Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134362e302f32332d3234203d3e203138383232.roa
File:                     3139302e3231352e3134362e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          LKKRrv2sI+/pWgnK01QfB0E5pY4szm1M3egsww471HE=
Subject key identifier:   F4:C6:48:AD:62:C8:FA:81:FB:56:77:A1:BD:70:A8:AB:B7:4E:E0:8A
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       517EF08FD16565F9D59EB119795633120160971C
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134362e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:15 +0000
ROA not before:           Tue 01 Jul 2025 16:50:15 +0000
ROA not after:            Tue 30 Jun 2026 16:55:15 +0000
asID:                     18822
IP address blocks:        190.215.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7e:f0:8f:d1:65:65:f9:d5:9e:b1:19:79:56:33:12:01:60:97:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:15 2025 GMT
            Not After : Jun 30 16:55:15 2026 GMT
        Subject: CN=F4C648AD62C8FA81FB5677A1BD70A8ABB74EE08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:8e:1d:20:42:e0:d0:65:b8:d8:0f:0c:e8:
                    6c:0f:3d:cc:af:01:f4:76:a5:1c:02:f8:df:ab:bf:
                    f7:f9:0a:99:3e:51:66:56:1c:6c:fe:5e:da:68:39:
                    8b:72:0e:50:fc:3d:5f:25:64:76:8c:c5:e1:31:e3:
                    fe:ff:f1:79:2d:3b:19:0f:14:5b:90:20:68:29:52:
                    48:34:a3:55:84:8a:0b:8a:84:f4:77:47:6c:a9:af:
                    a6:7b:d2:e8:a6:7e:ee:7b:5a:32:b4:a5:92:2f:ee:
                    df:66:b2:ba:72:8f:19:a0:a3:65:7e:97:70:8c:d3:
                    a8:bc:e5:63:59:e0:a7:9e:28:b9:c5:2f:49:fa:e4:
                    93:26:7b:9b:96:b2:1c:21:05:12:29:4c:a4:41:14:
                    6b:e6:44:fb:5f:90:3e:fb:42:cc:06:a4:25:77:02:
                    88:e8:de:3f:70:b3:58:69:12:15:70:17:45:85:64:
                    b6:0b:ee:b3:54:90:a9:1f:59:1e:b8:f1:be:67:62:
                    c9:ad:d2:7b:de:80:47:4e:38:be:53:72:94:05:64:
                    67:8b:f2:aa:d2:24:7d:1d:84:a7:66:30:00:3a:b7:
                    6d:79:8e:0b:a1:26:32:6b:18:9f:c5:ae:32:7e:20:
                    c9:11:8d:7e:12:04:a7:73:1d:0b:c6:be:74:ed:d6:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:48:AD:62:C8:FA:81:FB:56:77:A1:BD:70:A8:AB:B7:4E:E0:8A
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134362e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:72:35:75:37:21:3c:f2:88:c0:b5:fa:5c:9b:c4:5a:d9:
         a0:75:59:4a:ba:81:f7:fc:f8:2f:66:62:be:05:d5:8c:63:11:
         37:17:07:38:f7:1b:e1:61:8e:42:f9:13:74:a3:10:49:32:5d:
         4d:30:70:26:54:11:0e:05:f0:e8:8c:1a:cf:f9:6b:f9:bb:b4:
         aa:a5:02:2e:32:7e:11:5e:71:53:46:53:a8:48:6e:09:91:a6:
         67:4a:6a:63:e1:43:01:f5:e6:06:d3:3d:d2:8e:7b:dc:ad:c5:
         7e:6f:2d:4d:6f:69:6c:d9:a5:1e:aa:ed:07:27:1e:4b:53:d4:
         cd:16:d3:6b:76:87:84:be:d2:51:87:98:ec:4b:dc:ce:5e:27:
         30:4e:a2:44:9b:c9:e5:8f:39:fe:b6:f3:a9:d2:ac:c8:9d:45:
         68:6c:df:c3:9f:8f:c0:57:b7:53:00:df:76:2f:cb:a7:ea:d1:
         dd:41:bc:35:94:65:ae:0f:0f:1b:27:cd:e1:1c:3c:cd:e8:00:
         64:fe:dc:79:db:ed:58:f0:e8:16:6d:7e:62:9f:c6:41:d7:69:
         62:92:7e:87:99:b4:93:07:1f:a4:27:00:b5:fe:0f:ff:19:72:
         6f:1d:ad:d1:4d:88:29:3b:a4:2d:36:cd:8c:e1:44:8c:48:d5:
         38:6b:e7:ba
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUX7wj9FlZfnVnrEZeVYzEgFglxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNTA3MDExNjUwMTVaFw0yNjA2MzAxNjU1MTVaMDMxMTAvBgNV
BAMTKEY0QzY0OEFENjJDOEZBODFGQjU2NzdBMUJENzBBOEFCQjc0RUUwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGY4dIELg0GW42A8M6GwPPcyv
AfR2pRwC+N+rv/f5Cpk+UWZWHGz+XtpoOYtyDlD8PV8lZHaMxeEx4/7/8XktOxkP
FFuQIGgpUkg0o1WEiguKhPR3R2ypr6Z70uimfu57WjK0pZIv7t9msrpyjxmgo2V+
l3CM06i85WNZ4KeeKLnFL0n65JMme5uWshwhBRIpTKRBFGvmRPtfkD77QswGpCV3
Aojo3j9ws1hpEhVwF0WFZLYL7rNUkKkfWR648b5nYsmt0nvegEdOOL5TcpQFZGeL
8qrSJH0dhKdmMAA6t215jguhJjJrGJ/FrjJ+IMkRjX4SBKdzHQvGvnTt1pJFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9MZIrWLI+oH7VnehvXCoq7dO4IowHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzIzMTM1MmUzMTM0MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvteS
MA0GCSqGSIb3DQEBCwUAA4IBAQAA5HI1dTchPPKIwLX6XJvEWtmgdVlKuoH3/Pgv
ZmK+BdWMYxE3Fwc49xvhYY5C+RN0oxBJMl1NMHAmVBEOBfDojBrP+Wv5u7SqpQIu
Mn4RXnFTRlOoSG4JkaZnSmpj4UMB9eYG0z3SjnvcrcV+by1Nb2ls2aUequ0HJx5L
U9TNFtNrdoeEvtJRh5jsS9zOXicwTqJEm8nljzn+tvOp0qzInUVobN/Dn4/AV7dT
AN92L8un6tHdQbw1lGWuDw8bJ83hHDzN6ABk/tx52+1Y8OgWbX5in8ZB12likn6H
mbSTBx+kJwC1/g//GXJvHa3RTYgpO6QtNs2M4USMSNU4a+e6
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:45:14 2025 by rpki-client