Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3138382e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e3138382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          l9OYVg1DQDAKzo/5GvKkmPk1HfGsXaBFHm7yoCkaTZ8=
Subject key identifier:   32:4A:56:B6:60:BF:84:5C:D4:67:EA:F3:61:80:C9:F5:45:A7:8F:E7
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       1961A49BA46FD19028B275DE4F9198101E0FD7E3
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3138382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:22 +0000
ROA not before:           Tue 01 Jul 2025 16:50:22 +0000
ROA not after:            Tue 30 Jun 2026 16:55:22 +0000
asID:                     18822
IP address blocks:        190.196.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:61:a4:9b:a4:6f:d1:90:28:b2:75:de:4f:91:98:10:1e:0f:d7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:22 2025 GMT
            Not After : Jun 30 16:55:22 2026 GMT
        Subject: CN=324A56B660BF845CD467EAF36180C9F545A78FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:5a:e4:5e:f0:5f:bb:68:6c:c5:ef:2a:ec:
                    15:05:6f:c3:b9:ab:a3:b4:f4:04:e4:1b:82:87:ae:
                    14:df:70:67:a1:65:13:03:c8:af:94:6b:96:19:74:
                    21:98:2a:04:bb:a9:87:fe:17:25:6d:53:b3:20:2a:
                    4d:33:8a:62:d1:43:e4:f5:90:9a:57:66:35:f1:a2:
                    c6:79:a0:71:60:80:68:a3:f2:f7:66:5b:99:eb:c7:
                    b3:1a:47:5b:25:87:ae:a0:85:98:aa:a7:c1:13:c8:
                    6d:2f:59:b8:6b:3d:26:0d:6d:d7:bf:b3:c2:b2:4c:
                    2f:9d:c6:9b:fa:f9:e8:a3:eb:6d:55:c7:3c:82:5a:
                    5f:d6:e0:d3:90:96:25:5c:c5:88:51:f8:b6:33:d1:
                    29:25:87:cd:cb:d1:89:02:2d:b2:4c:53:81:7f:a3:
                    b0:01:28:88:40:91:04:5d:89:6d:aa:f4:30:00:4a:
                    d9:9b:c4:1d:af:3c:bb:33:00:6c:18:a0:6b:4c:d8:
                    15:cd:00:c9:55:aa:92:38:79:ad:be:25:97:b7:bd:
                    40:ac:a3:85:1d:65:b2:e8:96:cf:61:36:cb:2d:fe:
                    c3:0b:69:05:29:da:e6:54:47:19:c0:80:de:03:ef:
                    19:cc:cf:bf:e2:77:9f:4a:90:26:f6:f1:56:5e:0b:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:56:B6:60:BF:84:5C:D4:67:EA:F3:61:80:C9:F5:45:A7:8F:E7
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3138382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:db:3c:ef:f2:ee:a5:e6:86:e4:ab:41:3c:7e:bc:b2:e9:64:
         d8:0f:99:99:20:18:c5:58:97:5e:c7:e1:90:f2:3c:f0:7f:8d:
         c9:0b:bb:80:50:06:20:a9:a1:d4:f8:b9:73:01:ec:24:5b:61:
         ff:7f:ce:76:c3:88:6c:0f:46:fc:b1:e6:28:be:28:d5:00:10:
         f2:f4:2e:a4:e2:ae:e0:e7:d6:9e:11:98:ea:a5:14:a8:2c:5f:
         f0:8b:14:7e:1a:e7:32:3d:5d:5d:bf:7e:47:48:6a:53:93:92:
         7c:71:1e:6f:ed:7f:1a:49:99:7b:76:45:2f:f2:99:5a:a0:9e:
         c9:90:1f:2d:41:ea:19:60:b0:08:bf:61:13:a3:c7:f3:7d:07:
         38:a7:a4:1e:0e:37:00:fe:39:60:ab:de:53:ff:90:80:aa:81:
         3e:e1:db:71:a7:49:26:6a:4d:ba:1d:05:4f:e9:e9:e9:ca:4e:
         e6:5b:97:b9:dd:af:25:bf:7f:8a:a3:e2:81:92:9e:07:e4:da:
         e2:f0:22:72:f8:1b:5e:6a:ba:93:8f:f3:2c:15:42:d8:8f:da:
         65:b1:99:c2:0e:7a:cc:70:bf:2e:ba:3c:f2:38:70:41:cf:89:
         2e:63:84:96:6a:fe:e0:1d:4c:6a:a0:75:f1:0d:f8:9e:93:7f:
         af:3b:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:11:34 2025 by rpki-client