Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e32342e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e32342e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          T9GRJEqRKs7FkdDtl6qflnn3L/QBQa9G+7uwZtGEEd4=
Subject key identifier:   4A:CC:22:E9:99:B8:A1:C3:24:FD:ED:63:9A:5F:D3:63:F7:09:9F:22
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       53C4FE5331C5D71064AC06FA35327D3B841338D1
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e32342e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:01 +0000
ROA not before:           Tue 01 Jul 2025 16:50:01 +0000
ROA not after:            Tue 30 Jun 2026 16:55:01 +0000
asID:                     18822
IP address blocks:        190.196.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:fe:53:31:c5:d7:10:64:ac:06:fa:35:32:7d:3b:84:13:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:01 2025 GMT
            Not After : Jun 30 16:55:01 2026 GMT
        Subject: CN=4ACC22E999B8A1C324FDED639A5FD363F7099F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:ec:c5:c7:9f:50:67:1b:8a:73:a5:72:7e:
                    a1:bb:5a:04:ae:ac:65:5c:29:f8:ab:c4:03:cc:42:
                    d3:a3:c4:1e:72:23:d4:86:f3:8a:a8:02:e8:38:57:
                    a2:3b:61:b1:4d:df:9d:1a:f5:09:0f:ef:b2:17:4c:
                    93:03:26:bf:af:5a:36:3c:93:fa:87:10:e1:82:88:
                    64:5b:33:63:1f:89:56:09:70:79:7b:8b:bc:63:d1:
                    28:ae:e7:a4:7b:5f:6d:22:fb:76:b3:61:1b:dd:59:
                    2c:6d:45:cf:14:c2:a2:a3:61:bd:00:3e:03:41:87:
                    3e:2e:8b:e7:33:09:ae:7c:97:f5:e6:30:bf:3a:a7:
                    1b:94:10:2f:4d:d1:99:eb:68:db:06:ea:09:19:80:
                    21:14:44:a0:8d:aa:cb:46:a0:e1:3d:5c:e0:9a:e7:
                    68:18:5a:5e:ca:33:34:92:89:c6:01:10:0f:9d:48:
                    60:df:de:68:e7:7c:51:2c:84:14:30:30:93:7a:f3:
                    df:54:a5:d8:d1:68:d6:ed:f0:9c:39:d1:de:fb:dc:
                    32:aa:0c:8c:6b:d6:f8:04:ef:e2:73:4c:3b:2f:a0:
                    2c:e2:04:91:ee:86:f0:6a:b6:e3:09:94:d5:17:39:
                    35:f1:cc:16:a5:05:88:26:e6:6c:60:a1:62:94:c2:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:22:E9:99:B8:A1:C3:24:FD:ED:63:9A:5F:D3:63:F7:09:9F:22
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e32342e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:58:57:33:d2:d0:98:1a:38:5b:e4:1c:f0:cc:37:e5:dd:
         ad:1a:3a:5f:d6:98:7c:45:4b:ed:3e:02:df:a4:71:c8:62:ea:
         da:f7:ab:64:98:2d:55:7a:a1:97:06:d4:44:a1:c5:20:ad:bc:
         fd:a4:26:a7:87:07:3e:23:41:f6:8d:a6:94:ae:2f:14:02:da:
         82:d8:47:e5:1d:38:24:be:ee:89:84:49:5c:40:df:08:e9:ef:
         1e:89:55:4e:34:60:5d:e9:7c:61:57:9f:02:85:a0:a3:c5:97:
         d9:b0:e7:8f:dd:99:b9:4f:dd:c5:f9:34:20:8a:22:99:0f:62:
         36:e9:69:7f:ae:91:04:f6:1b:1b:26:37:c3:43:55:ce:24:a8:
         7c:b2:9a:f6:9d:c2:f6:f2:b9:ce:f2:0d:8c:d3:77:03:7b:c7:
         d6:91:09:34:6b:64:db:dd:8d:3c:65:12:47:77:7d:9d:80:e2:
         16:a7:e3:fe:19:f9:94:d8:ac:b5:f7:f2:02:1f:86:9d:67:a4:
         ae:50:39:82:eb:e5:ef:46:87:7d:c0:11:a8:a2:d1:2e:f5:39:
         04:2d:cb:4c:e0:49:03:7c:d6:cc:6f:83:ad:b7:d3:c1:29:dc:
         67:b1:2a:85:fc:39:0a:75:23:2e:bb:e2:f7:57:b0:34:fd:c9:
         a9:6c:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:08:46 2025 by rpki-client