Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3235342e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3235342e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          TDywFkZJOzMUPrVv9fAwWtURrFH1FKvwuYQkkQv7Gpk=
Subject key identifier:   39:06:26:0C:71:C8:6C:30:08:05:C3:EB:9D:50:A0:62:A6:E3:93:E8
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       6AFB759F37538C316A6497FE5529EAB0BD950AA4
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3235342e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:16 +0000
ROA not before:           Tue 01 Jul 2025 16:50:16 +0000
ROA not after:            Tue 30 Jun 2026 16:55:16 +0000
asID:                     18822
IP address blocks:        190.215.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fb:75:9f:37:53:8c:31:6a:64:97:fe:55:29:ea:b0:bd:95:0a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:16 2025 GMT
            Not After : Jun 30 16:55:16 2026 GMT
        Subject: CN=3906260C71C86C300805C3EB9D50A062A6E393E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:73:4f:72:2a:1a:b9:c7:04:ec:5d:23:da:
                    40:ae:09:b7:35:81:0a:23:f8:68:6f:d3:c7:10:ec:
                    ec:ca:cb:81:d2:16:27:16:60:de:cc:0e:51:af:fe:
                    bf:67:ab:69:bd:b5:2a:35:18:62:0f:2c:61:4f:69:
                    b7:45:89:9f:fd:f5:d4:e2:8a:bf:3c:9e:9b:65:34:
                    e0:07:d6:b3:d3:7a:20:08:aa:00:e8:20:4d:ae:00:
                    58:d2:01:bf:3f:79:cf:4b:85:a0:f8:a9:c5:e1:9f:
                    ad:8a:de:72:33:32:54:2a:c5:cd:df:e2:77:4c:99:
                    3d:f4:71:7a:f9:6c:97:eb:87:cd:25:fe:13:2f:19:
                    4e:b2:7a:15:ba:cf:b8:9f:1f:5f:a0:2a:65:2c:91:
                    5f:11:dd:ac:07:a9:eb:c1:98:c0:d3:03:72:95:ab:
                    94:21:e9:53:af:95:89:35:0a:75:05:81:d2:ce:6f:
                    55:4a:ec:8d:95:88:d1:08:8f:de:3d:a6:3a:fb:94:
                    99:73:03:4c:6a:b0:85:10:af:60:18:78:e0:b4:96:
                    71:55:70:2c:39:f7:4f:7d:c6:38:12:2b:b6:5a:fd:
                    de:6e:f6:50:77:01:1a:70:9c:8d:c5:ae:bd:8b:53:
                    6d:43:20:b8:67:b0:0f:6d:aa:87:ca:f9:05:c3:ab:
                    42:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:06:26:0C:71:C8:6C:30:08:05:C3:EB:9D:50:A0:62:A6:E3:93:E8
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3235342e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ef:d4:c6:4f:63:0f:c6:7d:9e:f6:25:7c:35:08:0e:8e:ae:
         db:26:7d:50:a4:50:52:26:a4:c2:b2:96:29:42:a3:af:b0:a9:
         d1:72:03:39:10:bb:52:11:12:f5:49:50:ef:09:d9:bd:9c:a9:
         41:97:26:1b:d9:fd:d8:5b:61:55:2c:b5:65:75:df:f2:91:31:
         a6:1d:6e:f1:11:f0:fd:0b:98:27:a7:36:fd:83:19:83:0b:4a:
         1b:45:da:b4:a7:c0:25:fd:cb:46:20:17:84:25:3d:63:c3:41:
         6e:ee:e6:99:05:03:51:eb:4c:0f:c5:80:ac:6e:bc:95:20:fa:
         2f:60:a6:23:3e:eb:5b:91:32:bf:d6:80:4e:66:36:e8:b0:8d:
         76:7f:c5:15:e9:39:0b:f6:f7:44:b5:c3:90:48:68:de:a2:67:
         62:dc:3c:b2:77:ab:c5:ca:03:19:49:13:cb:9c:d9:ea:24:32:
         2d:1b:b4:0d:8d:70:c2:45:ad:63:cd:fe:71:df:e0:de:69:78:
         5c:13:a6:4f:d3:86:32:03:3a:aa:6f:2f:63:80:59:d6:a6:7a:
         40:6a:53:24:73:3e:4c:5e:be:3f:c3:35:8d:f1:e8:ff:63:b6:
         8f:5b:9e:d7:37:c1:04:c3:c7:3e:0d:eb:5c:0c:ff:05:45:09:
         b5:2d:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:05:08 2025 by rpki-client