Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          z2obNUSGr8ObLK2I/HBOUSLTz245k6FhjBBq1LoHTH8=
Subject key identifier:   E6:93:7A:A6:03:54:F5:B7:06:0A:40:F6:A6:9B:A5:CC:E1:9F:51:6F
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       163B6A4DF494A4990884B7400BFD6BC4D99880B6
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:04 +0000
ROA not before:           Tue 01 Jul 2025 16:50:04 +0000
ROA not after:            Tue 30 Jun 2026 16:55:04 +0000
asID:                     18822
IP address blocks:        190.215.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3b:6a:4d:f4:94:a4:99:08:84:b7:40:0b:fd:6b:c4:d9:98:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:04 2025 GMT
            Not After : Jun 30 16:55:04 2026 GMT
        Subject: CN=E6937AA60354F5B7060A40F6A69BA5CCE19F516F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:7d:7e:b3:09:f1:54:18:db:0e:db:83:cf:
                    76:4a:d5:05:4b:f7:18:27:a5:0e:07:72:b8:d3:e9:
                    65:8d:17:09:5c:9f:c5:be:2f:38:a6:be:8c:f8:7f:
                    73:fb:d6:e7:2d:79:8b:7d:94:78:03:45:ca:ca:e7:
                    02:60:7b:27:26:13:a4:df:5a:14:fd:6d:b5:cd:d9:
                    56:28:6a:51:53:b8:86:bc:6c:98:c8:0f:73:f6:75:
                    4c:c8:b8:c3:81:40:c2:5f:98:07:7a:c1:55:19:cc:
                    c8:47:d3:3b:92:22:d3:f0:ce:3c:11:36:be:4a:cd:
                    be:3e:55:e0:75:07:c3:41:b6:52:81:96:88:49:fc:
                    84:3e:07:09:b7:44:d2:da:9f:76:3c:38:89:7d:f7:
                    b6:e4:3f:4e:49:aa:d1:ac:4d:0f:96:5e:6d:1f:53:
                    ef:e5:67:1c:b7:54:12:2a:26:ce:64:02:8b:d9:5a:
                    24:49:8a:d7:c3:20:17:4d:26:64:2f:2e:74:30:de:
                    0b:6c:9b:8b:12:38:22:a1:ba:07:bc:c7:b6:a5:81:
                    74:b9:50:cd:11:86:89:f7:f8:08:c2:8b:41:93:60:
                    49:54:fd:aa:9c:4e:23:2c:d6:fb:fb:41:25:ca:44:
                    99:d8:9f:37:00:cc:41:9d:60:bc:26:f4:bd:42:13:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:7A:A6:03:54:F5:B7:06:0A:40:F6:A6:9B:A5:CC:E1:9F:51:6F
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:83:20:d6:72:ae:1f:cc:92:36:83:c4:9a:49:c7:f8:96:64:
         4e:88:05:10:79:58:6f:ce:c6:0f:5b:49:b2:b7:c1:87:05:4f:
         12:67:ca:89:5d:94:b2:31:13:ad:9c:97:a8:f6:b3:34:c5:a9:
         c6:db:a0:97:a4:86:50:80:79:59:04:f4:ba:45:5f:d8:8c:b8:
         73:06:bb:71:a6:10:32:c6:0b:47:49:25:18:93:dc:55:fd:d0:
         b3:27:b1:81:8d:52:11:2b:b6:77:e1:41:e8:d7:ed:58:9b:3c:
         fb:c5:bb:d7:01:c6:6b:05:21:5a:b0:d8:9b:ca:38:9f:9f:a3:
         c1:92:41:d1:c9:b1:27:bb:02:6f:f4:d8:d2:9d:24:5b:8c:79:
         d4:ad:a5:cc:3f:29:41:81:a7:be:ef:40:56:6a:e4:73:f6:65:
         a7:52:dd:cb:08:56:ea:e6:97:dc:53:f1:f6:35:9c:59:fc:71:
         00:95:81:cf:71:b8:ea:14:e7:75:cd:2e:7d:ba:8e:f3:92:a9:
         49:dd:f2:e8:cf:33:98:19:49:ca:cf:e2:5f:90:ca:91:22:c8:
         a4:76:03:23:72:4a:bd:bc:23:a8:8b:28:5e:f3:e5:6c:90:2e:
         63:c3:9b:6f:cf:0e:26:c7:bb:96:db:b1:df:18:4c:88:51:84:
         ce:db:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:45:55 2025 by rpki-client