Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3135322e302f32312d3234203d3e203138383232.roa
File:                     3139302e3231352e3135322e302f32312d3234203d3e203138383232.roa (raw, json)
Hash identifier:          K+BmWvPYk8uo1xhgCUJTRTDQkXX98hnPlCL9kag85Tk=
Subject key identifier:   15:0F:DE:39:BC:1A:00:2D:30:5C:34:04:40:6E:87:08:77:C4:C5:59
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       335E82ED02F507CD2AAC4B880A1FC962D435D0DD
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3135322e302f32312d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:09 +0000
ROA not before:           Tue 01 Jul 2025 16:50:09 +0000
ROA not after:            Tue 30 Jun 2026 16:55:09 +0000
asID:                     18822
IP address blocks:        190.215.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5e:82:ed:02:f5:07:cd:2a:ac:4b:88:0a:1f:c9:62:d4:35:d0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:09 2025 GMT
            Not After : Jun 30 16:55:09 2026 GMT
        Subject: CN=150FDE39BC1A002D305C3404406E870877C4C559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:4d:5c:0a:62:6d:bb:3b:d4:cc:f1:1e:37:
                    60:99:67:69:b6:2d:f1:c4:59:36:31:60:f8:02:5e:
                    58:99:51:89:2f:a4:94:ca:05:0c:b7:6e:1c:77:73:
                    1f:84:0a:d2:41:cc:da:27:41:81:fe:cd:7e:64:f1:
                    f0:23:d4:7a:30:c1:67:2c:fb:d9:2c:fa:d2:48:99:
                    ec:34:c8:bf:b2:a8:44:4f:25:59:90:17:83:ad:4b:
                    8a:81:ea:7c:1d:35:92:c4:fd:36:ab:63:3a:37:06:
                    39:b7:b3:3d:2d:8a:68:50:bb:64:49:c8:af:64:9c:
                    4e:a3:32:b4:66:12:68:16:fc:b8:90:d1:f3:a3:20:
                    f9:cf:77:de:70:e3:cc:35:dd:0e:6e:43:3c:41:06:
                    63:2f:5f:e2:5c:b3:ff:be:23:16:33:3c:bc:e6:e6:
                    5b:d6:f0:8f:4f:e4:59:4a:a5:68:4c:33:2e:ec:f3:
                    8b:9c:f8:3a:86:4d:c9:90:b6:0b:8e:f8:28:47:7f:
                    90:37:6b:2c:47:eb:4a:e5:96:79:11:cb:78:e9:d2:
                    96:a0:65:ab:b3:05:b2:f3:b2:bf:81:a2:e1:3b:5c:
                    d5:7b:b7:80:67:de:a1:ba:af:21:28:3e:d0:19:93:
                    3e:ea:d8:58:76:24:41:b8:e3:67:a7:cb:b0:30:58:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0F:DE:39:BC:1A:00:2D:30:5C:34:04:40:6E:87:08:77:C4:C5:59
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3135322e302f32312d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:f2:d0:bc:39:b8:f7:4f:85:ff:ef:39:b2:e4:86:8d:e8:
         dc:d8:d1:72:5d:42:f0:bd:79:90:ba:a8:7f:1f:b3:6b:ae:07:
         4e:f8:2e:7b:7a:59:fe:40:f7:b0:da:31:93:f0:df:c2:a7:e6:
         7e:eb:d6:4d:95:8e:71:39:74:95:a3:29:99:3f:64:c5:e7:68:
         93:0c:82:d8:fe:4d:c3:ff:ac:53:a5:fd:14:96:a2:40:a9:49:
         07:0f:c0:93:97:42:39:67:78:fe:b9:0b:c9:58:66:d4:06:32:
         1c:90:e2:94:71:1e:0a:ef:ae:af:6b:ac:bb:c9:8e:65:b4:69:
         a6:13:d3:70:35:a8:d4:e0:18:2e:f6:6b:fd:94:82:58:c7:09:
         68:f3:95:1b:e6:09:c0:e5:73:37:f5:5a:df:32:6e:13:c8:d1:
         b3:3e:ca:6d:3e:c9:cc:a7:b1:71:68:ec:9e:37:3c:7d:80:d0:
         00:40:e7:84:97:d8:98:81:81:3a:b9:7a:ff:7d:b2:19:3b:7e:
         8b:bb:62:49:f7:31:9b:82:d8:45:45:33:b0:07:6e:e9:37:8d:
         46:fd:77:06:d9:28:f5:26:be:2d:1d:e8:73:23:8d:9b:81:d5:
         ea:c1:64:b2:35:bd:bb:f0:8f:d5:15:a5:ec:52:42:7a:7b:fd:
         da:23:fd:63
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUM16C7QL1B80qrEuICh/JYtQ10N0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNTA3MDExNjUwMDlaFw0yNjA2MzAxNjU1MDlaMDMxMTAvBgNV
BAMTKDE1MEZERTM5QkMxQTAwMkQzMDVDMzQwNDQwNkU4NzA4NzdDNEM1NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Tk1cCmJtuzvUzPEeN2CZZ2m2
LfHEWTYxYPgCXliZUYkvpJTKBQy3bhx3cx+ECtJBzNonQYH+zX5k8fAj1HowwWcs
+9ks+tJImew0yL+yqERPJVmQF4OtS4qB6nwdNZLE/TarYzo3Bjm3sz0timhQu2RJ
yK9knE6jMrRmEmgW/LiQ0fOjIPnPd95w48w13Q5uQzxBBmMvX+Jcs/++IxYzPLzm
5lvW8I9P5FlKpWhMMy7s84uc+DqGTcmQtguO+ChHf5A3ayxH60rllnkRy3jp0pag
ZauzBbLzsr+BouE7XNV7t4Bn3qG6ryEoPtAZkz7q2Fh2JEG442eny7AwWGUHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFQ/eObwaAC0wXDQEQG6HCHfExVkwHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzIzMTM1MmUzMTM1MzIy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvteY
MA0GCSqGSIb3DQEBCwUAA4IBAQBPJPLQvDm490+F/+85suSGjejc2NFyXULwvXmQ
uqh/H7NrrgdO+C57eln+QPew2jGT8N/Cp+Z+69ZNlY5xOXSVoymZP2TF52iTDILY
/k3D/6xTpf0UlqJAqUkHD8CTl0I5Z3j+uQvJWGbUBjIckOKUcR4K766va6y7yY5l
tGmmE9NwNajU4Bgu9mv9lIJYxwlo85Ub5gnA5XM39VrfMm4TyNGzPsptPsnMp7Fx
aOyeNzx9gNAAQOeEl9iYgYE6uXr/fbIZO36Lu2JJ9zGbgthFRTOwB27pN41G/XcG
2Sj1Jr4tHehzI42bgdXqwWSyNb278I/VFaXsUkJ6e/3aI/1j
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:37:40 2025 by rpki-client