Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e36302e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e36302e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          TjXHs0oq+TpxH4zqCIo3LYpdWoQsT44mJ/58FNIjHq4=
Subject key identifier:   04:21:7B:65:19:97:8D:67:2F:B2:FC:24:9A:AE:31:29:2F:FF:FA:90
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       40AFE3E1466B285C8708850740BEAEC2F371AE84
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e36302e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:08 +0000
ROA not before:           Tue 01 Jul 2025 16:50:08 +0000
ROA not after:            Tue 30 Jun 2026 16:55:08 +0000
asID:                     18822
IP address blocks:        190.215.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:af:e3:e1:46:6b:28:5c:87:08:85:07:40:be:ae:c2:f3:71:ae:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:08 2025 GMT
            Not After : Jun 30 16:55:08 2026 GMT
        Subject: CN=04217B6519978D672FB2FC249AAE31292FFFFA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:f8:48:9a:63:fd:2e:f0:a5:57:75:74:f1:
                    4c:30:19:9b:3c:fb:81:10:54:ed:1d:8c:91:0d:45:
                    b0:ae:e0:23:43:e9:3e:9d:ac:bf:ba:96:6e:9a:3b:
                    ec:ce:0d:72:19:0c:c1:61:ec:fd:aa:86:54:05:e0:
                    63:ff:55:a1:e1:0c:88:ff:2a:e0:0d:e5:11:fe:8a:
                    4a:b9:e4:ce:f4:e9:ba:08:4b:45:68:81:cd:c2:7e:
                    b4:75:00:a7:99:c3:1c:5e:e4:09:f1:57:e9:40:d2:
                    bf:63:cd:d3:ff:87:ca:b9:a4:3e:98:7d:40:e3:ed:
                    e9:e0:79:7f:7d:5e:49:39:15:b1:1d:40:cd:28:cb:
                    c2:3b:f0:5f:c1:c7:03:39:22:dd:2d:db:a0:29:61:
                    59:41:ec:b3:43:cf:98:7d:8c:22:b8:91:1b:b0:f9:
                    cf:c4:3c:28:ee:43:ea:c2:08:96:2a:f8:2c:93:5c:
                    3e:67:59:f2:36:a9:e2:1f:5b:09:08:90:4c:63:28:
                    5c:f5:68:f4:66:03:bd:99:3d:82:bf:06:fb:50:be:
                    e2:aa:dc:15:c9:ad:f7:21:5a:4a:37:bd:c7:f7:dc:
                    52:9d:80:02:e8:7e:dd:4e:5a:14:d7:94:77:50:5d:
                    63:77:4a:ff:3b:26:a1:c4:cd:de:57:96:0c:c1:0e:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:7B:65:19:97:8D:67:2F:B2:FC:24:9A:AE:31:29:2F:FF:FA:90
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e36302e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:36:00:0a:b1:32:73:4d:de:cd:b2:3e:3b:39:30:80:00:bc:
         f5:c5:ec:42:ba:18:38:58:3c:6d:a6:cc:89:4a:07:3c:a7:c5:
         6a:69:ae:fb:d8:72:de:03:1c:03:62:4c:f4:9a:d6:00:86:8f:
         29:24:ca:7c:d8:45:65:9e:74:71:c1:71:d9:4c:f4:38:bc:7d:
         8f:54:e9:b8:4d:5d:1a:ed:c0:42:b0:1d:88:6c:ad:57:97:27:
         c2:bd:94:15:1d:35:61:e8:7a:fc:e3:b8:68:d0:e8:3a:0a:e6:
         d2:08:9b:4e:af:11:2f:d7:a9:aa:4a:d2:bc:62:3a:2a:f4:e0:
         58:6c:a9:88:d5:df:38:d2:bb:3d:46:bf:00:d5:9a:bf:e4:10:
         e9:00:e0:f6:91:29:57:40:35:23:f3:87:85:5f:8d:2c:5a:74:
         1e:e1:9a:7b:8d:53:cf:68:f8:4e:8e:15:35:9b:aa:ed:13:ed:
         07:1b:cf:72:2d:d8:9e:2d:e4:ce:0f:f5:11:64:a3:bf:9d:9e:
         92:20:5c:4c:a7:46:70:72:2b:99:17:8c:41:78:6a:04:11:d2:
         7d:17:ef:2e:ac:9d:3e:cd:b0:ba:da:38:07:c7:d3:af:85:e4:
         89:91:c3:ab:8b:a6:1e:22:f1:77:7a:a2:28:77:e1:ce:e6:92:
         81:ee:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:03:49 2025 by rpki-client