Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3134322e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e3134322e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          wrwI/NnuMMOCBdrBCrAGh0Lo6sWoJtmUkS74yhpWAmg=
Subject key identifier:   0E:F0:B7:CB:26:56:92:23:42:C5:00:7E:56:29:85:7C:B0:8B:02:68
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       4AFC587971D2B0A54BE35A396D3F36B66C610645
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3134322e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:01 +0000
ROA not before:           Tue 01 Jul 2025 16:50:01 +0000
ROA not after:            Tue 30 Jun 2026 16:55:01 +0000
asID:                     18822
IP address blocks:        190.196.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:58:79:71:d2:b0:a5:4b:e3:5a:39:6d:3f:36:b6:6c:61:06:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:01 2025 GMT
            Not After : Jun 30 16:55:01 2026 GMT
        Subject: CN=0EF0B7CB2656922342C5007E5629857CB08B0268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:fa:78:0a:e1:36:ff:f9:b4:23:1d:40:47:
                    ec:3f:94:8f:68:69:03:71:07:b1:be:42:94:6d:d8:
                    21:58:a1:9d:90:1b:dc:5c:d2:02:a5:3f:60:de:41:
                    49:11:7a:ae:b9:d8:26:11:cf:d1:91:7a:c2:cd:48:
                    db:47:8f:59:9d:74:63:39:74:e9:36:d5:ba:7b:0a:
                    d1:14:28:d1:cf:48:62:c4:82:dc:3b:2c:8f:31:d4:
                    46:4b:8c:09:2c:9c:ce:c8:dc:83:96:80:6b:18:95:
                    ce:1f:c1:e6:07:ae:d1:97:04:36:b5:56:49:d1:f3:
                    19:ab:a3:5b:71:7f:ed:a7:8c:4b:f1:a1:32:cb:9f:
                    ed:55:65:0c:9b:6f:93:b7:28:e0:83:3f:80:2e:a4:
                    b3:17:36:28:cb:ee:c4:c8:ee:42:a3:2c:68:59:86:
                    e8:22:a8:51:9a:e1:c9:89:86:85:54:54:6f:c9:4a:
                    2f:77:16:70:e0:f0:f2:ed:dd:b0:69:c1:eb:03:3e:
                    72:1d:ba:63:0b:ca:b6:7a:cf:ed:f4:0c:2e:c1:d0:
                    be:2e:03:5e:02:1f:10:ed:2f:de:60:71:54:4c:dd:
                    18:bf:75:6d:b7:1a:86:98:81:0b:df:ae:95:c8:86:
                    83:90:28:cb:da:89:21:58:c8:29:f4:4c:3f:4b:d4:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F0:B7:CB:26:56:92:23:42:C5:00:7E:56:29:85:7C:B0:8B:02:68
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3134322e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:04:f6:2d:e2:e3:66:4d:07:76:d2:95:10:07:71:cf:82:b2:
         89:51:44:fa:00:e6:55:0f:ab:fb:72:9a:7c:b4:c0:41:94:34:
         8c:03:c8:3a:be:3e:bd:cd:cb:34:03:99:ae:b0:44:c9:d6:5c:
         83:a8:1d:49:bf:9b:63:ca:f6:9f:e2:75:5e:d1:26:81:25:ad:
         58:34:14:61:94:7c:40:b5:bc:eb:8b:46:b6:6f:30:e8:5f:09:
         54:17:7f:70:27:18:17:39:e9:b1:19:7b:3e:b9:15:5e:21:73:
         c5:f9:aa:0f:bb:17:11:2c:f5:56:91:92:54:04:84:78:8f:35:
         d3:0e:ba:db:74:1b:7c:1b:39:7c:98:9b:3a:0b:72:11:24:fc:
         75:36:8a:e3:c6:d8:9a:57:7a:6e:d0:1d:42:ac:c1:e8:26:14:
         a3:86:c2:30:68:b6:e9:e8:9f:64:66:b1:9f:a1:54:96:6e:37:
         82:0e:93:ce:40:7e:e5:1e:73:1a:0a:0e:f3:bb:4a:d0:23:82:
         50:8e:28:5c:c1:a8:58:6f:e1:0e:52:23:03:7f:9a:05:a2:46:
         9d:18:4f:87:c6:fa:dc:ee:fe:c7:67:bd:10:de:31:9f:e9:ec:
         07:cf:2f:cd:24:3b:a5:3f:f1:ab:64:8a:89:33:66:56:60:ed:
         12:7b:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:38:32 2025 by rpki-client