Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e36342e302f31392d3234203d3e203134323539.roa
File:                     3139302e3139362e36342e302f31392d3234203d3e203134323539.roa (raw, json)
Hash identifier:          edA6OZ4v75WkgKNECzQEj6C/ySYR8GbUJ8ON4vEA/3s=
Subject key identifier:   59:8D:A6:54:6B:4A:1B:D9:D3:DD:8E:74:9B:0C:4F:2F:B5:42:E4:26
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       62BA3F13C089E1D7968216B8F414517A5E8D3139
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e36342e302f31392d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 16:55:08 +0000
ROA not before:           Tue 01 Jul 2025 16:50:08 +0000
ROA not after:            Tue 30 Jun 2026 16:55:08 +0000
asID:                     14259
IP address blocks:        190.196.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ba:3f:13:c0:89:e1:d7:96:82:16:b8:f4:14:51:7a:5e:8d:31:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:08 2025 GMT
            Not After : Jun 30 16:55:08 2026 GMT
        Subject: CN=598DA6546B4A1BD9D3DD8E749B0C4F2FB542E426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:21:ac:ea:df:87:41:d2:d7:d5:43:42:a2:
                    48:cc:f4:fb:5f:8e:79:55:40:46:63:4e:e2:77:16:
                    e1:a9:63:1f:97:d2:75:c9:d5:e6:c0:10:2a:e8:f9:
                    c0:49:e0:8b:05:0f:b0:81:ef:e3:e4:80:d9:c0:15:
                    56:eb:0c:ec:23:c0:56:a4:7b:36:c3:5f:7f:f2:4a:
                    f4:fc:25:37:6e:67:60:36:99:27:0e:01:f6:47:c9:
                    93:4b:b1:ab:af:85:fd:5b:1a:1e:31:c8:14:94:7b:
                    88:62:1e:3f:73:68:65:f3:56:17:f7:66:2c:c9:2b:
                    95:0a:21:f0:77:35:60:f0:00:f3:df:e9:f3:9d:fd:
                    07:ea:cb:0a:e0:f5:05:00:b6:77:3b:4f:a0:8c:af:
                    ba:18:03:c7:78:09:a5:1b:63:0b:f6:a9:a1:25:ee:
                    ac:63:93:0b:86:1e:1d:11:63:ee:d2:63:10:fc:8e:
                    f5:02:b2:65:a8:d5:7d:55:3d:71:54:5f:bb:6d:62:
                    05:28:ee:09:f5:b8:6c:0d:bb:c3:d1:1b:98:6d:fb:
                    bf:06:33:79:c4:62:35:cb:5e:8a:89:20:b9:8a:29:
                    cb:09:51:28:4f:0f:7b:cf:2b:c6:3a:99:3f:d9:21:
                    cc:c5:19:c2:78:ee:b9:f7:73:c4:3e:3c:db:e4:d9:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:A6:54:6B:4A:1B:D9:D3:DD:8E:74:9B:0C:4F:2F:B5:42:E4:26
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e36342e302f31392d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:f5:72:ce:b1:8e:e1:58:fc:72:0c:79:24:08:d4:16:46:17:
         5a:2b:da:02:8f:69:7b:37:25:81:e0:0a:87:86:3e:a2:19:f6:
         9b:1c:57:23:8a:11:8b:a2:aa:a6:4c:70:9d:30:fa:11:b9:fa:
         c4:b3:48:9a:69:9a:ab:3a:f0:4b:2d:7d:80:34:58:73:13:97:
         61:05:d5:32:18:8d:e2:5d:d7:31:bf:99:7f:f3:69:8f:1d:75:
         dd:f9:d2:8b:3c:0f:48:da:6c:16:c8:40:b8:ca:2e:54:ec:f2:
         d5:36:73:3b:48:bc:5e:e6:64:3e:b3:0a:fe:5b:60:09:db:1b:
         61:d1:9d:04:0d:87:64:33:42:a6:2b:26:de:62:91:9e:b7:c1:
         b0:01:b8:43:c9:27:b7:8a:5e:4e:63:45:3b:2c:3b:e5:89:4e:
         23:14:a8:05:a5:bd:3e:ac:79:c8:5f:47:5e:4c:b6:60:a0:c0:
         26:66:d5:05:00:e0:73:c9:24:b0:3a:85:fa:aa:41:e5:7f:56:
         53:98:06:ca:c2:a0:02:71:76:14:6a:ef:13:93:c6:93:34:50:
         69:18:5f:a3:ff:a2:9d:39:43:15:3a:97:6d:3f:ff:33:25:1b:
         6a:e3:5f:67:c3:1d:0b:f0:99:6c:32:0c:19:5e:5f:b3:4e:4d:
         54:ea:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:25:49 2025 by rpki-client