Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32302d3234203d3e203134323539.roa
File:                     3139302e3139362e39362e302f32302d3234203d3e203134323539.roa (raw, json)
Hash identifier:          Pwlpm18z8Oii3ZYEVaGUQkhQtGi0+XMOcjH8pUZKxIg=
Subject key identifier:   BF:7B:11:17:F1:D7:14:BC:C6:84:76:EE:9C:69:E2:D4:33:DA:82:17
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       43F0FCF59C7959F0D2E262735134E30D4382E1AE
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32302d3234203d3e203134323539.roa
Signing time:             Tue 01 Jul 2025 16:55:18 +0000
ROA not before:           Tue 01 Jul 2025 16:50:18 +0000
ROA not after:            Tue 30 Jun 2026 16:55:18 +0000
asID:                     14259
IP address blocks:        190.196.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f0:fc:f5:9c:79:59:f0:d2:e2:62:73:51:34:e3:0d:43:82:e1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:18 2025 GMT
            Not After : Jun 30 16:55:18 2026 GMT
        Subject: CN=BF7B1117F1D714BCC68476EE9C69E2D433DA8217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:74:2f:8a:aa:fc:70:cc:d0:a1:8d:6c:31:
                    83:87:82:ad:fb:71:e0:52:b3:cd:a0:9f:d4:d3:d2:
                    cf:3d:80:1e:74:b1:f3:d7:52:f5:61:c9:76:a1:c1:
                    35:40:45:4e:1a:60:89:bb:58:25:43:7b:48:89:17:
                    62:a6:39:cd:60:01:26:d1:1d:23:9d:0b:9e:c6:7b:
                    4f:c2:10:3b:18:1f:f1:dc:dc:b1:64:4f:60:11:8b:
                    47:61:53:33:9a:1c:3e:81:07:d8:cf:52:60:e6:4d:
                    26:22:e8:73:82:9b:80:b7:de:e6:19:a6:46:15:bf:
                    cb:94:86:0b:53:53:17:9b:9b:8c:7d:73:6a:0c:b1:
                    72:62:ae:e5:65:65:06:1b:a8:9d:03:48:bf:20:50:
                    7d:87:5f:2f:55:5c:4b:59:95:5c:46:05:8f:4d:34:
                    87:92:b9:91:6d:64:ff:7b:0d:f9:0b:8b:ab:44:f5:
                    51:35:b7:35:51:56:ff:5a:b1:dd:0b:d0:81:f7:cb:
                    36:e9:16:e8:d7:dd:9a:23:03:9a:e6:b2:b7:bf:80:
                    28:99:62:f2:2e:2f:09:6e:12:f7:b0:c6:3e:d0:2b:
                    c6:82:f1:b7:42:30:26:ee:ba:42:c7:a9:13:20:ae:
                    07:a1:5b:ed:96:40:29:66:c0:bb:2d:53:9d:fa:45:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7B:11:17:F1:D7:14:BC:C6:84:76:EE:9C:69:E2:D4:33:DA:82:17
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32302d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d6:9b:ae:42:c6:46:a5:c8:3d:d4:ed:9b:ae:37:09:75:a2:78:
         f9:59:33:b0:fb:a3:ce:e6:7b:6a:31:90:b2:d7:c4:6e:d9:4b:
         ed:5a:97:70:df:73:84:92:ad:32:96:5a:a2:ae:cd:b4:7e:ca:
         a2:69:fc:8d:b3:e7:cb:81:db:47:d8:bf:fc:c1:49:67:12:1a:
         3f:30:f5:62:af:53:fa:f4:39:b0:fd:64:b4:58:87:22:c1:da:
         98:64:4d:14:b8:43:fc:f3:15:41:c5:c8:7b:ff:ab:55:94:76:
         f6:f0:f1:b5:fc:12:18:de:73:33:6b:35:e4:26:c5:28:49:60:
         2b:ca:e4:48:0a:0f:51:e3:6d:4d:fa:29:6a:53:13:48:b7:bb:
         15:4e:8e:8a:57:87:d2:78:49:2a:c4:76:52:fd:b9:b7:d6:f0:
         b7:5c:9d:19:21:98:e6:b8:b0:b1:30:2a:5a:a6:a0:d4:3d:a4:
         16:bf:ae:bd:3e:c6:51:b7:02:75:2d:dd:43:05:64:29:4a:8a:
         16:06:8a:91:e1:32:11:e0:ea:6d:74:89:ae:c6:b3:d8:96:48:
         26:5d:ed:c6:a4:f1:1d:74:b3:3f:e8:cc:ce:8f:c5:c9:93:43:
         a8:04:91:69:e3:62:39:48:af:32:84:f9:02:b0:0d:29:a3:b3:
         de:65:e9:54
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQ/D89Zx5WfDS4mJzUTTjDUOC4a4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNTA3MDExNjUwMThaFw0yNjA2MzAxNjU1MThaMDMxMTAvBgNV
BAMTKEJGN0IxMTE3RjFENzE0QkNDNjg0NzZFRTlDNjlFMkQ0MzNEQTgyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1XQviqr8cMzQoY1sMYOHgq37
ceBSs82gn9TT0s89gB50sfPXUvVhyXahwTVARU4aYIm7WCVDe0iJF2KmOc1gASbR
HSOdC57Ge0/CEDsYH/Hc3LFkT2ARi0dhUzOaHD6BB9jPUmDmTSYi6HOCm4C33uYZ
pkYVv8uUhgtTUxebm4x9c2oMsXJiruVlZQYbqJ0DSL8gUH2HXy9VXEtZlVxGBY9N
NIeSuZFtZP97DfkLi6tE9VE1tzVRVv9asd0L0IH3yzbpFujX3ZojA5rmsre/gCiZ
YvIuLwluEvewxj7QK8aC8bdCMCbuukLHqRMgrgehW+2WQClmwLstU536RfSTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUv3sRF/HXFLzGhHbunGni1DPaghcwHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzEzOTM2MmUzOTM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNDMyMzUzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL7EYDAN
BgkqhkiG9w0BAQsFAAOCAQEA1puuQsZGpcg91O2brjcJdaJ4+VkzsPujzuZ7ajGQ
stfEbtlL7VqXcN9zhJKtMpZaoq7NtH7Komn8jbPny4HbR9i//MFJZxIaPzD1Yq9T
+vQ5sP1ktFiHIsHamGRNFLhD/PMVQcXIe/+rVZR29vDxtfwSGN5zM2s15CbFKElg
K8rkSAoPUeNtTfopalMTSLe7FU6OileH0nhJKsR2Uv25t9bwt1ydGSGY5riwsTAq
Wqag1D2kFr+uvT7GUbcCdS3dQwVkKUqKFgaKkeEyEeDqbXSJrsaz2JZIJl3txqTx
HXSzP+jMzo/FyZNDqASRaeNiOUivMoT5ArANKaOz3mXpVA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:38:58 2025 by rpki-client