Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3132342e302f32342d3234203d3e203134323539.roa
File:                     3139302e3139362e3132342e302f32342d3234203d3e203134323539.roa (raw, json)
Hash identifier:          RwzVSz7Zg1BkiGZFM/0BhbqHhaRoLUjqpV+IrXl/tN4=
Subject key identifier:   21:B2:11:C1:58:F4:34:AB:26:0B:4A:34:2F:22:28:62:FD:47:25:D2
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       117E3B58CD8538E9389E29A15FBBD31218C4552F
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3132342e302f32342d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 16:55:22 +0000
ROA not before:           Tue 01 Jul 2025 16:50:22 +0000
ROA not after:            Tue 30 Jun 2026 16:55:22 +0000
asID:                     14259
IP address blocks:        190.196.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7e:3b:58:cd:85:38:e9:38:9e:29:a1:5f:bb:d3:12:18:c4:55:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:22 2025 GMT
            Not After : Jun 30 16:55:22 2026 GMT
        Subject: CN=21B211C158F434AB260B4A342F222862FD4725D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:2e:19:7e:7c:34:cd:1d:dd:a5:7f:41:db:
                    88:50:f5:0a:74:08:cf:f6:87:0d:12:e4:f9:6a:70:
                    c6:e6:60:99:80:b4:7a:9d:99:96:66:4d:85:25:08:
                    bc:00:1d:e4:55:a4:97:9a:3f:14:34:5a:e1:8c:71:
                    64:71:50:f9:e9:4c:cb:40:d2:ef:11:bb:f7:af:07:
                    ea:59:3b:e2:fe:ef:99:aa:e7:95:de:fa:0d:65:b4:
                    26:31:81:f5:89:e2:4f:1f:c8:cc:a8:2f:25:1b:fa:
                    08:13:c9:80:3e:8a:1e:b0:4c:10:05:47:0a:f5:9b:
                    64:73:23:42:87:2d:af:67:70:93:0a:64:d3:2e:69:
                    ac:7e:50:aa:30:c6:d4:f2:49:23:1e:d4:48:ea:df:
                    ad:da:a5:22:0f:5d:ce:24:5f:4c:92:7e:fc:45:f4:
                    f7:37:50:f9:05:15:8d:db:a0:7d:6d:ca:ab:61:95:
                    46:16:f2:90:36:97:f3:a1:22:ed:d3:9d:d5:b5:6b:
                    ad:47:48:ba:d1:68:9d:f9:55:fa:33:b6:36:b0:13:
                    36:55:ab:47:25:a2:2d:b7:fc:db:1f:80:26:93:d2:
                    41:c3:2b:0a:cc:22:b9:08:cd:c5:eb:22:f2:c3:5f:
                    5e:40:c2:79:02:fd:e6:58:6b:aa:47:d0:a7:af:bb:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B2:11:C1:58:F4:34:AB:26:0B:4A:34:2F:22:28:62:FD:47:25:D2
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3132342e302f32342d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:6e:b8:88:e5:f4:15:f1:e9:0e:3c:50:a7:af:9a:0e:9d:
         14:77:eb:04:3a:cb:17:60:9d:12:10:29:5b:7a:8b:f1:8d:5a:
         df:98:80:de:57:6f:6e:d4:8f:e7:d7:ea:4a:70:f9:b3:2a:80:
         15:59:86:8d:65:4d:b0:94:c0:c7:15:00:78:20:12:db:75:f0:
         cc:aa:a5:cd:8e:e4:c3:be:d7:2c:f0:a1:f4:19:f5:a8:ee:af:
         51:8b:78:4c:ad:40:81:ed:ae:04:d3:30:e6:93:d7:8d:71:0e:
         ed:c7:c9:cd:56:1e:df:00:02:56:e9:bc:45:7e:17:09:ba:3f:
         99:39:d9:18:2d:d9:d0:03:cb:3f:65:03:59:0c:61:96:d1:3c:
         d4:41:1b:90:84:7f:b7:0e:cb:12:0d:9e:45:ae:3b:41:29:41:
         9d:e4:5f:43:c6:83:1b:27:ed:e9:09:ae:3d:18:a1:2c:c9:df:
         24:ab:d7:51:6e:e0:cc:d1:a7:a0:4a:98:51:cc:3c:0e:76:9e:
         05:47:da:24:0d:08:91:2e:0d:3a:00:39:3b:d6:ab:88:31:e6:
         a9:35:64:a3:94:94:78:9c:8b:e5:06:46:2f:ad:d2:93:55:1c:
         c3:3c:b3:69:c3:9a:ed:da:67:50:89:05:67:fe:fb:21:4c:a6:
         a4:a1:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:40:32 2025 by rpki-client