Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34332e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e34332e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          l+nTc4Mgq1KjlKDnROFyL0x6+KWtbJ5/8R4NUEb6hcs=
Subject key identifier:   15:74:C4:7B:B4:F3:F3:5F:62:C7:05:B7:E2:E8:16:A8:0F:20:25:04
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       378C1E299DDFDA6FD2FC028F6A5AD1DC69F46453
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34332e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:08 +0000
ROA not before:           Tue 01 Jul 2025 16:50:08 +0000
ROA not after:            Tue 30 Jun 2026 16:55:08 +0000
asID:                     18822
IP address blocks:        190.196.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8c:1e:29:9d:df:da:6f:d2:fc:02:8f:6a:5a:d1:dc:69:f4:64:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:08 2025 GMT
            Not After : Jun 30 16:55:08 2026 GMT
        Subject: CN=1574C47BB4F3F35F62C705B7E2E816A80F202504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:a7:d1:a2:e3:de:70:de:c1:48:f8:7e:13:
                    82:2d:46:ea:29:9c:07:e4:28:3b:a1:19:8a:2d:ae:
                    3c:24:7d:ce:c7:25:f2:be:f7:d3:90:6b:ef:fa:3a:
                    d3:de:0a:41:82:02:83:af:1b:a7:45:8c:9b:c7:9a:
                    11:15:97:e3:f5:a9:45:6c:36:1d:c2:b3:e9:99:af:
                    f8:a1:d3:f2:90:fa:db:4d:8a:7d:b7:37:a5:8d:bf:
                    d0:ae:ff:dd:93:c6:04:06:a2:d8:28:2b:1b:64:d7:
                    3b:29:7e:e4:94:b0:17:fe:6d:f1:13:0d:1d:20:33:
                    93:64:84:2a:21:b1:f2:8f:20:c4:79:56:91:15:7f:
                    95:3d:09:7e:4f:d0:8f:93:38:d3:a8:a5:3f:69:34:
                    ff:1a:54:75:cb:cf:1c:86:73:0e:1d:4e:c1:87:a9:
                    68:32:29:f8:c5:9f:b3:1b:e3:1d:c7:20:09:8c:e5:
                    01:a2:87:e9:cc:30:f8:bd:cd:bb:43:ea:07:77:50:
                    a2:da:3a:b6:b0:4f:99:b3:c6:f1:2f:e9:c3:74:08:
                    d8:5f:f8:97:07:c6:98:d2:d1:2b:6e:0e:19:38:33:
                    30:73:7c:4b:3c:b0:5a:59:b1:fd:29:e8:75:71:7c:
                    19:f3:c7:6f:bd:94:c8:dc:20:cc:24:c3:01:ff:5a:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:74:C4:7B:B4:F3:F3:5F:62:C7:05:B7:E2:E8:16:A8:0F:20:25:04
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34332e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:29:76:a1:4f:ef:22:8a:6d:7f:ac:c4:4e:57:c1:f5:7d:fa:
         38:ce:75:7f:ce:1f:e2:5c:f5:59:16:92:f9:e6:61:4f:54:0d:
         22:d9:7b:27:7e:4b:7c:97:78:85:c5:84:a1:c1:bd:bb:86:df:
         ed:1c:7d:c5:d7:1f:99:e6:05:d7:e6:4a:e7:46:a3:67:c6:1d:
         54:3b:46:b7:5d:43:b6:9a:30:20:88:6b:2a:fc:3f:98:00:0e:
         f2:c1:f7:45:48:70:cf:a5:7e:69:e6:ec:8b:bb:68:de:c2:c7:
         f0:23:29:b0:1c:0a:4f:c0:33:41:b5:5f:a7:98:6a:bf:1b:51:
         07:76:60:4a:9b:eb:e0:bd:2b:4f:ff:19:7d:c8:dc:8f:66:61:
         db:1a:54:44:4b:bd:82:24:cf:1d:04:1c:58:3a:a1:55:9f:32:
         40:13:39:d4:42:43:ff:11:1e:a3:ad:ab:dc:31:b6:70:70:38:
         89:1c:8a:59:90:aa:27:89:f8:39:47:81:98:98:b2:03:ab:00:
         c5:90:b2:96:c3:56:9d:5c:b8:67:31:01:ae:77:f6:82:83:08:
         88:7e:d9:42:95:b0:74:95:08:7d:5e:1c:c4:e5:e0:9c:3f:e9:
         e9:07:1c:f4:c6:61:36:ec:13:da:07:bd:59:ea:fc:3f:f8:c2:
         58:d1:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:03:49 2025 by rpki-client