Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32312d3234203d3e203138383232.roa
File:                     3139302e3139362e39362e302f32312d3234203d3e203138383232.roa (raw, json)
Hash identifier:          t99tcFO6rGJ855aAImj14hrgeov7bR+iUWFlClRGm+g=
Subject key identifier:   9C:68:7A:C4:DE:0B:06:33:49:94:EB:9E:C1:76:08:22:E0:72:A2:20
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       22F158844677261450705E86AA2B700818120C12
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32312d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:14 +0000
ROA not before:           Tue 01 Jul 2025 16:50:14 +0000
ROA not after:            Tue 30 Jun 2026 16:55:14 +0000
asID:                     18822
IP address blocks:        190.196.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f1:58:84:46:77:26:14:50:70:5e:86:aa:2b:70:08:18:12:0c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:14 2025 GMT
            Not After : Jun 30 16:55:14 2026 GMT
        Subject: CN=9C687AC4DE0B06334994EB9EC1760822E072A220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:1f:95:cc:55:51:ba:c0:a9:1c:7c:ae:c6:
                    a1:f2:e5:fd:b1:c9:90:b6:e2:0f:97:2c:ce:e5:d0:
                    f6:cd:0a:67:84:51:5e:ab:62:3c:47:89:08:8f:68:
                    35:36:a5:a0:de:44:09:37:e2:31:05:4a:47:cd:13:
                    2d:22:46:18:26:59:b9:f5:f6:5d:fb:43:a5:d9:88:
                    84:e8:70:a6:18:00:41:f7:33:b5:58:9a:71:a6:c9:
                    1b:a3:52:24:7b:e7:f0:0e:bd:4d:e1:45:79:af:5c:
                    0f:81:24:ae:74:3c:31:0b:b2:65:de:b7:cd:88:0e:
                    6f:fa:a2:e3:32:a7:38:20:e6:8c:c4:cc:31:b9:3f:
                    f1:ad:cd:6f:c3:5e:3e:f0:5e:06:99:cd:eb:6d:bb:
                    d1:c2:94:c8:2d:67:c7:e0:73:75:ae:15:14:f8:89:
                    40:95:8e:f9:84:12:7a:1f:cf:c3:ac:4e:ab:dc:cf:
                    69:61:62:c6:bc:b6:e6:cc:57:5e:1c:45:99:c9:be:
                    20:06:e8:fc:5a:fc:22:8b:0b:0e:2a:44:e3:79:a8:
                    37:2d:d0:b7:b6:6d:75:85:2a:e4:a3:82:2c:81:1b:
                    9a:cc:80:42:23:be:98:48:58:03:4a:df:ce:fd:97:
                    6e:35:c5:f4:d4:ff:9f:b5:ea:4b:6f:f2:83:d7:00:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:68:7A:C4:DE:0B:06:33:49:94:EB:9E:C1:76:08:22:E0:72:A2:20
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32312d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:8e:9d:ef:92:89:d1:f3:81:ec:b4:da:0d:84:61:47:42:
         b0:65:6c:ee:ae:fa:2a:cc:1d:34:ba:2c:31:ec:ee:d3:a8:74:
         e7:5b:65:63:68:66:a4:ab:60:1d:22:46:b4:0e:7a:be:21:ad:
         c6:79:cc:1f:ad:6e:8e:21:b2:33:ca:78:4a:66:a7:df:8b:38:
         f0:6b:70:6c:93:cb:36:82:4f:41:71:f6:92:98:68:b6:6a:69:
         cf:bd:e0:29:f4:9e:ed:fe:fd:7d:95:5a:22:1a:b2:9e:34:3a:
         bc:e3:53:6b:63:7e:80:37:b2:ff:ac:79:11:a8:a7:be:6b:f2:
         d3:a6:f7:fa:8a:1b:24:57:07:f8:c2:2c:04:cf:f1:d8:a1:57:
         fc:c7:61:78:ad:59:38:53:b8:0a:e3:4f:37:5b:ac:75:76:67:
         5c:aa:92:8e:b4:2e:58:85:27:44:d1:82:2a:98:96:48:11:21:
         e4:c4:dc:49:0a:92:db:12:50:4d:48:b3:a6:39:58:7f:e9:b7:
         e2:68:29:13:7b:e0:42:7f:ad:72:47:d1:ba:c9:74:d3:cf:4f:
         2d:3e:45:2c:5e:0a:ad:2d:70:c1:85:22:e9:31:f5:00:88:fc:
         86:00:96:5a:3a:11:e5:99:ee:8b:0c:1f:f1:60:22:b4:60:ce:
         1d:01:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:30:47 2025 by rpki-client