Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3235322e302f32342d3234203d3e203138383232.roa
File:                     3230312e3233382e3235322e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          ghP9LkiUgQdSvXljzsIchRV41AOBVq9LIrO+oX2doZg=
Subject key identifier:   14:F9:37:38:17:B5:20:BD:FC:87:E8:F5:1C:2B:48:F4:3E:B6:5F:44
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       5A3E2FBEEB992542E05C6EB98999AFE75D0959B1
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3235322e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:16 +0000
ROA not before:           Tue 02 Jun 2026 17:40:16 +0000
ROA not after:            Tue 01 Jun 2027 17:45:16 +0000
asID:                     18822
IP address blocks:        201.238.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3e:2f:be:eb:99:25:42:e0:5c:6e:b9:89:99:af:e7:5d:09:59:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:16 2026 GMT
            Not After : Jun  1 17:45:16 2027 GMT
        Subject: CN=14F9373817B520BDFC87E8F51C2B48F43EB65F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9c:45:1b:c3:9e:36:c5:2d:30:bb:5a:1b:44:
                    47:92:8e:38:45:ae:a1:37:7d:f8:fe:27:7d:53:19:
                    f4:de:cf:b5:2d:e5:26:b1:93:80:53:ab:8b:0f:48:
                    37:75:09:88:6a:fd:ed:b3:96:a6:47:4e:47:89:06:
                    a1:41:84:d5:8c:89:88:63:d2:e5:cb:41:1a:bc:36:
                    68:3f:a7:02:b6:ab:f8:4f:a3:68:a8:ce:58:2c:76:
                    6e:ed:53:04:55:1f:4a:a3:96:bb:ac:84:e6:6a:fd:
                    6f:c3:d3:42:18:0f:88:84:aa:46:2f:76:9f:ac:84:
                    6a:36:aa:3a:fd:04:32:f1:57:25:9a:86:79:fe:82:
                    dc:48:4e:0a:7f:03:76:be:fb:fc:7b:b7:34:8f:90:
                    d4:8a:4c:72:33:d7:0d:cd:39:e7:4d:45:ea:df:92:
                    5e:4f:ec:d0:6a:95:1f:c5:69:87:08:3d:b7:f3:a6:
                    e4:dc:af:f0:ef:6c:20:80:81:fa:80:f0:ff:67:b2:
                    40:ff:54:cd:ce:81:a6:52:e9:be:8a:66:e1:b6:34:
                    db:fb:26:e1:bb:c0:49:ce:93:e6:90:ac:92:47:51:
                    b1:19:50:05:a9:8f:ae:2e:bf:fa:0c:7f:b7:00:63:
                    42:eb:50:38:c3:25:52:bf:f6:47:be:59:66:20:e9:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F9:37:38:17:B5:20:BD:FC:87:E8:F5:1C:2B:48:F4:3E:B6:5F:44
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3230312e3233382e3235322e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e2:b3:ea:dc:18:c8:67:0d:0e:62:4a:8c:c6:dc:80:cd:01:
         b9:03:c4:81:c1:b1:3a:2a:86:d5:51:15:7b:e0:e0:9f:ac:e1:
         0d:02:da:3e:20:53:33:61:f9:07:4b:6c:dc:60:ba:03:0b:dc:
         05:26:00:ec:43:d7:af:cc:8a:49:0f:cd:7e:4f:c8:42:66:25:
         d7:ba:94:b4:0f:7e:32:ed:dc:76:6c:37:68:f8:9b:ed:35:62:
         68:aa:da:96:1b:4c:0d:4c:91:14:07:75:80:ac:35:08:19:41:
         78:af:2b:aa:f0:7c:22:42:49:f7:38:33:ef:7b:5b:35:f4:b6:
         10:30:3c:0b:e5:96:7e:4f:e5:48:76:ad:d5:2f:f9:ec:16:9c:
         9d:c8:63:f6:b7:de:f8:e9:4a:69:87:6e:e4:5c:0f:9a:63:73:
         f8:71:20:c6:8c:58:7f:47:37:19:5a:17:4f:4b:47:2e:8e:b8:
         06:be:ef:e5:7c:ce:c5:fa:c2:8f:b2:4e:6e:4b:43:12:3b:5c:
         63:83:78:06:5d:c9:37:24:d2:ac:6b:a6:36:c5:04:c1:fa:3e:
         a9:8f:b7:62:5f:c5:52:2c:aa:88:93:0a:5a:98:09:13:fe:b0:
         ee:75:ba:bc:67:16:ae:22:b8:f3:21:e9:5d:45:e7:fb:6d:ab:
         3d:d4:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:05 2026 by rpki-client