Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130382e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3130382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          9Dn6Vn+NqJ7Wd8fZ2zVXYAUTcCN2Y90bmIa+dGi5kFM=
Subject key identifier:   D4:D4:00:1D:0E:81:E1:08:7F:5B:4D:C1:1F:2B:B4:CF:06:ED:26:1B
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       5FF3CD506186372EA5CD8EA329FA5DCA13164C28
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:23 +0000
ROA not before:           Tue 01 Jul 2025 16:50:23 +0000
ROA not after:            Tue 30 Jun 2026 16:55:23 +0000
asID:                     18822
IP address blocks:        190.215.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f3:cd:50:61:86:37:2e:a5:cd:8e:a3:29:fa:5d:ca:13:16:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:23 2025 GMT
            Not After : Jun 30 16:55:23 2026 GMT
        Subject: CN=D4D4001D0E81E1087F5B4DC11F2BB4CF06ED261B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:90:b1:9b:b6:18:bc:07:9d:bf:bb:8f:32:
                    91:55:72:88:31:0d:af:68:8f:f8:2a:36:00:75:8f:
                    83:32:10:5f:e5:9a:ae:f8:4a:aa:46:4b:13:4e:f5:
                    97:2b:a4:91:fc:b3:b1:a1:45:5a:f0:9d:47:74:e3:
                    31:d0:e9:2d:ce:15:96:46:d3:24:2b:4f:db:c6:e6:
                    d8:6d:4d:e8:ff:89:e3:59:60:f4:6f:09:be:8b:2a:
                    0a:ca:e7:86:f6:f8:4c:2c:0e:ed:6d:4e:5e:3e:7b:
                    92:69:d8:40:5c:34:a0:20:88:38:21:f9:c7:5f:f8:
                    22:a3:f4:91:a9:3e:c5:59:32:22:30:3c:f3:3a:bc:
                    0d:f9:83:1e:bc:dd:32:10:6f:c6:0b:10:15:6d:60:
                    38:6a:84:56:fb:7c:80:1b:1d:86:44:e9:3e:c4:ac:
                    9c:a0:f1:6d:b3:de:eb:88:ca:0c:0f:1c:f8:31:85:
                    6f:e2:70:bd:3c:be:09:38:fa:ba:44:08:14:85:3e:
                    e1:b5:c2:09:b1:41:d4:c6:1f:55:cf:7e:a1:12:6e:
                    91:d3:ae:a4:05:d9:3d:b4:1b:b8:a1:fe:3a:8f:43:
                    1b:38:ed:a1:d4:18:1c:53:97:c8:7f:cb:3d:1c:a2:
                    76:4f:03:3a:55:66:b1:3a:98:d3:7e:24:f6:bd:de:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D4:00:1D:0E:81:E1:08:7F:5B:4D:C1:1F:2B:B4:CF:06:ED:26:1B
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:82:b2:7e:75:48:af:19:27:73:67:24:1e:e8:38:c5:79:2d:
         bb:b2:cd:4e:33:9a:98:05:34:56:f6:4d:c6:0c:62:76:0b:d6:
         e8:91:94:2e:99:8e:c3:fa:f2:5c:36:79:7a:43:96:30:db:d6:
         a1:05:54:f2:df:0d:de:a3:81:05:9c:bb:6c:28:4a:2a:4e:5c:
         48:80:e2:0e:f2:48:6a:c6:84:11:16:d5:23:0f:fe:41:7b:f7:
         0a:25:a8:ea:e8:76:28:98:36:ee:5d:c3:e3:c0:bb:17:cf:61:
         b5:c9:8e:38:94:4a:80:1b:da:56:41:fa:b0:c6:9c:9f:60:b0:
         e8:50:d7:97:43:64:30:8f:e4:99:f0:98:7b:78:10:5b:59:d0:
         74:38:d1:27:57:9b:31:52:08:60:93:ea:f5:98:4f:dc:86:5f:
         3e:24:52:bd:54:74:81:cd:90:2d:ca:c2:dd:0b:cb:3b:06:7b:
         d0:80:dd:58:16:19:56:e6:d8:80:b5:5b:4b:62:00:b9:8f:53:
         cc:6a:1f:24:72:0e:b0:30:5f:0b:82:2d:f4:01:52:b2:fd:c7:
         d5:00:ed:9a:a5:cc:37:8b:6d:6c:08:3b:57:32:84:90:f7:4a:
         0c:38:bc:f9:57:93:b2:ca:bc:17:a1:f2:60:3a:1c:d7:4e:a1:
         cf:dc:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:45:14 2025 by rpki-client