Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e32342e302f32332d3234203d3e203138383232.roa
File:                     3139302e3231352e32342e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          F68Bh5dTyLWIBr5y3N6aq4DHmgbZwB2KRly3g9gWEWs=
Subject key identifier:   63:8B:A0:E5:B3:C4:CB:F1:ED:1E:D1:22:33:01:89:16:9E:C6:16:C8
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       1340AA678BB3EA4CBF51A4F75A2C03845A24A881
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e32342e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:04 +0000
ROA not before:           Tue 01 Jul 2025 16:50:04 +0000
ROA not after:            Tue 30 Jun 2026 16:55:04 +0000
asID:                     18822
IP address blocks:        190.215.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:40:aa:67:8b:b3:ea:4c:bf:51:a4:f7:5a:2c:03:84:5a:24:a8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:04 2025 GMT
            Not After : Jun 30 16:55:04 2026 GMT
        Subject: CN=638BA0E5B3C4CBF1ED1ED122330189169EC616C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:28:4d:0e:94:05:22:92:9c:48:5d:af:72:
                    9b:33:ab:d2:0e:25:ed:83:b5:5a:9a:12:ab:8c:2d:
                    74:b1:bd:4f:7b:8d:8e:d2:57:0a:75:0d:20:0b:9b:
                    1a:e0:58:e3:d1:73:eb:31:c0:26:d8:9c:8f:4c:f2:
                    f8:42:30:a9:84:ba:f3:1a:a9:26:ca:c7:e5:df:35:
                    6e:f0:5f:4d:d4:de:70:06:98:5b:c7:3a:0d:f8:06:
                    f2:ee:84:9e:ee:44:32:fa:d2:0c:34:c4:9f:2b:d1:
                    de:7d:30:d7:64:a1:56:b8:12:89:06:b0:5b:2f:11:
                    1e:ed:61:49:4c:e6:39:bf:3b:22:29:cf:79:3b:7e:
                    dd:df:17:09:1b:70:6f:09:43:63:7b:e6:87:1c:c4:
                    61:41:4b:eb:8f:8a:0c:32:0c:5b:0a:95:98:ef:0e:
                    0d:03:85:c4:c6:be:71:79:9b:07:33:be:70:51:86:
                    40:13:6e:fe:ee:2a:2c:a2:45:b2:93:6b:70:11:a0:
                    b1:69:07:76:c4:3f:ed:86:74:d1:71:ca:11:94:21:
                    36:e1:27:a8:9a:24:9e:ef:80:0b:3a:a2:7a:4d:4f:
                    a2:2f:c1:c5:97:70:ec:95:46:83:b0:f6:a6:85:7b:
                    f5:86:09:66:98:24:a3:0b:36:0b:79:db:3d:6a:3e:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:A0:E5:B3:C4:CB:F1:ED:1E:D1:22:33:01:89:16:9E:C6:16:C8
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e32342e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:48:bf:36:09:81:8e:7e:62:e0:b4:8c:f4:6e:9f:65:79:
         57:47:b4:86:2b:94:37:ac:b3:ee:70:d1:3d:f8:53:c5:c5:16:
         69:13:06:f0:6c:72:ec:4c:b2:5d:ef:f9:04:97:fd:99:63:91:
         67:b2:f8:70:2a:78:01:31:74:4e:a9:13:85:71:6a:aa:5c:b8:
         69:8f:51:56:4d:1d:f6:61:3d:92:01:b9:52:9e:10:33:e6:6f:
         22:ab:7a:e9:7a:f7:7e:59:84:ef:d9:ac:fd:a1:58:39:70:b2:
         df:ed:5a:ed:de:63:d1:48:e2:78:8c:09:7a:60:7a:24:ce:fc:
         d2:06:a9:70:ab:bd:17:81:ff:28:fe:df:55:dc:58:6b:7c:ee:
         ae:e7:ca:1a:5b:51:39:e8:58:24:f8:ff:75:0f:1e:ec:af:3c:
         bd:e9:7b:4f:e0:22:ee:c7:b9:14:5d:0b:d9:50:5e:a4:ad:c1:
         d7:b7:95:f6:2e:46:39:57:b8:4b:3d:fc:2e:6b:36:4f:06:d1:
         7a:d5:c7:7e:84:e1:0e:0d:6b:62:cf:03:fc:cd:f9:1e:4c:5a:
         37:d4:1e:91:1f:10:98:05:fd:c1:31:b7:f0:0c:24:5f:36:0a:
         be:fb:4a:e7:83:2a:a3:ab:d7:a2:49:f8:7e:b0:a6:bc:ed:41:
         65:1d:74:84
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUE0CqZ4uz6ky/UaT3WiwDhFokqIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNTA3MDExNjUwMDRaFw0yNjA2MzAxNjU1MDRaMDMxMTAvBgNV
BAMTKDYzOEJBMEU1QjNDNENCRjFFRDFFRDEyMjMzMDE4OTE2OUVDNjE2QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAChNDpQFIpKcSF2vcpszq9IO
Je2DtVqaEquMLXSxvU97jY7SVwp1DSALmxrgWOPRc+sxwCbYnI9M8vhCMKmEuvMa
qSbKx+XfNW7wX03U3nAGmFvHOg34BvLuhJ7uRDL60gw0xJ8r0d59MNdkoVa4EokG
sFsvER7tYUlM5jm/OyIpz3k7ft3fFwkbcG8JQ2N75occxGFBS+uPigwyDFsKlZjv
Dg0DhcTGvnF5mwczvnBRhkATbv7uKiyiRbKTa3ARoLFpB3bEP+2GdNFxyhGUITbh
J6iaJJ7vgAs6onpNT6IvwcWXcOyVRoOw9qaFe/WGCWaYJKMLNgt52z1qPru9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUY4ug5bPEy/HtHtEiMwGJFp7GFsgwHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzIzMTM1MmUzMjM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb7XGDAN
BgkqhkiG9w0BAQsFAAOCAQEAgdBIvzYJgY5+YuC0jPRun2V5V0e0hiuUN6yz7nDR
PfhTxcUWaRMG8Gxy7EyyXe/5BJf9mWORZ7L4cCp4ATF0TqkThXFqqly4aY9RVk0d
9mE9kgG5Up4QM+ZvIqt66Xr3flmE79ms/aFYOXCy3+1a7d5j0UjieIwJemB6JM78
0gapcKu9F4H/KP7fVdxYa3zurufKGltROehYJPj/dQ8e7K88vel7T+Ai7se5FF0L
2VBepK3B17eV9i5GOVe4Sz38Lms2TwbRetXHfoThDg1rYs8D/M35HkxaN9QekR8Q
mAX9wTG38AwkXzYKvvtK54Mqo6vXokn4frCmvO1BZR10hA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 18:37:49 2025 by rpki-client