Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          b2ZeEPwGyWPbJ9fJzfNijk4xWcHw3AtmJ5Vl4REDsGQ=
Subject key identifier:   A0:B2:4D:08:D5:73:2C:C4:2A:F2:1D:C9:CF:64:CA:51:12:C7:DE:DC
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       378C14CE29A322C825A74CE3B60F51BD87B089C5
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:24 +0000
ROA not before:           Tue 01 Jul 2025 16:50:24 +0000
ROA not after:            Tue 30 Jun 2026 16:55:24 +0000
asID:                     18822
IP address blocks:        190.215.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8c:14:ce:29:a3:22:c8:25:a7:4c:e3:b6:0f:51:bd:87:b0:89:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:24 2025 GMT
            Not After : Jun 30 16:55:24 2026 GMT
        Subject: CN=A0B24D08D5732CC42AF21DC9CF64CA5112C7DEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:af:e9:50:bc:b4:24:b1:88:c1:75:10:66:
                    ed:82:ac:0c:97:dc:25:9e:55:0d:20:f2:4b:ec:0d:
                    83:f2:96:66:56:0b:13:4f:f0:5c:6e:5f:07:e5:f3:
                    9b:3d:cf:84:a5:71:d7:45:a3:63:e9:9e:f0:18:01:
                    28:a6:92:45:f1:0b:52:eb:79:62:0e:63:b8:98:44:
                    f5:0f:d4:f2:e5:c2:a6:fa:99:28:32:92:1d:c6:73:
                    29:96:72:08:c1:64:b1:09:aa:e6:cf:af:9b:b3:e7:
                    85:5b:3c:16:52:de:4d:7a:4a:91:15:51:3f:f8:25:
                    81:d2:12:2a:c8:90:53:02:c4:4e:e9:e3:fa:6a:28:
                    99:36:cf:4e:4a:a6:76:2e:a8:0e:1f:29:42:44:2d:
                    66:a8:31:f2:3d:37:a5:9f:14:b2:e2:6c:35:1f:01:
                    58:49:41:17:8f:30:6d:0a:38:92:7c:05:aa:87:7a:
                    33:09:b2:37:c5:76:dc:2f:08:19:85:f1:47:68:40:
                    9b:75:19:30:08:1a:a4:e8:92:56:88:57:8b:a4:df:
                    03:2e:ea:44:2d:f9:ce:f9:10:54:89:0f:0e:fa:02:
                    19:5f:67:cd:ba:7b:fe:f6:bc:29:8a:e7:b3:34:54:
                    05:29:f7:00:f3:3c:82:62:41:22:de:ea:84:16:0d:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B2:4D:08:D5:73:2C:C4:2A:F2:1D:C9:CF:64:CA:51:12:C7:DE:DC
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:de:7c:25:73:b0:b5:fc:8c:82:0a:c2:cd:53:17:9d:a1:36:
         20:64:84:c5:b5:5d:2a:fe:ae:bf:4e:bc:12:9b:70:7e:ae:bc:
         9f:16:e1:4d:1a:21:4a:a6:4c:ae:54:04:c9:d4:ec:4c:33:b1:
         9f:ee:7d:b4:90:50:09:05:35:85:7a:e7:ef:e7:1a:c6:e2:e3:
         30:6e:c5:21:c9:a0:87:55:4a:dc:34:52:85:c1:fc:ec:e2:bc:
         66:a9:99:de:64:94:2a:ef:2e:23:4b:ea:bc:1e:71:67:39:03:
         90:02:5b:75:a7:4e:0a:9b:e8:4b:35:26:f8:d1:e2:6f:b4:72:
         95:84:00:8a:72:5a:d0:11:80:10:b3:36:76:a6:18:3e:d9:d8:
         1f:23:8c:01:b6:19:72:ad:d7:b2:17:19:fc:7f:f1:8e:7e:ba:
         ed:ef:a0:55:ed:8f:62:aa:f6:3d:38:11:e4:55:e7:8f:61:11:
         f0:af:26:02:04:0b:a5:6b:fa:21:92:0f:37:08:c7:bd:91:e9:
         4e:5e:5a:30:a9:05:e8:3e:99:39:64:3b:32:7b:c3:a2:11:e9:
         85:ec:09:e3:f9:cd:2c:12:81:00:5c:1b:01:09:b6:0c:a8:d5:
         e1:24:ac:18:69:20:1a:86:d5:e2:90:a3:e4:5d:56:a8:03:47:
         7c:a9:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:41:41 2025 by rpki-client