Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          /OQGh+9jDqODq1lKOxw6fEsfAm5EAIYnRLxDynRq2G4=
Subject key identifier:   B8:A1:BD:68:57:C9:28:8E:C0:01:BB:AA:F8:C7:55:A8:66:82:50:B6
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       05AEEA385F114AC59CFF29AAF0E14346457EDEC1
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:12 +0000
ROA not before:           Tue 01 Jul 2025 16:50:12 +0000
ROA not after:            Tue 30 Jun 2026 16:55:12 +0000
asID:                     18822
IP address blocks:        190.215.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ae:ea:38:5f:11:4a:c5:9c:ff:29:aa:f0:e1:43:46:45:7e:de:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:12 2025 GMT
            Not After : Jun 30 16:55:12 2026 GMT
        Subject: CN=B8A1BD6857C9288EC001BBAAF8C755A8668250B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:fe:36:17:b4:4b:ff:40:4b:75:ac:b7:13:
                    8c:3f:5c:c3:69:e0:de:0e:87:8b:1a:1a:b5:32:37:
                    d7:af:f8:40:50:64:d2:18:e7:f5:ea:e1:71:98:76:
                    a5:3f:86:4e:70:6b:a5:84:f3:9f:04:33:8f:e3:c9:
                    70:9e:d8:31:61:bb:f4:4d:e8:2b:2a:df:3c:02:54:
                    b3:24:43:b1:a0:a5:c3:a9:8f:e1:d4:04:af:27:57:
                    a1:95:27:3f:36:af:a3:1f:86:ec:88:52:38:ef:6d:
                    ad:01:63:25:ec:15:3f:87:b8:af:fd:a0:9e:01:a6:
                    4f:fa:83:ff:5e:36:da:db:64:06:e9:c9:cd:5a:66:
                    d0:35:2f:c5:56:29:07:19:78:86:a2:25:da:a3:b5:
                    ea:ac:44:0d:52:13:d7:61:9c:c2:0c:15:e5:b8:79:
                    f7:bc:cd:9b:a5:b1:ca:57:60:c0:a0:23:b2:07:1a:
                    56:0f:04:0a:a3:13:cb:52:6c:f9:57:26:50:3a:a9:
                    89:da:c7:a3:94:5b:eb:c9:6a:26:48:77:5f:5c:24:
                    d5:23:e4:d9:a0:a3:d5:1b:17:14:7c:b6:d8:64:5d:
                    0f:89:e4:78:15:68:88:ca:3b:fb:03:1b:64:e2:d9:
                    82:96:93:12:4e:5d:80:56:17:3f:5d:8d:6a:ce:4a:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:BD:68:57:C9:28:8E:C0:01:BB:AA:F8:C7:55:A8:66:82:50:B6
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:47:1a:60:13:a0:21:a5:69:60:3f:a0:ae:1a:c4:1e:8d:13:
         bb:23:4c:bd:d4:7b:39:1a:41:57:74:c0:42:b2:00:97:56:4b:
         1d:ea:de:4e:8e:31:c2:7b:ae:1c:ae:1f:1e:98:40:6a:2e:99:
         1b:3b:a6:17:c9:cd:63:07:57:b9:2d:23:e5:dd:20:40:54:a3:
         1d:92:a4:04:5b:60:13:3e:ed:a5:34:18:ae:13:4d:0d:b2:4c:
         6c:88:d6:e6:b7:16:d4:8c:0a:02:17:7f:40:4c:ee:53:99:26:
         4f:9b:8b:81:c3:5f:0a:ce:7c:2c:98:5d:13:21:e1:53:b4:ef:
         76:85:f6:e3:a2:e6:94:c7:80:64:e8:50:dd:99:5a:9f:3d:af:
         11:4b:bd:c4:44:44:22:05:f4:c8:cc:26:66:8d:d8:73:5a:62:
         60:e3:4e:40:0e:98:0f:19:ca:6a:8e:6e:cb:bd:b0:6a:cb:71:
         39:d1:24:20:d1:22:a5:13:f8:75:47:07:5d:72:96:83:b6:68:
         50:47:4f:ab:6a:0c:24:8b:2e:51:c2:f3:84:5f:a5:be:9d:9f:
         f0:b1:a8:ee:a3:29:0f:2e:e0:ad:b5:d8:b6:59:56:4b:36:e7:
         5f:fb:a9:fc:ac:57:1c:21:92:13:b3:4a:85:60:28:94:44:47:
         e5:41:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:38:52 2025 by rpki-client