Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e39362e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e39362e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          S8k3BYoiQQa8Bwfy1/9isNoN9ICP+zSdPOlEJ7DYYeI=
Subject key identifier:   0B:AE:50:C8:75:23:3F:A1:3B:42:CE:DE:2C:AD:4D:67:3A:67:7A:8D
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       3F60943A01FA485D992D41A89E48EC37963F7C43
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e39362e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:18 +0000
ROA not before:           Tue 01 Jul 2025 16:50:18 +0000
ROA not after:            Tue 30 Jun 2026 16:55:18 +0000
asID:                     18822
IP address blocks:        190.215.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:60:94:3a:01:fa:48:5d:99:2d:41:a8:9e:48:ec:37:96:3f:7c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:18 2025 GMT
            Not After : Jun 30 16:55:18 2026 GMT
        Subject: CN=0BAE50C875233FA13B42CEDE2CAD4D673A677A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:6d:0a:2c:58:85:90:1c:82:b2:3c:1f:10:
                    e4:8f:56:79:4a:a7:ee:47:5e:cb:29:d6:31:36:d2:
                    56:0c:f0:30:0e:3f:00:d0:4b:59:38:58:c2:65:a2:
                    9a:13:33:98:40:5a:ac:88:fa:83:92:40:d0:f8:bd:
                    42:e9:30:39:09:59:f6:ad:2c:7a:20:14:15:b7:24:
                    1c:fe:2a:53:73:6e:81:08:a2:ea:14:6c:9a:24:ae:
                    ac:6a:8d:e0:6d:da:bd:ea:ed:70:ed:70:ba:f2:8d:
                    96:01:49:47:fa:16:76:0c:e0:41:dd:1d:b6:24:e6:
                    14:bf:66:c0:71:f3:9d:ef:8b:db:a5:f2:02:16:c6:
                    9a:e3:b9:f6:d5:94:27:f6:0f:e7:0a:77:f8:ed:ac:
                    b6:55:70:d5:97:0f:db:72:fe:5e:be:f8:58:a2:10:
                    fe:f9:89:21:d2:27:ba:cc:85:c9:5e:a7:38:0b:f5:
                    80:9e:2e:ef:f7:7e:32:a0:a1:de:17:49:c8:7c:40:
                    30:e3:dc:04:20:8d:43:6e:53:2d:95:41:f9:92:2c:
                    fd:3c:91:9b:23:30:46:e1:0f:89:db:c0:7b:52:e8:
                    43:49:3b:0c:53:88:03:47:3b:7c:5e:11:d1:f0:a0:
                    b9:32:ba:1d:ea:42:cd:26:20:e1:44:64:c7:e1:9a:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:50:C8:75:23:3F:A1:3B:42:CE:DE:2C:AD:4D:67:3A:67:7A:8D
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e39362e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:d7:02:2a:e0:b1:f3:0c:e9:37:95:39:71:74:77:0d:77:
         34:91:ba:dd:46:df:89:81:51:d6:20:9d:f9:a6:81:89:fb:14:
         4e:c6:43:d6:47:d0:a3:1f:3e:d1:31:04:2e:c8:16:b5:9c:0a:
         4b:11:21:c0:fd:2b:8b:ad:c9:1c:e9:13:94:60:8f:e4:49:b4:
         14:27:e4:ce:f2:f2:53:14:4c:06:cb:26:e0:8e:93:06:34:5c:
         18:6f:ce:bb:10:bf:d3:f7:8d:fc:53:7a:3b:d7:d2:6a:40:9e:
         c2:af:db:c4:24:c6:e9:2c:05:ae:73:d8:48:75:64:25:35:bd:
         89:bc:35:b3:f2:a0:ba:6e:a5:75:12:73:d5:91:f7:92:ed:81:
         8d:89:2c:91:39:49:4e:57:05:a0:34:2a:a0:3a:9b:f8:32:d8:
         45:18:a9:36:d2:2a:d3:7b:80:e1:c8:3e:fa:6c:c9:58:51:ed:
         dd:bf:ed:d9:77:19:ff:a6:70:b5:76:98:37:08:6a:6c:d9:9a:
         d7:b2:df:54:6e:3a:0b:7b:f5:2a:72:d0:5b:1d:0a:dd:0a:af:
         96:32:74:7a:7d:ab:9e:4e:a3:0c:54:7b:b8:ab:e5:b9:e3:fd:
         06:c4:40:f6:0a:17:c4:41:b6:5a:de:a5:43:2c:6f:77:b3:3f:
         be:b6:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:05:47 2025 by rpki-client