Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e37342e302f32332d3234203d3e203138383232.roa
File:                     3139302e3139362e37342e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          NuKFohMDUIbfxAQa3GDZomR1ozwAVORa97RDUcswwNY=
Subject key identifier:   4D:92:7D:0D:D5:00:8D:0E:24:98:2A:9A:08:FC:6D:1B:77:A8:15:00
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       3369C2139009103B1911507634725419B02D9EB3
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e37342e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:01 +0000
ROA not before:           Tue 01 Jul 2025 16:50:01 +0000
ROA not after:            Tue 30 Jun 2026 16:55:01 +0000
asID:                     18822
IP address blocks:        190.196.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:c2:13:90:09:10:3b:19:11:50:76:34:72:54:19:b0:2d:9e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:01 2025 GMT
            Not After : Jun 30 16:55:01 2026 GMT
        Subject: CN=4D927D0DD5008D0E24982A9A08FC6D1B77A81500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:80:73:d1:15:b2:fe:0b:12:cd:3f:02:e2:
                    07:68:69:bd:d0:55:6a:07:ce:d4:f9:da:d7:73:72:
                    ff:46:08:a4:b7:22:77:53:3d:71:7e:b7:63:ab:9c:
                    15:e2:81:57:15:bf:97:53:44:02:91:69:32:e4:e1:
                    d6:be:51:6d:03:42:ca:42:3a:98:51:4f:ed:fe:d3:
                    4b:81:c8:af:f7:7e:b5:0e:4c:6d:2f:a4:f2:8c:b4:
                    eb:ea:01:c2:83:37:e1:4c:d1:b2:e1:7d:50:bf:87:
                    9b:03:27:48:a8:24:f1:fd:89:f6:bd:e3:41:d9:a2:
                    c6:e4:2b:4f:64:12:07:9e:32:69:5a:54:ed:5d:24:
                    45:e0:7c:a6:72:70:7a:fa:20:d6:7d:41:93:02:64:
                    a6:6c:4f:e4:a3:6f:41:28:ab:54:c6:94:51:f6:cf:
                    78:bc:c8:c1:08:96:5d:47:c5:fd:40:f4:be:35:60:
                    db:f5:a7:2b:21:fa:a2:8a:97:5c:98:a4:b9:9a:eb:
                    c6:39:34:69:f7:94:cc:c4:11:46:ad:47:97:d0:05:
                    e0:db:11:4a:24:df:4e:79:47:09:40:19:ed:0b:ef:
                    be:6f:41:48:7f:3f:da:b8:62:b6:9b:87:4f:06:7b:
                    d2:3f:eb:f2:d9:60:99:72:5a:33:f5:d2:d7:94:6a:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:92:7D:0D:D5:00:8D:0E:24:98:2A:9A:08:FC:6D:1B:77:A8:15:00
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e37342e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:3a:95:65:57:54:f6:7b:c7:fa:18:64:6a:71:45:d0:31:72:
         a4:58:54:bf:6e:a6:d1:eb:f1:70:73:3c:1f:c6:94:0b:df:df:
         07:83:f2:a3:51:ff:f8:c0:7e:8a:1d:30:bf:b9:55:a5:94:d0:
         47:c8:f7:1b:47:7e:b5:fe:ba:ac:08:be:8e:be:8e:26:82:7e:
         62:69:29:97:8d:1a:81:11:6c:7d:ca:eb:af:47:95:04:4c:44:
         f0:47:9a:64:aa:96:58:2e:55:c7:c4:09:59:92:03:aa:0c:c2:
         72:f5:01:1d:97:8b:28:75:88:d1:1f:9b:8d:60:44:03:09:03:
         10:78:62:98:ae:2c:c2:db:ab:c3:c6:a1:60:aa:e4:aa:11:ed:
         d0:ed:76:6c:91:43:ba:21:0a:ad:96:09:03:2d:c4:ba:05:2f:
         b4:c3:3d:a4:ca:03:d4:8d:66:54:4d:c0:29:73:d0:9c:2f:a8:
         c4:fc:fa:74:33:81:8c:d2:c4:91:ff:40:c2:e5:5f:1f:5f:47:
         76:67:9f:68:07:60:6e:06:21:e6:59:63:89:22:cf:71:2f:8a:
         f2:8a:23:d5:98:ac:65:bb:a4:b5:75:84:59:65:ed:3d:b4:02:
         7c:a8:eb:0c:11:6e:01:e1:19:5e:4f:44:62:42:b4:68:48:25:
         d2:25:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:30:48 2025 by rpki-client