Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3132302e302f32322d3234203d3e203134323539.roa
File:                     3139302e3139362e3132302e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier:          sYRvj1sqmvN9usNaZHg7z7br4kWTpknIGt+1PcMGMlY=
Subject key identifier:   48:46:C7:87:E4:87:8B:2C:92:96:29:56:85:20:B5:BF:E2:FD:2A:2B
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       5B8DF17B71347BC7CC68D66FBDCEA3D857C1AD08
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3132302e302f32322d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 16:55:03 +0000
ROA not before:           Tue 01 Jul 2025 16:50:03 +0000
ROA not after:            Tue 30 Jun 2026 16:55:03 +0000
asID:                     14259
IP address blocks:        190.196.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8d:f1:7b:71:34:7b:c7:cc:68:d6:6f:bd:ce:a3:d8:57:c1:ad:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:03 2025 GMT
            Not After : Jun 30 16:55:03 2026 GMT
        Subject: CN=4846C787E4878B2C929629568520B5BFE2FD2A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:75:f6:1c:17:03:b6:71:35:1d:02:39:d2:
                    e5:ab:95:11:9f:b9:0d:72:49:63:ca:6a:ed:7a:44:
                    1e:04:57:b4:9e:68:da:d8:c4:82:2d:ac:3b:c6:29:
                    7a:dd:f8:1c:de:78:17:c7:12:36:75:45:f5:c4:66:
                    b6:c7:24:28:24:b2:54:2f:14:02:2e:35:c9:1d:82:
                    22:00:a0:cb:35:10:04:5c:2b:17:99:a6:2a:3b:8f:
                    e6:97:26:b4:37:46:c8:5e:24:4d:6e:b2:78:c6:59:
                    1a:a0:b9:9f:59:97:0e:b4:9a:f5:4e:07:1f:bb:23:
                    b2:ce:49:6e:78:5f:7e:57:53:82:2b:31:e6:fe:04:
                    8c:6d:85:95:c5:0b:69:42:23:f4:40:13:3a:ec:bf:
                    14:d4:d4:c5:6e:75:20:7b:80:b8:5d:69:05:15:91:
                    c4:86:59:b1:62:dc:66:00:3c:97:9d:c3:0c:ef:e0:
                    cb:9a:74:1c:05:f8:fc:6e:6e:02:33:91:af:78:fc:
                    15:a7:c0:dd:3a:78:61:8b:11:c4:d9:c6:8e:48:3b:
                    db:ed:03:de:f7:35:e8:17:1f:00:93:48:20:7d:60:
                    52:b8:56:3c:76:e4:9a:f0:1c:64:ab:22:5a:dc:9d:
                    80:b1:ef:b4:9b:98:a0:ec:26:73:26:94:84:5d:bb:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:46:C7:87:E4:87:8B:2C:92:96:29:56:85:20:B5:BF:E2:FD:2A:2B
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3132302e302f32322d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:bf:bc:4e:c4:98:1d:5d:94:6d:c8:12:fb:5a:9c:89:b1:02:
         8c:73:59:89:fc:05:d8:50:d9:51:e7:fc:b9:41:6e:f2:61:80:
         f6:00:5e:1d:d2:a2:fc:b2:73:e7:8f:fb:72:44:b5:6e:37:c2:
         9e:eb:40:b6:ae:34:31:14:d0:92:15:00:18:a1:f2:cd:7f:9e:
         28:90:5e:7c:ed:4d:32:aa:0b:56:9f:e3:52:76:c9:b5:25:2e:
         8d:97:f8:79:84:2d:6b:5c:7a:20:dd:b2:5b:04:46:30:97:74:
         2d:a1:03:67:8c:99:2b:03:1b:17:29:c5:7c:84:6b:3e:cc:1b:
         3a:ed:3f:c7:39:f6:2f:81:29:09:e6:a3:cf:e6:be:ae:ce:b7:
         88:5d:64:7d:49:93:f9:bb:26:01:87:19:c7:b9:52:63:f8:db:
         92:8b:18:a0:9b:ca:5a:98:f8:59:29:dd:a0:eb:48:d6:66:d1:
         48:b5:73:dd:fb:12:1b:0a:77:d7:46:c3:6f:16:7c:ec:d8:ee:
         d9:e7:9a:5e:42:86:68:0b:3e:95:b0:24:f9:fc:f5:53:13:4a:
         50:5f:0b:41:15:70:68:62:50:14:ac:72:0b:9b:e2:aa:a7:f2:
         7c:04:92:5f:cc:26:ba:19:70:b4:e8:ab:d8:0b:a2:1d:50:de:
         e0:3b:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:41:50 2025 by rpki-client