Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3232392e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3232392e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          WmACRxgjvLn234b9Gf0BoMhSagRrDst+K23S3EyCnyc=
Subject key identifier:   33:3E:EA:59:9E:CA:E2:4F:8D:74:71:86:73:1A:85:55:2A:B8:AA:34
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       0945D217C310A794ABE2C1F48EB0834B21E7057E
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3232392e302f32342d3234203d3e203138383232.roa
Signing time:             Wed 04 Mar 2026 09:40:00 +0000
ROA not before:           Wed 04 Mar 2026 09:35:00 +0000
ROA not after:            Wed 03 Mar 2027 09:40:00 +0000
asID:                     18822
IP address blocks:        190.215.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:45:d2:17:c3:10:a7:94:ab:e2:c1:f4:8e:b0:83:4b:21:e7:05:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Mar  4 09:35:00 2026 GMT
            Not After : Mar  3 09:40:00 2027 GMT
        Subject: CN=333EEA599ECAE24F8D747186731A85552AB8AA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:eb:c7:81:0e:8b:0b:1a:00:da:b5:4c:a5:
                    3b:70:f2:30:e9:f7:34:7b:17:23:69:2d:5f:29:a7:
                    ba:99:55:c0:e0:c6:55:45:bd:84:f6:e5:4d:5c:95:
                    ab:3e:59:f3:72:d6:21:fe:96:cb:69:31:bb:57:03:
                    a0:4a:cf:d1:c7:3a:72:d4:92:5e:a9:35:21:28:a6:
                    7c:25:94:ed:f8:7c:de:a8:7b:7d:50:3f:31:e0:d6:
                    59:1c:be:40:4a:e2:07:71:9e:d9:01:f7:f5:e6:50:
                    f8:20:c2:71:49:9e:f0:2e:b3:d4:4a:ee:64:c8:ba:
                    28:20:cd:45:74:ba:e2:89:a5:7d:f4:d3:f2:aa:19:
                    f4:fd:d4:53:80:a9:3c:91:fb:dd:fa:0b:aa:a8:3d:
                    8f:ef:ce:78:81:25:e5:d8:dc:10:3d:48:5f:ec:cb:
                    6e:b5:35:67:90:57:42:3a:42:68:a3:1d:c5:52:5b:
                    61:ab:0d:b5:52:03:36:4c:3a:88:a2:12:04:4c:a1:
                    30:27:5c:61:49:e5:42:c8:cd:67:6f:ff:1f:4c:36:
                    87:d1:57:c8:ba:18:a8:5c:f3:a7:86:66:6b:bf:93:
                    fb:76:70:f2:5b:81:65:d9:c9:1f:8c:78:ff:b3:27:
                    62:0b:0d:63:25:c4:11:ce:e5:df:77:70:a6:ee:ab:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3E:EA:59:9E:CA:E2:4F:8D:74:71:86:73:1A:85:55:2A:B8:AA:34
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3232392e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:58:a7:2d:b7:2d:3d:1c:98:8f:af:61:70:9d:3a:da:a6:e5:
         7d:e2:58:3a:9b:30:28:cd:85:ac:c4:f1:ce:0d:06:53:22:d4:
         43:5d:22:34:6c:4b:3c:10:d9:22:34:53:0d:93:c0:a8:a8:42:
         de:62:7d:cd:2e:69:a8:36:f0:4f:e8:09:eb:1e:aa:08:3f:38:
         69:cf:52:df:56:49:55:b3:77:4b:e4:1c:dc:e1:0f:3c:43:29:
         8a:bc:c7:b2:7b:4d:68:f4:30:7c:38:14:02:8c:2e:9b:51:09:
         cb:0a:1b:27:d5:01:9e:72:84:18:3b:f9:29:dd:81:b9:a0:98:
         4f:4d:c6:df:22:c5:15:00:94:02:93:05:55:4d:f1:2c:b2:c3:
         f2:68:39:c1:2e:50:ea:d2:7e:66:c2:5f:91:8c:7d:a7:43:18:
         56:3e:67:3a:ec:a4:74:d4:af:5a:3a:db:61:79:6b:b2:f3:51:
         47:dc:f7:20:cb:01:d2:e6:74:a2:62:f2:86:25:93:e5:41:e9:
         13:0f:e6:7a:38:67:70:4b:72:ea:9c:85:63:cc:f3:92:29:93:
         0c:1b:e8:9e:7a:f3:65:66:05:4a:64:66:b2:f2:c1:d0:6a:f2:
         f6:88:57:1e:40:d7:10:89:3e:42:92:14:5c:3e:55:0e:40:42:
         04:28:e3:39
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCUXSF8MQp5Sr4sH0jrCDSyHnBX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNjAzMDQwOTM1MDBaFw0yNzAzMDMwOTQwMDBaMDMxMTAvBgNV
BAMTKDMzM0VFQTU5OUVDQUUyNEY4RDc0NzE4NjczMUE4NTU1MkFCOEFBMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKI+vHgQ6LCxoA2rVMpTtw8jDp
9zR7FyNpLV8pp7qZVcDgxlVFvYT25U1clas+WfNy1iH+lstpMbtXA6BKz9HHOnLU
kl6pNSEopnwllO34fN6oe31QPzHg1lkcvkBK4gdxntkB9/XmUPggwnFJnvAus9RK
7mTIuiggzUV0uuKJpX300/KqGfT91FOAqTyR+936C6qoPY/vzniBJeXY3BA9SF/s
y261NWeQV0I6QmijHcVSW2GrDbVSAzZMOoiiEgRMoTAnXGFJ5ULIzWdv/x9MNofR
V8i6GKhc86eGZmu/k/t2cPJbgWXZyR+MeP+zJ2ILDWMlxBHO5d93cKbuq447AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMz7qWZ7K4k+NdHGGcxqFVSq4qjQwHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzIzMTM1MmUzMjMyMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvtfl
MA0GCSqGSIb3DQEBCwUAA4IBAQBlWKctty09HJiPr2FwnTrapuV94lg6mzAozYWs
xPHODQZTItRDXSI0bEs8ENkiNFMNk8CoqELeYn3NLmmoNvBP6AnrHqoIPzhpz1Lf
VklVs3dL5Bzc4Q88QymKvMeye01o9DB8OBQCjC6bUQnLChsn1QGecoQYO/kp3YG5
oJhPTcbfIsUVAJQCkwVVTfEsssPyaDnBLlDq0n5mwl+RjH2nQxhWPmc67KR01K9a
OttheWuy81FH3PcgywHS5nSiYvKGJZPlQekTD+Z6OGdwS3LqnIVjzPOSKZMMG+ie
evNlZgVKZGay8sHQavL2iFceQNcQiT5CkhRcPlUOQEIEKOM5
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:23:40 2026 by rpki-client