Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          3/Inm5LJYJW5tl4GCxjPc4l8sIB3k3dn7tnotJ8ZCCU=
Subject key identifier:   37:59:B6:F4:DD:FB:6C:00:28:AE:7B:00:67:A4:3F:03:D1:B2:7E:A7
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       7CD9D822F2379CFFC85BD27A2F5C0943E8B8677A
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:09 +0000
ROA not before:           Tue 01 Jul 2025 16:50:09 +0000
ROA not after:            Tue 30 Jun 2026 16:55:09 +0000
asID:                     18822
IP address blocks:        190.215.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d9:d8:22:f2:37:9c:ff:c8:5b:d2:7a:2f:5c:09:43:e8:b8:67:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:09 2025 GMT
            Not After : Jun 30 16:55:09 2026 GMT
        Subject: CN=3759B6F4DDFB6C0028AE7B0067A43F03D1B27EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:4e:fe:75:89:24:81:d2:30:96:db:5e:0c:
                    a6:a0:ae:e3:d5:b9:80:6d:0a:28:8e:9b:74:18:1c:
                    6a:d8:88:7e:b5:e4:bf:f9:ab:a8:25:92:60:a9:b0:
                    f8:7f:77:c6:3f:b3:18:4e:21:b4:56:4a:3e:18:c9:
                    bf:0e:84:73:4a:2e:5d:ab:29:e7:ee:56:39:6c:d7:
                    9e:ba:f8:52:ba:43:44:55:10:76:45:4d:c1:a0:e4:
                    0f:b9:f6:8c:dd:a9:83:69:c9:45:b3:13:2b:ec:56:
                    c1:fb:9f:05:18:1e:ee:1f:10:03:c9:c9:cc:34:6f:
                    0f:53:34:1d:a3:f9:18:f9:82:79:9a:a1:dd:67:dd:
                    e6:5a:bd:99:31:11:50:ab:b8:36:10:6a:83:95:99:
                    c9:3d:1e:39:60:8d:d1:19:7b:7e:62:b7:5a:2a:c7:
                    d4:6d:7b:f1:b2:0e:9a:61:fe:31:9b:7f:3e:35:9f:
                    6b:1f:cb:18:19:17:9d:65:89:fc:44:96:27:43:ed:
                    dc:2c:37:f8:f2:d5:74:2f:ae:cf:15:98:cf:58:7d:
                    22:6e:cb:7d:b5:91:57:e8:31:ca:79:3a:c9:12:f1:
                    d5:98:43:fc:5b:97:14:24:7c:b3:c9:da:b1:e7:c1:
                    03:de:dc:b9:01:71:1f:be:58:1e:4a:79:b3:6c:76:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:B6:F4:DD:FB:6C:00:28:AE:7B:00:67:A4:3F:03:D1:B2:7E:A7
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:31:35:03:d6:44:fd:79:d5:f4:4a:1b:75:ca:1d:97:86:32:
         9f:43:f0:b0:83:d9:0c:29:61:97:fe:76:5b:99:ac:2f:ec:7a:
         9a:7a:a1:b6:69:6e:91:6b:c4:0c:4c:97:36:a4:af:51:4b:4a:
         85:a4:e2:c1:2a:3b:d4:cc:61:69:94:a3:8e:45:9b:fe:3b:fa:
         9f:f2:c7:8a:65:05:20:02:22:8b:97:fb:6e:a0:f6:15:fd:f4:
         5c:d0:bb:e4:37:c3:2a:f2:16:c8:2b:92:20:0c:d0:d3:78:cc:
         fb:4b:60:65:60:9c:08:85:4b:4b:f2:48:d2:0a:a0:99:27:0b:
         59:ed:3d:83:e4:4b:6a:23:34:9b:bf:b7:e5:5e:e6:d5:c2:93:
         a7:38:75:31:32:5d:75:78:63:df:12:d0:d0:f4:bc:4b:fd:47:
         41:d2:f0:15:a7:90:8c:50:6c:30:bc:00:6c:0f:3a:cb:43:74:
         af:93:eb:b2:c0:56:17:a7:42:31:30:26:88:7c:fc:23:28:07:
         83:87:0b:a7:67:68:c6:0b:10:ed:f0:4d:81:5b:98:cd:54:19:
         8f:75:eb:ed:70:76:7e:8b:c3:df:89:51:75:10:f6:a1:03:53:
         0f:79:79:41:7d:74:41:13:74:a2:89:ae:0e:9e:da:49:2b:fb:
         3f:0d:fd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:05:02 2025 by rpki-client