Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3133362e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e3133362e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          t3SXmXH94bGKrbecUV7VG/93FTkKy+W6E6G0Z7bnP1M=
Subject key identifier:   DB:F9:CF:61:8F:11:32:5B:15:CC:F8:41:BC:CD:65:AC:79:A0:5E:DC
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       62A8415A2D7F6335B944D3C3B70599BDA0B6390E
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3133362e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:14 +0000
ROA not before:           Tue 01 Jul 2025 16:50:14 +0000
ROA not after:            Tue 30 Jun 2026 16:55:14 +0000
asID:                     18822
IP address blocks:        190.215.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a8:41:5a:2d:7f:63:35:b9:44:d3:c3:b7:05:99:bd:a0:b6:39:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:14 2025 GMT
            Not After : Jun 30 16:55:14 2026 GMT
        Subject: CN=DBF9CF618F11325B15CCF841BCCD65AC79A05EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:56:44:dd:9d:13:17:54:6c:9b:4f:b0:a2:
                    eb:1b:e6:f8:4a:be:af:5c:c9:01:ff:ed:00:ee:ad:
                    3e:e7:f8:44:68:29:80:e0:d5:83:13:a0:0e:d8:78:
                    28:68:93:15:58:f5:96:d2:9f:9b:8e:ef:8e:63:f4:
                    35:57:fd:c7:8c:fd:6e:86:99:3b:39:c8:a1:27:cc:
                    a1:ba:71:c2:6c:59:b8:24:9c:4e:72:28:09:21:eb:
                    53:8d:27:ab:7f:8f:26:7f:33:ed:df:f5:c8:1e:b2:
                    d9:31:c8:19:1c:d8:e4:94:82:af:b3:4e:0a:d8:dd:
                    dc:15:5f:ca:d7:08:5f:49:af:df:b3:fe:a8:35:20:
                    3c:3a:46:de:18:d0:c6:8f:24:54:ea:c7:10:30:65:
                    e1:d7:39:89:e2:62:fd:54:dc:db:b7:b0:d5:77:32:
                    0c:3d:b7:86:11:f2:16:4b:c5:e9:75:4b:d0:1c:b2:
                    36:27:5d:7c:ee:e7:12:37:9e:6c:21:8f:64:69:26:
                    1c:ab:99:6d:8a:3d:65:e1:34:0f:27:d7:8c:af:36:
                    3d:d9:51:1b:ec:95:84:47:e5:84:17:91:82:9c:0f:
                    7c:30:35:84:0a:9c:3a:36:32:b7:fa:4b:81:3d:df:
                    8d:25:de:4b:a1:59:91:13:39:a2:4e:52:c8:ab:fd:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:CF:61:8F:11:32:5B:15:CC:F8:41:BC:CD:65:AC:79:A0:5E:DC
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3133362e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:3b:60:c7:7c:93:47:3f:21:5c:06:d6:a3:4e:1f:dc:ba:d4:
         7d:30:7e:87:bd:43:57:21:c8:f1:ba:3a:6f:62:61:f5:82:f0:
         cb:46:7d:04:90:e9:ad:ea:ff:a5:0d:de:97:3d:bc:6f:17:2f:
         3c:70:84:5b:56:3d:7f:6d:a6:a9:5d:3c:d5:bf:99:5f:91:6c:
         43:a8:77:3d:10:d5:3d:a4:05:8d:78:22:be:b9:ed:b3:cd:7a:
         79:34:b8:ac:e3:c7:c8:2a:f8:5b:68:4c:e8:a1:48:5a:4a:81:
         e9:28:39:b1:01:bc:54:d2:d2:89:7f:7a:18:dd:c6:aa:68:e9:
         78:e1:f2:9e:5c:c6:f6:66:4d:e5:2b:6d:19:6f:af:11:80:1e:
         2b:52:85:4f:66:92:92:e4:a1:f9:fb:f5:db:90:e1:b7:d4:d5:
         57:34:2f:81:d8:60:e4:49:9b:72:11:d3:ec:14:f9:cd:28:07:
         a4:46:3c:de:11:fe:c6:1a:eb:0c:13:b1:bb:85:0b:be:3f:c9:
         7b:51:31:4e:45:a6:4b:2a:32:e7:d6:10:a3:31:c4:10:63:4a:
         fa:67:ee:a5:4e:0f:6d:4a:d4:86:3c:1a:ed:02:74:c3:b9:5a:
         2a:40:58:50:63:66:11:78:67:a2:83:44:a0:48:5d:e7:b7:18:
         e3:4c:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:04:07 2025 by rpki-client