GMT
        Subject: CN=F6CAF06F6BECB89DC1CD6C04AFAFF413E9F013E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:e0:05:0a:ce:e9:29:d0:c7:f3:7b:f1:df:
                    37:69:e2:4c:ba:67:bb:8a:00:eb:10:8f:d6:7d:c4:
                    db:87:18:11:38:4e:32:c8:72:9c:3b:55:94:cc:c6:
                    5a:f9:ef:33:3c:d2:ca:a9:f5:5f:ad:ea:e6:ff:f0:
                    b4:d9:55:d4:df:72:2f:18:70:24:a4:1a:79:17:9c:
                    24:91:21:22:a1:7f:8e:ef:2e:31:45:4e:82:93:9d:
                    01:d3:57:1a:52:8d:77:60:a9:06:5b:28:39:f5:d7:
                    44:e3:03:ed:07:3d:22:4b:6d:1f:11:c2:74:3f:35:
                    2b:bf:87:11:56:b8:88:e4:e0:4c:6f:b8:ee:58:86:
                    74:6d:60:77:c9:c7:68:7f:3f:3d:81:8e:f2:c9:c8:
                    a2:b5:31:06:3b:51:c1:63:b1:3c:1f:aa:a7:67:6c:
                    a9:2a:37:e8:9c:dd:67:87:52:bd:21:b2:84:35:de:
                    4e:00:9e:5d:c1:8f:96:c5:59:e7:82:f3:6a:9a:0a:
                    28:63:bb:30:a8:11:02:19:f3:61:7d:d9:81:08:f8:
                    1a:e8:db:83:6b:35:55:9b:46:70:65:88:89:57:31:
                    ee:64:ea:fe:52:12:a7:09:31:75:f3:32:72:ae:ad:
                    74:c3:c9:aa:1f:20:1e:ed:93:c9:61:1f:5f:d3:aa:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:F0:6F:6B:EC:B8:9D:C1:CD:6C:04:AF:AF:F4:13:E9:F0:13:E3
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3232382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f4:1b:90:c1:78:21:33:ab:ea:1e:d2:e2:9f:6a:2e:cd:46:
         ea:97:9d:cc:b9:c7:83:02:09:b2:97:e8:60:ac:af:88:ba:ae:
         bd:ab:cc:0f:ee:82:69:93:e9:16:24:f8:33:f6:91:06:89:cf:
         a3:c8:4d:5c:0f:ba:37:26:74:ae:94:db:16:57:25:4b:da:15:
         54:e3:60:4d:19:b7:70:bd:c6:d2:13:c8:14:a8:fd:f7:13:8c:
         5c:6c:cb:b8:10:63:9d:32:30:a4:9f:26:ca:24:97:11:58:8d:
         2b:ff:47:e6:1a:1e:54:b1:14:96:6c:6c:3a:09:fb:0c:67:8b:
         54:19:86:4d:73:4e:d1:b7:4d:14:b1:0d:29:9c:fc:87:57:cd:
         43:8d:4f:a3:f8:02:7e:e0:e3:76:68:34:db:3e:a1:54:69:b3:
         5c:c8:5d:f3:49:42:a7:4b:77:32:15:38:05:a2:37:7e:5b:94:
         8c:0d:52:9e:43:3f:5c:c6:c7:e6:17:ac:d8:2e:61:3a:4c:03:
         67:e6:d2:fe:49:c5:70:32:71:c6:bc:91:66:35:95:dc:a3:13:
         94:f2:9b:0d:e4:97:63:bc:0b:aa:72:99:b3:6a:8d:8d:bc:0e:
         14:2d:97:da:3c:0f:9a:6c:53:a8:2c:1c:f5:3c:48:d0:2d:52:
         46:ce:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:37:30 2025 by rpki-client