Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34302e302f32332d3234203d3e203138383232.roa
File:                     3139302e3139362e34302e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          xqVI/4O6FKnWKYN1K1zfW3gX2irw0ZHAkAkevO4Jof0=
Subject key identifier:   0B:8A:F1:DA:E4:58:08:67:BF:E9:6D:95:86:D2:B6:DF:64:14:62:21
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       0B5984B602B8A2F0B1F02DD365847A290502A2E0
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34302e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:12 +0000
ROA not before:           Tue 01 Jul 2025 16:50:12 +0000
ROA not after:            Tue 30 Jun 2026 16:55:12 +0000
asID:                     18822
IP address blocks:        190.196.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:59:84:b6:02:b8:a2:f0:b1:f0:2d:d3:65:84:7a:29:05:02:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:12 2025 GMT
            Not After : Jun 30 16:55:12 2026 GMT
        Subject: CN=0B8AF1DAE4580867BFE96D9586D2B6DF64146221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:ff:22:a8:d8:a8:f9:be:05:73:6c:36:4f:
                    e0:97:b1:f1:93:6f:b3:07:1a:67:38:d9:18:6c:45:
                    03:55:33:66:25:f3:81:b6:ec:94:30:3f:f1:36:5b:
                    d6:e6:27:f7:75:33:c1:6f:7a:e7:fa:2a:31:73:25:
                    dd:08:3c:87:79:7d:1f:1d:1f:f5:29:4f:17:7e:08:
                    cc:26:7e:5b:f7:04:10:2c:75:94:73:6a:53:ce:da:
                    1e:05:01:2a:7f:22:ae:a9:f4:d0:32:c9:bd:71:8c:
                    1a:0f:37:fd:d6:4c:80:ba:f0:ce:4e:29:93:a0:20:
                    22:51:eb:b2:46:d5:a7:ba:b3:66:43:f0:bd:fe:c3:
                    eb:d5:84:9f:fe:e3:41:eb:36:72:43:e5:2a:93:00:
                    fb:84:f5:94:93:96:bb:f6:ab:f4:f6:57:28:80:4d:
                    37:92:81:ea:18:b3:ca:a4:2c:de:5e:ed:6f:dc:b5:
                    7b:4f:2c:df:02:21:c7:3d:4d:e1:2c:0c:82:e2:d0:
                    cb:68:c4:c9:74:3b:47:9b:2f:a4:33:19:36:30:52:
                    53:17:6f:45:b5:9b:a8:7d:af:6e:1b:e0:1d:96:a6:
                    38:66:b1:28:3b:13:55:92:35:64:1d:56:db:b9:07:
                    bb:db:8f:71:f5:76:5b:68:7d:de:b6:49:2c:fa:53:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:F1:DA:E4:58:08:67:BF:E9:6D:95:86:D2:B6:DF:64:14:62:21
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34302e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:ca:c6:a0:48:0c:40:65:b9:06:f9:cf:2e:1b:40:2a:b9:
         2c:42:86:f1:58:f3:7c:29:30:ca:b0:08:3e:c0:8c:41:b9:05:
         82:c3:50:ed:b5:52:a0:69:a9:6d:1a:c6:86:a8:65:53:f7:8e:
         dc:50:09:06:67:6c:21:f4:54:1d:58:88:4a:97:7e:0c:ec:47:
         fc:ea:c3:49:68:a7:48:f9:3e:46:b8:18:41:8c:a7:cf:3f:6a:
         1f:6c:a8:f1:d0:b6:42:66:53:bf:13:fd:73:fc:b8:c8:b2:1a:
         ef:f4:5c:42:01:eb:c0:e0:08:3a:0a:87:07:a6:23:7f:ee:b4:
         3d:89:0d:41:94:aa:5d:b2:e2:98:bf:96:20:cc:d9:27:97:fb:
         2c:93:72:34:09:8c:da:47:91:49:2f:60:61:76:c0:e0:85:07:
         7b:17:f5:04:d3:a0:ab:c6:c1:9d:d6:e5:76:90:1c:a5:61:c4:
         1d:5b:58:c0:45:a3:4f:2b:04:83:bb:91:9c:ca:e4:db:42:4f:
         ab:9e:ec:55:a9:f5:80:b0:1b:c6:d4:3b:7d:4b:0b:35:69:77:
         9f:2c:fc:1a:e7:d5:3a:fc:aa:34:48:fd:b7:06:f1:0f:5a:2d:
         df:a2:76:ab:01:ff:88:8b:2b:61:31:be:56:8d:72:5f:0d:8f:
         9e:55:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:38:50 2025 by rpki-client