Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e35342e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e35342e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          kWVrTNXVhYkKJq8nYBmcmXWpsZtrKow7s5ZLClTYM5c=
Subject key identifier:   61:73:ED:A5:2A:5B:CB:C5:C5:2B:38:87:23:8E:E3:E7:E6:68:EA:B1
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       7B0018CE4871B52F2B7569D9CA81E2BF22333282
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e35342e302f32342d3234203d3e203138383232.roa
Signing time:             Wed 04 Mar 2026 09:40:00 +0000
ROA not before:           Wed 04 Mar 2026 09:35:00 +0000
ROA not after:            Wed 03 Mar 2027 09:40:00 +0000
asID:                     18822
IP address blocks:        190.196.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:00:18:ce:48:71:b5:2f:2b:75:69:d9:ca:81:e2:bf:22:33:32:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Mar  4 09:35:00 2026 GMT
            Not After : Mar  3 09:40:00 2027 GMT
        Subject: CN=6173EDA52A5BCBC5C52B3887238EE3E7E668EAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:10:0a:8f:1c:05:a1:7f:a1:11:da:52:98:
                    01:47:40:d3:fb:08:03:b6:f3:4d:7f:aa:a9:71:18:
                    65:10:80:db:13:5e:c1:65:32:6a:64:ad:92:be:05:
                    f3:7c:8a:18:87:8b:df:35:87:6f:02:86:30:c9:d3:
                    fa:06:66:a7:8b:85:bc:5a:f2:92:dd:1a:44:06:4d:
                    62:60:7e:2b:41:e1:93:35:ea:05:eb:2e:29:e8:31:
                    7a:0f:85:e0:f6:74:e1:f1:71:cd:59:f6:85:ef:24:
                    25:2d:27:2c:43:94:5a:36:e9:aa:25:b5:3d:80:8e:
                    ee:97:cb:19:0c:ff:de:72:11:df:d7:d2:97:83:6c:
                    56:38:d0:5d:18:df:d3:4e:d3:36:c0:df:7e:15:c0:
                    e9:3f:37:94:3e:6f:74:ed:bb:63:c9:e4:a0:08:8f:
                    81:4c:07:4d:e6:68:df:ac:4b:05:d2:93:9c:1c:1b:
                    36:15:8a:90:7f:ad:b1:10:c4:8f:a4:e8:f8:d3:ff:
                    cf:b1:6f:a7:6c:3f:38:95:30:f5:60:b4:8c:3f:78:
                    8b:25:ba:fd:df:79:9d:f1:4f:03:89:cf:d0:5d:4f:
                    70:b6:71:a6:80:64:24:a6:a3:6d:a2:6c:41:de:aa:
                    0b:cd:b7:60:78:e3:3a:7c:6a:7b:70:79:2e:cb:39:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:ED:A5:2A:5B:CB:C5:C5:2B:38:87:23:8E:E3:E7:E6:68:EA:B1
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e35342e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:c0:ad:68:cf:c7:9a:77:fe:18:9a:b8:7b:d4:e2:4c:54:
         3a:24:67:6c:9e:64:56:b8:5e:43:6d:bf:57:d2:4a:11:3a:6f:
         16:9d:ea:20:70:8e:44:9e:0b:d8:22:74:68:66:95:bd:f1:7e:
         2d:6a:e6:18:7e:57:89:3a:32:5d:83:ca:33:fe:8a:db:d4:08:
         0e:12:d1:50:ca:ca:b1:08:8d:fb:57:ad:8b:b6:34:f9:93:6d:
         69:52:0d:2f:f9:11:87:86:31:6d:19:c6:17:c0:f5:bb:3c:01:
         6f:7e:60:6a:ad:2c:45:63:56:81:ce:83:43:25:04:31:09:b1:
         50:eb:49:c4:44:de:fa:7a:a4:38:65:86:c7:72:56:ed:b4:37:
         f6:de:88:71:7e:71:b8:e4:f2:24:32:15:ee:64:36:78:26:e9:
         f0:ef:01:4b:05:58:bf:8d:d4:6d:92:4e:59:86:83:75:ef:10:
         d6:2c:78:1b:d1:45:71:76:5c:c8:ba:1d:92:a1:e2:5a:44:cf:
         d1:bc:73:41:a5:b4:b0:cb:e3:81:8f:b1:25:de:2b:4b:4c:05:
         31:e9:60:7a:e7:bd:0a:fe:84:bf:b3:c7:89:75:63:04:a3:50:
         e1:e2:7c:86:e8:4b:cb:8c:91:a2:58:87:af:fb:36:e6:84:b7:
         06:d5:61:11
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUewAYzkhxtS8rdWnZyoHivyIzMoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNjAzMDQwOTM1MDBaFw0yNzAzMDMwOTQwMDBaMDMxMTAvBgNV
BAMTKDYxNzNFREE1MkE1QkNCQzVDNTJCMzg4NzIzOEVFM0U3RTY2OEVBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyBAKjxwFoX+hEdpSmAFHQNP7
CAO2801/qqlxGGUQgNsTXsFlMmpkrZK+BfN8ihiHi981h28ChjDJ0/oGZqeLhbxa
8pLdGkQGTWJgfitB4ZM16gXrLinoMXoPheD2dOHxcc1Z9oXvJCUtJyxDlFo26aol
tT2Aju6XyxkM/95yEd/X0peDbFY40F0Y39NO0zbA334VwOk/N5Q+b3Ttu2PJ5KAI
j4FMB03maN+sSwXSk5wcGzYVipB/rbEQxI+k6PjT/8+xb6dsPziVMPVgtIw/eIsl
uv3feZ3xTwOJz9BdT3C2caaAZCSmo22ibEHeqgvNt2B44zp8antweS7LORiJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYXPtpSpby8XFKziHI47j5+Zo6rEwHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzEzOTM2MmUzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7ENjAN
BgkqhkiG9w0BAQsFAAOCAQEAHBLArWjPx5p3/hiauHvU4kxUOiRnbJ5kVrheQ22/
V9JKETpvFp3qIHCORJ4L2CJ0aGaVvfF+LWrmGH5XiToyXYPKM/6K29QIDhLRUMrK
sQiN+1eti7Y0+ZNtaVINL/kRh4YxbRnGF8D1uzwBb35gaq0sRWNWgc6DQyUEMQmx
UOtJxETe+nqkOGWGx3JW7bQ39t6IcX5xuOTyJDIV7mQ2eCbp8O8BSwVYv43UbZJO
WYaDde8Q1ix4G9FFcXZcyLodkqHiWkTP0bxzQaW0sMvjgY+xJd4rS0wFMelgeue9
Cv6Ev7PHiXVjBKNQ4eJ8huhLy4yRoliHr/s25oS3BtVhEQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:23:41 2026 by rpki-client