Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e31362e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e31362e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          KBrQtAX+o4e8QGCqmizSiBqiy476wFZjaL+Tpy2y3Rc=
Subject key identifier:   D2:2E:A5:36:B5:09:FA:58:8F:0E:CD:56:E5:1C:DD:A1:77:F9:FD:0E
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       63633FADF2D21F883D6BFAF7ED33184365E3F522
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e31362e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:02 +0000
ROA not before:           Tue 01 Jul 2025 16:50:02 +0000
ROA not after:            Tue 30 Jun 2026 16:55:02 +0000
asID:                     18822
IP address blocks:        190.215.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:63:3f:ad:f2:d2:1f:88:3d:6b:fa:f7:ed:33:18:43:65:e3:f5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:02 2025 GMT
            Not After : Jun 30 16:55:02 2026 GMT
        Subject: CN=D22EA536B509FA588F0ECD56E51CDDA177F9FD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:fc:48:6f:fc:4c:a6:79:55:b3:28:7f:ad:
                    06:34:1c:fb:fb:05:15:ce:d8:d5:d1:3d:4a:31:90:
                    ac:bd:3a:bb:b2:03:77:0b:63:12:21:c4:e4:30:e5:
                    ce:15:04:3a:c5:c7:30:ca:51:15:e6:d7:f7:4a:49:
                    d7:e0:45:ad:27:0e:93:ed:1a:29:8f:51:f3:4b:d2:
                    f2:3c:a0:23:6b:07:14:25:7c:c7:03:39:16:fb:a9:
                    bb:a4:cc:f8:ac:ad:a9:b4:01:a1:b7:39:89:35:25:
                    3d:ca:b5:3b:47:66:09:a9:b7:53:1a:6b:be:e8:01:
                    de:ab:e1:06:89:0a:ea:fb:73:09:12:7a:87:2a:3a:
                    92:3b:98:8b:8d:f2:d5:e0:cb:ef:c2:5e:6d:ed:72:
                    7a:1a:6b:b5:18:79:61:6e:1a:77:f4:fa:a6:e6:b3:
                    af:d5:4d:2f:0f:9b:1e:80:66:5d:ed:6f:8b:90:87:
                    6b:61:cf:00:f8:73:00:1a:01:e1:bf:f7:8a:fe:6c:
                    a8:05:5a:56:1c:4c:e7:84:36:c6:95:05:ff:98:f3:
                    29:e7:03:22:54:71:bf:3f:84:72:d3:72:c3:1b:52:
                    72:43:05:e5:e4:0a:53:f4:da:45:99:30:e1:89:8e:
                    c9:72:d8:74:30:93:82:e7:55:ab:12:33:54:4e:4e:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2E:A5:36:B5:09:FA:58:8F:0E:CD:56:E5:1C:DD:A1:77:F9:FD:0E
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e31362e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:d6:87:05:39:c2:23:a1:c9:9c:25:06:24:e8:7e:8f:fc:
         8a:f6:58:7e:03:39:96:bd:42:53:1f:9e:9f:b4:f2:a6:9d:37:
         66:06:a6:53:2a:ed:ae:81:1e:0e:89:54:20:5d:83:d3:c7:32:
         1c:b1:1a:57:1f:25:2a:8f:bc:80:4d:b0:b0:c2:c1:ea:32:01:
         19:82:38:46:da:44:31:47:13:11:a8:64:ec:a6:90:36:83:e2:
         b7:88:0f:3d:3a:9e:f9:8d:b4:a3:d7:56:09:2c:2a:ef:b3:02:
         b2:45:3b:87:36:df:03:03:ad:15:24:77:ca:4e:d8:dc:82:f6:
         ef:e5:ba:2a:bb:dc:1d:52:d4:00:d5:db:3d:e1:68:4b:ee:95:
         d3:36:b8:8e:e9:9e:e8:1f:e0:d1:ae:69:cb:2e:51:2f:4a:9d:
         c6:b6:9b:91:25:ed:c6:ba:b7:9e:51:45:44:da:01:a7:c4:1f:
         6d:95:4c:68:e6:f5:85:71:6d:5d:24:e1:1e:8e:b8:c5:57:1d:
         c0:7d:74:19:9c:9f:30:e5:a2:a9:4b:29:29:ba:69:c2:19:43:
         b1:19:e3:4f:ae:dc:04:11:fe:47:18:3f:0d:1c:58:f5:7d:33:
         89:10:23:a1:52:db:25:3e:2d:03:71:b6:6f:ed:69:ea:cb:8a:
         58:cb:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:37:49 2025 by rpki-client