Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e302e302f31382d3234203d3e203134323539.roa
File:                     3139302e3139362e302e302f31382d3234203d3e203134323539.roa (raw, json)
Hash identifier:          +gxdtrQl/PMQ4gqblf5JRmPPRofuiplQfj6g4CDpdjY=
Subject key identifier:   B4:90:9E:03:21:9D:FB:63:B9:F0:81:5D:90:C8:2A:B8:F6:B2:B2:66
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       4583092559781FD000F75DF4EA40EBFBC201BF03
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e302e302f31382d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 16:55:07 +0000
ROA not before:           Tue 01 Jul 2025 16:50:07 +0000
ROA not after:            Tue 30 Jun 2026 16:55:07 +0000
asID:                     14259
IP address blocks:        190.196.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:83:09:25:59:78:1f:d0:00:f7:5d:f4:ea:40:eb:fb:c2:01:bf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:07 2025 GMT
            Not After : Jun 30 16:55:07 2026 GMT
        Subject: CN=B4909E03219DFB63B9F0815D90C82AB8F6B2B266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:55:61:8d:9f:94:8e:5d:db:55:f8:ab:f6:
                    63:36:65:ff:00:ea:27:8f:92:11:7c:b5:1c:4d:52:
                    52:ce:91:e4:b3:4e:d8:cd:b3:8b:7b:62:52:68:a4:
                    32:10:08:c6:03:f4:f6:0a:91:a7:5f:0a:2e:f5:db:
                    bc:fb:1a:30:b1:19:39:3d:f1:6a:df:24:c2:e1:58:
                    20:6e:1e:64:44:ea:da:2e:74:01:40:44:66:22:2a:
                    e9:89:14:fc:bf:3a:0b:86:70:d1:fe:86:17:0c:db:
                    4c:e5:4f:53:69:a0:40:7a:f8:7f:d5:61:f9:2e:79:
                    f6:0d:08:ad:0d:e7:29:2f:55:20:e7:4d:dc:79:d2:
                    c8:ab:43:79:f1:03:d9:df:65:69:3a:c5:a8:f8:95:
                    31:ef:27:e1:12:af:ac:6d:36:ad:4b:bd:af:76:be:
                    8c:05:07:9e:85:9c:bf:5c:b0:2c:48:c2:d9:9d:1e:
                    e1:86:6a:e0:07:3e:a3:d3:1f:19:57:9f:be:dd:1e:
                    e4:77:86:60:b4:ce:59:7a:8b:9c:32:04:29:86:db:
                    aa:7a:a3:f0:39:2f:c6:2c:c9:73:08:e0:b0:93:e7:
                    74:f0:3d:c6:ca:0f:e9:d6:c8:bc:fa:80:fe:33:93:
                    da:f8:5a:ed:4b:99:63:a1:dd:26:9c:cd:d4:3a:10:
                    4c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:9E:03:21:9D:FB:63:B9:F0:81:5D:90:C8:2A:B8:F6:B2:B2:66
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e302e302f31382d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:9f:43:f3:8d:25:a0:b9:2d:66:e6:d0:a9:25:29:f7:f8:b4:
         a4:c3:72:f5:eb:d6:67:5d:bd:ab:e4:58:71:19:00:2d:db:26:
         6b:99:76:f4:01:8f:66:2e:2e:88:30:85:63:6e:11:74:1f:d4:
         b3:8f:c6:3b:2c:e6:c7:52:d0:37:84:93:16:2c:b3:1b:bf:ae:
         95:7b:6f:fe:2c:60:1c:4a:a6:36:85:0d:cd:f2:53:d0:89:a1:
         39:08:01:be:46:58:73:32:e8:2b:b5:00:59:ad:0d:ce:09:8e:
         9c:d7:d3:1e:d3:75:de:52:ea:76:0a:8d:05:f8:1d:de:35:2f:
         c5:11:a5:81:96:66:ef:69:68:0c:7c:d2:8d:0d:78:b3:43:a1:
         6f:97:50:f0:a4:c9:d6:a0:f2:1b:19:01:89:9b:94:cf:dc:80:
         ce:11:85:c3:ef:68:80:ca:35:fe:2c:52:ed:62:a0:63:61:6f:
         2a:40:96:a8:ca:74:d3:06:f9:d0:88:68:1c:9b:cf:e3:c8:6a:
         bc:8c:33:2e:9e:9c:15:fa:8e:f6:1d:e6:30:e0:83:8e:78:84:
         07:39:6a:e4:b6:c4:3e:db:9f:fd:d3:48:9d:30:41:15:db:da:
         62:4f:94:94:1c:6b:c6:d9:c0:43:59:88:ee:af:f4:74:24:6d:
         eb:53:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:30:42 2025 by rpki-client