Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e38302e302f32302d3234203d3e203138383232.roa
File:                     3139302e3231352e38302e302f32302d3234203d3e203138383232.roa (raw, json)
Hash identifier:          cV7T0VOU36RDNaAW+UfPJUW9eIXtEQxDLPGysMjtGEU=
Subject key identifier:   81:A1:89:87:23:71:DC:3C:81:BB:E0:86:AE:E0:78:7B:A0:B2:04:67
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       0162B1137F03FF01311AD8FB4A94C569812C68FE
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e38302e302f32302d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:02 +0000
ROA not before:           Tue 01 Jul 2025 16:50:02 +0000
ROA not after:            Tue 30 Jun 2026 16:55:02 +0000
asID:                     18822
IP address blocks:        190.215.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:62:b1:13:7f:03:ff:01:31:1a:d8:fb:4a:94:c5:69:81:2c:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:02 2025 GMT
            Not After : Jun 30 16:55:02 2026 GMT
        Subject: CN=81A189872371DC3C81BBE086AEE0787BA0B20467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:18:a0:8d:ff:35:ef:9d:9f:f8:5d:34:fc:
                    76:2e:30:48:2d:ad:f3:1a:1a:5e:ef:50:dd:fd:87:
                    3b:75:d7:be:7e:fa:09:53:81:f7:d9:56:7c:d3:eb:
                    0e:d6:26:d4:39:09:db:82:6e:33:5d:ee:17:df:33:
                    34:f0:d7:f1:21:d0:61:b7:61:bd:09:1e:ec:e0:1a:
                    0a:b8:bd:4d:c4:77:9d:58:ba:c8:ff:ee:02:f4:d3:
                    9a:5a:a2:26:ed:d4:c5:6d:da:02:39:82:93:ea:83:
                    9f:5e:89:11:74:67:2f:e7:a0:e4:bf:b0:96:0f:30:
                    2c:3c:74:5c:8e:e1:45:8e:a4:34:c4:8c:74:32:cc:
                    76:78:06:76:55:6b:be:31:5d:d6:2b:10:37:a7:f2:
                    ae:13:0c:06:0b:06:32:9f:db:f2:df:39:44:95:8d:
                    ff:b7:92:21:ac:b8:48:6c:1d:bc:f5:cf:83:1b:9f:
                    38:42:1b:da:7a:40:14:07:59:93:fd:8c:f8:f8:df:
                    30:6a:a0:94:19:fb:65:8c:72:b4:dd:9b:a4:d1:15:
                    ec:82:61:0f:6e:8b:3b:cf:9a:91:53:27:44:aa:e4:
                    1c:61:7d:47:0d:df:6b:a2:a9:63:4c:bc:93:95:0e:
                    2b:47:fe:85:f5:cf:76:62:3b:9e:04:4a:b8:12:f5:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A1:89:87:23:71:DC:3C:81:BB:E0:86:AE:E0:78:7B:A0:B2:04:67
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e38302e302f32302d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:8f:03:1a:01:8b:5d:cf:e6:4a:86:f0:fb:00:58:0c:9e:
         7d:c2:e4:9e:89:9e:cf:fb:a9:89:a9:9f:e3:c3:06:50:bd:89:
         28:04:6b:47:df:ea:4f:50:42:6d:9e:a5:e9:a0:0e:cc:f5:5a:
         ca:f9:14:30:9e:04:a0:76:33:5b:05:da:33:ac:98:6f:3b:59:
         27:31:6b:60:5b:5e:4f:6e:bf:4a:83:20:7e:9a:59:9d:75:88:
         f8:5a:cf:4b:b6:ae:da:97:1a:21:f7:8b:21:d2:36:c4:1f:f2:
         6a:9a:99:76:33:93:bf:08:83:2b:12:78:2f:59:59:3c:94:e0:
         ba:f2:3c:f9:17:4a:9c:d7:7e:e9:20:db:c0:ca:42:9c:85:25:
         ed:fb:e9:9a:6a:59:bf:fc:cd:46:0b:01:87:83:93:f8:fe:08:
         08:dc:f0:ef:b8:12:8f:1d:55:bc:03:4d:ad:77:4d:6e:26:50:
         cb:58:cb:92:04:8a:80:d9:15:84:47:bc:36:0b:f1:e2:81:f3:
         8a:bc:de:ba:c3:51:dc:aa:63:51:e3:b3:bc:60:a9:ed:3e:b0:
         9e:55:cf:8a:d4:4d:b4:57:92:2d:66:d9:ae:00:36:f9:13:04:
         3c:36:74:ed:a4:76:3c:96:48:27:ab:64:ff:fe:9e:d2:e0:2a:
         09:9c:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:58:11 2025 by rpki-client