Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132382e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e3132382e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          vA/cDK7JHaJziSl+9hUHHIDSRdCypRCpAClKAH6lonc=
Subject key identifier:   4B:ED:73:E4:2D:75:53:07:3F:9A:8D:40:E6:F5:3D:6B:8B:84:52:E3
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       7D455C8B2688D9228E955CC7615AE99C16A77CEA
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132382e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:25 +0000
ROA not before:           Tue 01 Jul 2025 16:50:25 +0000
ROA not after:            Tue 30 Jun 2026 16:55:25 +0000
asID:                     18822
IP address blocks:        190.215.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:5c:8b:26:88:d9:22:8e:95:5c:c7:61:5a:e9:9c:16:a7:7c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:25 2025 GMT
            Not After : Jun 30 16:55:25 2026 GMT
        Subject: CN=4BED73E42D7553073F9A8D40E6F53D6B8B8452E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:a9:14:f2:0e:a6:28:bd:06:0b:ae:b7:0a:
                    da:e4:af:4d:c7:0a:8a:42:f6:ae:7a:bf:a7:70:48:
                    3e:49:3f:1d:ef:6c:79:92:d1:99:7e:a4:a3:13:e6:
                    e9:a4:cd:49:f2:9e:3b:78:4d:da:da:f0:f1:07:79:
                    4e:0c:3e:57:2c:4c:3b:5e:1c:81:a7:a0:c8:9a:eb:
                    d6:e5:72:af:a4:bf:6c:f5:4e:a9:db:68:11:0e:c9:
                    7c:53:42:ac:bb:df:19:83:c1:f7:07:f9:cf:50:4b:
                    69:e3:b2:3d:29:92:d9:68:a5:4c:d0:51:83:bb:94:
                    eb:7f:0d:ab:b1:5f:75:43:94:39:22:7a:4f:ea:6c:
                    5f:85:91:83:eb:8c:6c:d8:60:28:8b:71:23:41:17:
                    82:c3:a3:43:8c:55:64:c8:6f:ad:14:88:cd:76:cb:
                    2d:c9:6a:99:6c:24:dd:5d:b3:71:f8:96:10:7f:e8:
                    f4:3a:ab:ae:eb:0d:2a:6a:03:07:06:f9:66:87:6a:
                    0c:89:38:29:90:ce:0d:44:ac:17:14:6a:79:15:c6:
                    59:70:7f:9a:59:ef:36:a2:cf:06:11:25:71:69:34:
                    23:60:fa:38:54:a7:8d:b8:17:cf:ae:f2:e8:62:7d:
                    2c:12:04:20:2d:d0:0b:41:90:ee:8e:0f:49:05:7e:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:73:E4:2D:75:53:07:3F:9A:8D:40:E6:F5:3D:6B:8B:84:52:E3
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132382e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:8e:78:86:1a:00:2f:9f:48:a3:0a:ff:7b:52:c8:ea:83:
         76:d9:ad:c9:d8:8b:90:b4:f3:6c:4a:1c:b9:1f:63:11:73:0f:
         d6:25:0e:1b:f6:13:f8:51:47:24:88:88:f1:96:1f:d8:c3:88:
         09:f7:53:b8:2e:e3:5f:4e:01:d5:f0:c0:1b:48:e1:a0:d8:15:
         d1:ed:e6:f4:ab:49:ca:92:e2:63:66:a7:10:bb:f8:30:de:4d:
         0f:05:b2:cf:f3:d8:0e:56:ef:d0:bc:5d:66:5f:a4:e2:54:e6:
         99:24:6e:0a:b3:bd:bc:1c:38:36:61:d2:84:da:17:52:c5:86:
         1e:7e:ff:23:e9:84:f7:73:cb:70:cb:7b:3c:7f:f5:67:ce:63:
         45:8f:27:cf:03:cc:d4:1a:81:c3:e0:d1:3c:df:c3:54:9f:2d:
         f5:8d:d7:1b:ec:ef:9e:5f:25:26:02:b3:54:e6:a7:78:67:8d:
         c9:de:fe:4f:f7:51:8a:54:c6:43:9c:46:cc:2f:15:6b:76:6b:
         40:ce:3a:e4:5e:76:6a:71:3a:0d:d2:ca:c9:34:ed:00:bf:10:
         55:5c:d8:01:8b:0c:2f:c2:c7:42:5d:91:b7:ce:98:c2:95:96:
         4b:ab:3f:6f:3e:f1:e8:8d:c8:05:cb:2d:6d:31:1d:3c:6b:9c:
         1e:30:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:03:47 2025 by rpki-client