Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134342e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3134342e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          f1PR3KJZNXL0DKcOMOOPBbgaOL70OORPDG9ftJEoffk=
Subject key identifier:   35:6F:0A:B7:B5:B4:CD:DC:A3:CA:2B:AF:DE:05:F4:C0:C0:17:67:F8
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       08A0B3A8190B273A329AF62B40F54A3A2C72B1E6
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134342e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:00 +0000
ROA not before:           Tue 01 Jul 2025 16:50:00 +0000
ROA not after:            Tue 30 Jun 2026 16:55:00 +0000
asID:                     18822
IP address blocks:        190.215.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a0:b3:a8:19:0b:27:3a:32:9a:f6:2b:40:f5:4a:3a:2c:72:b1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:00 2025 GMT
            Not After : Jun 30 16:55:00 2026 GMT
        Subject: CN=356F0AB7B5B4CDDCA3CA2BAFDE05F4C0C01767F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:60:25:1e:71:7b:d9:02:1b:ec:36:2d:7a:
                    9a:c3:f6:2b:5c:59:59:cc:6d:92:26:a4:51:cd:aa:
                    21:81:03:03:f3:d6:2d:7b:18:c4:6d:2e:c7:27:7b:
                    8b:76:e9:78:05:c9:bb:ca:db:f0:18:50:7d:ff:bd:
                    df:19:d5:88:c9:89:64:40:4c:72:16:0d:e2:ec:d2:
                    66:2d:f1:35:ed:ba:c1:e9:e4:a3:dd:74:fc:fc:8b:
                    40:1d:dc:ff:e2:47:76:5f:61:1d:be:06:cd:b2:7a:
                    9f:b4:71:79:fe:24:c8:24:f7:e3:2c:8c:c1:62:d4:
                    43:93:27:75:1e:25:bd:65:cd:95:8a:93:07:bb:63:
                    1a:79:00:6a:c0:5b:7b:6e:ca:d4:e0:b9:e2:5e:c1:
                    95:84:3c:9c:cb:e6:8b:8a:db:e2:e4:70:06:4a:9a:
                    1f:cd:53:8c:61:c0:2c:9e:00:35:31:2c:62:47:6a:
                    86:59:5f:4b:9c:91:84:2e:9f:bc:7f:a3:f4:00:d2:
                    29:5f:eb:93:2f:ef:c5:9d:0e:47:a0:9e:c3:7b:fb:
                    db:2f:12:8f:f5:86:c3:bc:cf:e0:5b:43:1f:45:31:
                    bd:c6:75:1f:fc:f0:92:d2:66:ac:1e:0d:00:99:eb:
                    aa:d6:3a:54:3a:9c:bc:9c:24:14:6b:98:52:d8:4b:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:0A:B7:B5:B4:CD:DC:A3:CA:2B:AF:DE:05:F4:C0:C0:17:67:F8
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134342e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ce:5e:5e:94:96:8d:1f:25:a0:93:35:76:a0:c1:1e:1f:02:
         16:b5:e3:bc:5b:8b:91:8e:24:f8:10:b9:12:ba:36:c5:c5:37:
         cf:ca:bc:6d:75:6c:ea:a9:9d:c5:7f:c5:4a:56:61:c9:1c:58:
         27:a7:59:57:b6:16:d5:76:27:9c:6a:00:df:9f:be:0d:81:e4:
         25:59:84:13:1c:9f:cd:c0:21:48:9e:fd:61:a7:9f:f2:cc:c1:
         5f:6e:51:0a:70:a6:42:1b:58:72:45:c5:2e:a5:b1:60:08:17:
         72:3a:72:48:66:57:1c:09:1e:59:4c:7c:17:69:b2:c2:21:6f:
         35:20:fd:38:2a:52:eb:55:aa:81:83:80:e4:e0:34:15:c8:4d:
         a9:04:0c:b3:3c:52:e6:86:0f:6a:6a:68:e7:2f:df:47:31:b7:
         94:83:19:f5:eb:b1:b6:00:b8:32:9d:58:26:21:96:85:e7:35:
         a9:c8:5b:55:c1:1b:3e:ad:8a:68:55:e2:e9:f4:99:fb:c3:78:
         dc:79:d3:8d:80:b3:6c:83:0c:37:3c:6a:9a:11:cf:90:70:d2:
         29:d7:a9:91:4d:0c:f4:18:a3:ac:57:cc:26:c3:cf:0b:0e:f2:
         b7:6a:22:3e:d8:41:b4:17:a8:e1:88:9c:ec:7c:1b:2e:a4:14:
         f6:3c:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:39:53 2025 by rpki-client