Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e36302e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e36302e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          86/zUvLk5/r1gP+kHOn64Y7v93jdfx80USg4YSIWKzY=
Subject key identifier:   BE:6C:4B:3C:33:E6:36:B3:4E:39:50:25:55:EB:9B:35:3D:B5:FD:02
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       219A1DFB42D8604902B7D5313C9B6D2405E80C6E
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e36302e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:13 +0000
ROA not before:           Tue 01 Jul 2025 16:50:13 +0000
ROA not after:            Tue 30 Jun 2026 16:55:13 +0000
asID:                     18822
IP address blocks:        190.196.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9a:1d:fb:42:d8:60:49:02:b7:d5:31:3c:9b:6d:24:05:e8:0c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:13 2025 GMT
            Not After : Jun 30 16:55:13 2026 GMT
        Subject: CN=BE6C4B3C33E636B34E39502555EB9B353DB5FD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:25:ab:9a:f6:74:6a:df:10:d6:df:37:5d:
                    d2:cd:5c:5f:4c:21:d2:cd:93:25:0f:26:4b:54:90:
                    14:98:a2:c0:23:1d:6c:a4:8b:aa:da:83:5e:6f:39:
                    d6:07:ec:31:01:18:6f:c2:12:79:e5:f0:f6:57:4b:
                    eb:fc:0f:eb:66:28:e2:d5:b2:3b:84:a9:c4:5d:57:
                    ce:74:33:4f:f4:ea:e9:8b:79:07:69:1c:34:1f:21:
                    9e:62:2b:1a:be:2f:a0:ff:98:d9:23:fa:2c:0e:49:
                    92:81:7b:9e:04:3c:06:d1:5f:e4:c5:aa:b2:6d:42:
                    78:be:bf:54:72:5d:db:aa:7d:29:06:88:6c:a9:81:
                    93:76:17:60:81:e9:3c:d0:e8:49:2d:87:8f:09:df:
                    3b:b5:1b:16:fb:fd:39:14:25:73:c3:d5:4f:c6:72:
                    59:a4:95:5e:4f:6c:76:03:b5:d4:5c:64:9b:19:3d:
                    e8:ba:ce:d1:d7:25:c1:3f:0b:92:ff:5d:77:13:85:
                    f3:28:d7:12:19:e6:4c:82:58:da:ba:22:d2:b5:27:
                    3c:21:1c:65:44:72:23:6f:5a:ec:8b:1f:ed:9c:1e:
                    41:7b:a1:ed:67:00:99:14:96:20:72:39:b4:33:a5:
                    9e:46:6a:2a:c5:d4:37:51:c2:d5:a5:a5:95:cb:63:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6C:4B:3C:33:E6:36:B3:4E:39:50:25:55:EB:9B:35:3D:B5:FD:02
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e36302e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:89:1a:ff:57:1a:77:44:20:2d:f2:0f:53:47:22:20:4a:ce:
         95:b1:7f:cb:0a:7d:88:d4:34:15:49:c3:36:83:87:12:ae:6b:
         cb:b5:43:05:0e:8b:10:18:75:2c:a6:b0:65:b5:ce:30:2f:c2:
         77:3c:71:09:62:78:28:6c:60:8c:d9:e2:66:2b:d8:a2:76:eb:
         50:66:ec:c2:d5:93:20:c5:17:4e:dd:ab:74:ee:26:27:4d:b3:
         2a:77:c7:ff:86:08:b7:3e:de:74:9e:6f:a3:32:ea:4c:b5:7b:
         77:c6:18:c1:f9:d6:56:78:8f:5a:9d:34:1d:1f:1d:fd:85:b3:
         59:c3:da:24:8d:e7:6c:ce:6d:95:a4:3a:97:89:65:a6:3d:f2:
         74:2a:c2:0e:b3:b7:b2:17:2d:05:9d:20:4d:19:41:78:ea:a6:
         01:80:2a:01:5c:dc:57:9d:fa:eb:07:41:29:f0:f6:3e:2b:7a:
         89:51:28:3e:90:46:88:b6:5d:25:d7:10:d4:13:97:42:ed:98:
         2e:f6:53:3e:1d:e8:40:12:42:a1:43:f4:41:cf:86:bb:f1:01:
         98:f8:6d:d3:79:25:7f:9a:79:13:4d:6c:3b:09:80:9f:66:41:
         13:bb:49:28:f2:dc:db:a7:38:68:06:e3:bd:6c:49:00:49:72:
         67:c3:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:33:39 2025 by rpki-client