Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3133342e302f32332d3234203d3e203138383232.roa
File:                     3139302e3231352e3133342e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          OsRxUZYezal1IoZ1gxfkqDbh+vDImXsQQkfvXzlcUQo=
Subject key identifier:   CF:1F:FA:12:08:CC:5B:C4:4F:62:7C:73:E6:35:58:F8:7A:C9:D8:91
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       1AC30D903511F5F8561F8C96B6A268EC5555032B
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3133342e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:12 +0000
ROA not before:           Tue 01 Jul 2025 16:50:12 +0000
ROA not after:            Tue 30 Jun 2026 16:55:12 +0000
asID:                     18822
IP address blocks:        190.215.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c3:0d:90:35:11:f5:f8:56:1f:8c:96:b6:a2:68:ec:55:55:03:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:12 2025 GMT
            Not After : Jun 30 16:55:12 2026 GMT
        Subject: CN=CF1FFA1208CC5BC44F627C73E63558F87AC9D891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:ae:0f:9d:55:a3:22:e0:d8:fc:a9:0a:8a:
                    20:d4:9c:ef:8b:8a:a5:f9:98:ae:33:5c:39:d2:2b:
                    51:eb:74:37:e7:4e:ab:84:dd:aa:ae:73:c1:ff:55:
                    7b:2a:f1:82:40:84:2f:af:75:74:a0:74:96:b8:e2:
                    e3:0a:a5:fe:94:01:12:38:58:f3:99:83:90:1a:8c:
                    89:b7:d1:d0:cc:dc:2a:c8:ff:a5:17:9f:ed:5f:92:
                    ed:82:f4:05:5b:9c:73:0e:8f:dc:7d:74:c0:e7:90:
                    84:98:a6:0d:45:08:f2:78:97:00:6a:d1:26:c9:1b:
                    18:26:6b:3d:cb:b0:a2:44:99:57:97:28:36:92:64:
                    e2:2a:65:96:21:2f:e7:08:30:b2:f1:e8:53:26:b2:
                    a5:ec:70:2f:2c:c5:19:49:fe:83:73:31:2e:88:29:
                    fe:3a:30:1d:96:aa:02:db:f6:ec:c8:c6:3a:72:77:
                    8a:c0:f6:54:85:2e:5f:97:ab:7b:de:9d:43:b9:70:
                    3d:9c:8c:96:d1:9d:97:a0:30:8d:4c:ba:71:8e:04:
                    34:f9:f4:e0:38:57:53:29:82:94:2d:c8:c2:01:4d:
                    fa:df:eb:3c:b5:32:0d:f1:1b:cb:22:22:6e:a0:ef:
                    d2:f0:fa:be:c1:15:4f:60:af:d7:51:b7:8f:37:34:
                    ab:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:FA:12:08:CC:5B:C4:4F:62:7C:73:E6:35:58:F8:7A:C9:D8:91
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3133342e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:9e:d7:e6:dc:61:cd:fd:ea:c8:73:e2:9f:2a:1b:87:b2:
         0d:89:d0:46:81:c7:fa:4a:1f:04:98:5e:66:25:4e:f4:3e:a9:
         35:80:6a:ef:67:d2:ca:2d:dc:86:df:a8:0f:78:5f:85:dd:fd:
         89:1a:e1:c7:62:7b:e1:6c:e6:ca:51:b9:8e:48:ff:82:4f:c8:
         06:e3:e0:82:7a:79:13:5d:3b:7c:df:e2:78:92:13:4c:67:d2:
         e9:d2:7a:28:e1:ad:8f:9c:b5:cd:94:a9:9e:11:3e:23:cc:8d:
         3e:31:99:4a:c8:a3:9d:93:97:58:ec:4c:fb:60:59:86:f9:5f:
         90:1e:9c:b3:57:a2:60:f2:35:1d:9e:2b:ea:10:a3:bd:56:04:
         5c:84:91:18:9e:d9:ee:2e:14:f2:02:d0:7c:d0:8c:b5:b9:78:
         9d:6b:5a:d3:35:39:e7:63:41:85:a3:bd:ac:33:66:80:f5:56:
         52:30:40:cc:0d:1b:e4:06:f3:91:ba:6d:34:e2:45:f4:a9:fd:
         0f:77:49:a2:84:e5:89:bb:01:90:a3:40:27:95:b8:40:fe:7d:
         b7:7c:76:6c:63:73:54:d6:62:9e:86:2f:96:d6:9b:31:f5:80:
         ee:16:d7:96:66:9a:b2:95:12:93:cd:14:b7:8c:0a:15:64:12:
         c5:a5:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:37:49 2025 by rpki-client