Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3232382e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3232382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          UBmtnvhGlbzI0L3paWFypgNSwt8E1UiCL8JMu6waYU0=
Subject key identifier:   0E:B5:54:9A:BD:24:C0:6C:48:9F:0F:8E:10:18:A7:5F:32:D9:87:BB
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       09A04188A9257F3567F744B07B8542BEB4629E05
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3232382e302f32342d3234203d3e203138383232.roa
Signing time:             Wed 04 Mar 2026 09:35:00 +0000
ROA not before:           Wed 04 Mar 2026 09:30:00 +0000
ROA not after:            Wed 03 Mar 2027 09:35:00 +0000
asID:                     18822
IP address blocks:        190.215.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a0:41:88:a9:25:7f:35:67:f7:44:b0:7b:85:42:be:b4:62:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Mar  4 09:30:00 2026 GMT
            Not After : Mar  3 09:35:00 2027 GMT
        Subject: CN=0EB5549ABD24C06C489F0F8E1018A75F32D987BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:44:6f:1c:00:f9:85:e1:4f:d5:d6:fc:b7:
                    02:43:2a:00:9d:93:9a:70:30:99:a8:b6:ef:77:c3:
                    1e:0e:4e:f2:6d:14:2e:e7:17:5b:e8:d5:8b:2e:b8:
                    76:ac:be:06:27:5b:66:12:c9:ea:c8:ba:5e:03:08:
                    b9:ee:b3:e0:80:e0:2a:e4:19:66:20:3b:07:38:cf:
                    2f:6c:95:55:c6:b1:16:a8:1f:8f:af:06:6d:6a:69:
                    df:95:9a:d9:ff:7e:83:72:3e:85:c7:63:f6:5a:14:
                    2a:e5:84:6e:c0:5e:17:bf:f6:a5:29:3c:32:1a:69:
                    f3:7b:de:64:23:92:e4:06:b6:07:c1:f6:c3:09:18:
                    0a:fb:30:4d:42:64:ed:8e:1e:64:93:3c:bd:00:2d:
                    66:fd:0b:ff:f6:c5:01:63:55:2b:d6:2e:6f:6e:b1:
                    c1:94:d0:b8:88:bf:0b:72:04:a4:56:0d:d2:e5:12:
                    73:c0:fb:5d:5c:ea:ec:54:4b:33:62:00:9e:f4:e3:
                    3f:70:9f:48:d4:2b:a0:ff:0a:ad:ff:ae:83:c0:87:
                    0a:e2:37:2e:2a:e4:00:d7:df:53:e7:2b:2b:41:11:
                    7c:fd:b2:96:f0:ad:5b:ea:98:ba:b7:01:43:45:75:
                    63:fa:a6:f2:d3:16:83:43:58:00:65:2e:78:a6:d5:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:54:9A:BD:24:C0:6C:48:9F:0F:8E:10:18:A7:5F:32:D9:87:BB
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3232382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:5d:4d:d7:0b:e3:8e:d4:90:52:53:b0:95:03:64:76:23:
         66:c9:7b:ba:ce:cc:9e:20:e8:7b:37:68:e4:e9:73:1c:70:34:
         b3:67:2d:ae:07:64:8f:4c:fb:57:11:2d:58:26:cc:3d:fc:75:
         bd:fd:bb:99:46:38:64:1e:3d:49:17:01:e5:2e:18:70:03:ae:
         de:e5:0a:e9:2b:d3:82:12:a2:55:fc:2b:0a:d0:dc:ba:0a:1f:
         cd:cf:ac:d1:1d:db:da:fc:21:f7:3d:87:14:b6:30:00:17:3f:
         a3:10:47:e3:21:a1:d2:1a:e2:02:03:56:01:8d:b6:ce:94:71:
         a0:85:28:41:08:ce:d8:10:5c:2c:4d:d3:6d:a2:bc:d3:dc:fa:
         34:05:aa:1b:27:3c:72:c7:64:78:cd:5c:a6:20:5b:5b:73:ec:
         2c:12:c2:1b:4a:f8:0e:8a:5c:e8:44:6d:35:9c:b1:6d:1f:f3:
         b3:5e:05:b0:c6:5e:0d:b6:31:f7:41:ac:b9:71:ac:c6:b4:24:
         4f:df:09:f8:61:13:93:27:24:20:61:d3:34:23:08:d4:12:ce:
         db:8b:75:1b:dc:c8:86:23:7d:63:35:da:b0:62:b3:82:c5:5d:
         b2:bb:73:a8:f2:9a:be:e0:05:91:eb:6f:0b:51:e9:1c:91:15:
         b0:8c:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:23:40 2026 by rpki-client