Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e33332e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e33332e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          uvC3VtGE4IWoAu9S/NXS8NVp3oZW/Vl+NctcLn/FSBo=
Subject key identifier:   B8:8E:12:4E:CE:2D:53:5D:59:5D:8D:A2:63:26:5D:0A:7B:E1:F7:37
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       2DE3B6B40D0C10F5FDDF8772877CCDA750719674
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e33332e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:13 +0000
ROA not before:           Tue 01 Jul 2025 16:50:13 +0000
ROA not after:            Tue 30 Jun 2026 16:55:13 +0000
asID:                     18822
IP address blocks:        190.196.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e3:b6:b4:0d:0c:10:f5:fd:df:87:72:87:7c:cd:a7:50:71:96:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:13 2025 GMT
            Not After : Jun 30 16:55:13 2026 GMT
        Subject: CN=B88E124ECE2D535D595D8DA263265D0A7BE1F737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:16:fa:4a:5f:53:7f:0d:b3:d5:1b:01:b7:
                    65:95:00:83:12:73:08:c5:f2:f5:05:25:96:fa:24:
                    6f:43:bb:9b:f1:4b:e2:0f:da:e0:92:9d:99:59:41:
                    f1:21:c8:e5:bc:4d:20:14:9d:c5:1b:ce:ce:90:aa:
                    80:df:c7:cf:f6:26:06:59:2d:9a:c7:21:a6:48:12:
                    1a:e7:93:58:d3:92:ab:a2:11:80:95:53:3b:54:e3:
                    89:63:73:6b:d9:b3:cb:a1:7d:15:9b:36:09:00:f5:
                    37:c6:a3:c1:8f:5e:55:b6:8d:3c:8d:8b:f4:cb:a1:
                    3b:36:22:4b:ba:6f:a5:78:0c:cb:da:0f:35:5d:35:
                    aa:8c:bd:83:7a:cd:e8:14:89:e2:1a:1e:e5:8c:83:
                    72:6d:75:39:36:07:ce:1f:cb:57:eb:b6:a6:59:ea:
                    de:9a:6f:f6:01:2a:4a:5f:dd:26:c9:6a:8f:9f:32:
                    35:ec:1e:65:db:65:c0:87:4c:c3:7b:65:9d:2e:7b:
                    cb:a2:06:b5:69:8c:2a:42:ce:a8:23:f8:d9:66:a0:
                    29:9e:9c:d3:8f:64:1d:15:0f:20:9a:a1:9a:a0:06:
                    a6:20:ea:bd:e8:1d:81:a7:50:b4:4b:23:9d:c7:d0:
                    2d:17:c0:d6:e1:ba:f1:fc:ad:04:f6:a8:51:a6:b6:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8E:12:4E:CE:2D:53:5D:59:5D:8D:A2:63:26:5D:0A:7B:E1:F7:37
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e33332e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:04:91:b0:8d:c8:44:2c:89:67:59:fd:9c:48:66:85:16:
         7a:b0:0e:cb:48:de:3c:ea:36:85:5c:2b:43:18:e3:b6:49:e3:
         48:49:68:d8:87:81:f4:2d:c8:b8:58:f2:a9:c2:4f:8b:99:11:
         8c:f0:86:58:2b:18:c8:9b:f2:6e:31:31:0e:87:95:6a:ee:c9:
         21:a2:a8:33:69:46:17:7f:23:82:a0:2b:3a:f0:20:fd:73:b7:
         98:52:21:fe:bb:51:ce:b9:4c:6c:a8:e9:77:d5:1e:5e:93:6e:
         49:77:0e:c4:c2:7f:4b:02:ae:aa:27:62:3c:c2:29:fc:35:71:
         3a:9d:5f:c0:05:90:2a:72:e9:d4:e2:ea:eb:04:a2:ec:71:91:
         81:51:18:7d:93:b5:dc:7d:33:6a:ec:59:d3:93:bf:48:ab:ca:
         eb:4f:69:52:2e:9c:86:79:21:f5:93:12:94:cd:a1:de:88:1d:
         b2:c4:c6:3f:a5:6b:ce:6e:91:f4:5b:56:1a:b6:92:e7:b6:12:
         5d:57:3b:f5:8e:a8:a8:72:48:22:51:dd:07:61:fd:ed:b4:58:
         ba:b3:68:ef:9d:4a:1c:8f:2b:4d:9e:c9:e7:eb:7a:1a:97:a1:
         67:bb:75:ec:e9:3f:0b:61:98:68:c5:a9:9b:db:1b:50:c6:b7:
         a0:f1:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:03:45 2025 by rpki-client