Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234342e302f32332d3234203d3e203138383232.roa
File:                     3139302e3231352e3234342e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          JL4HmIS3XIt/JfL9tX2gSjmIX6sYqVcx+SypmEs/ung=
Subject key identifier:   89:A3:E1:4F:B9:D3:7D:2A:8F:B5:85:7A:87:7C:73:B6:06:8A:F4:8A
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       73BF4B3058654C646E1A41512091CDE33F3CDB2E
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234342e302f32332d3234203d3e203138383232.roa
Signing time:             Wed 04 Mar 2026 09:40:01 +0000
ROA not before:           Wed 04 Mar 2026 09:35:01 +0000
ROA not after:            Wed 03 Mar 2027 09:40:01 +0000
asID:                     18822
IP address blocks:        190.215.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bf:4b:30:58:65:4c:64:6e:1a:41:51:20:91:cd:e3:3f:3c:db:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Mar  4 09:35:01 2026 GMT
            Not After : Mar  3 09:40:01 2027 GMT
        Subject: CN=89A3E14FB9D37D2A8FB5857A877C73B6068AF48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:12:34:af:21:9e:f8:72:16:19:ed:08:d3:
                    cc:cd:c9:ae:20:e1:27:fb:0e:01:2b:04:be:41:60:
                    53:ba:09:d0:06:ea:36:42:f1:f3:68:f9:af:60:a3:
                    46:e9:38:9b:fc:0b:13:49:86:74:48:cc:c9:d4:3f:
                    10:c5:47:d6:1b:99:8c:03:f0:07:7b:31:17:0b:99:
                    29:fc:14:b0:be:9e:a3:d6:c3:3d:2d:a5:da:30:a1:
                    06:9a:c7:28:b3:e8:5e:cc:d7:00:e4:67:57:42:b0:
                    09:67:cd:72:96:72:2f:85:72:9a:73:6b:d9:69:60:
                    24:28:ca:5b:5e:6b:bd:51:d4:78:ef:ea:fb:06:27:
                    95:9d:57:95:1c:04:cc:0f:22:f8:02:21:61:82:7d:
                    d2:4b:a3:9a:4e:91:d8:12:a1:ab:05:f3:ef:74:42:
                    6d:66:0d:6f:31:ac:dc:58:1e:38:1c:fd:cb:ec:0c:
                    b4:d7:a0:b4:b1:13:93:bc:b8:a7:90:41:5c:a4:d7:
                    14:fa:c8:b7:d0:58:27:92:34:65:49:8b:9a:59:fe:
                    45:95:ac:3d:8c:a8:c1:0d:f3:e2:52:2d:e0:37:73:
                    f4:c0:93:e3:64:5e:9a:de:92:13:01:db:b8:90:41:
                    4b:19:61:53:89:12:7f:cd:23:7b:97:43:25:c6:62:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A3:E1:4F:B9:D3:7D:2A:8F:B5:85:7A:87:7C:73:B6:06:8A:F4:8A
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234342e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:8e:0b:f3:56:f2:dc:6f:61:3e:7b:3e:89:d4:f8:9c:a5:
         a0:c4:aa:79:b3:66:70:2c:cf:7a:67:f5:43:9e:43:95:f2:2c:
         03:a0:61:16:96:bb:1e:ed:2b:3a:5e:bf:ab:de:73:ba:f0:14:
         cf:2d:c6:6f:da:57:fb:15:56:28:99:c4:27:c0:f2:72:7d:68:
         b2:70:c9:16:3d:66:53:b2:0a:48:d7:d3:cd:00:90:1d:6a:4c:
         12:4b:97:62:18:04:f4:cc:86:02:33:83:50:9c:f3:6f:a0:e9:
         5d:66:97:56:90:a7:c3:ce:2b:a8:1a:ca:22:ac:5c:12:ac:66:
         c0:f2:d5:64:5a:ea:39:2d:eb:0d:63:87:78:5c:31:49:58:8a:
         76:4e:00:c5:11:fe:63:7c:07:31:32:fa:7b:05:6a:48:ba:d4:
         ad:7f:d1:ca:70:a4:51:a7:bf:c3:f6:a8:fd:a6:fa:67:5d:ee:
         c1:42:4a:43:00:ea:aa:35:91:18:24:81:c5:3d:4f:1f:13:4c:
         96:39:28:83:c1:ce:fc:26:5e:17:0e:ed:39:fe:f9:0c:57:a1:
         7e:be:01:a4:ef:f9:dd:de:1a:99:99:41:5a:93:03:36:48:95:
         04:7c:bd:a5:5b:bc:7b:a0:b2:ef:5a:c8:73:c0:bf:22:19:23:
         bf:a8:b6:30
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc79LMFhlTGRuGkFRIJHN4z882y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNjAzMDQwOTM1MDFaFw0yNzAzMDMwOTQwMDFaMDMxMTAvBgNV
BAMTKDg5QTNFMTRGQjlEMzdEMkE4RkI1ODU3QTg3N0M3M0I2MDY4QUY0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IhI0ryGe+HIWGe0I08zNya4g
4Sf7DgErBL5BYFO6CdAG6jZC8fNo+a9go0bpOJv8CxNJhnRIzMnUPxDFR9YbmYwD
8Ad7MRcLmSn8FLC+nqPWwz0tpdowoQaaxyiz6F7M1wDkZ1dCsAlnzXKWci+Fcppz
a9lpYCQoyltea71R1Hjv6vsGJ5WdV5UcBMwPIvgCIWGCfdJLo5pOkdgSoasF8+90
Qm1mDW8xrNxYHjgc/cvsDLTXoLSxE5O8uKeQQVyk1xT6yLfQWCeSNGVJi5pZ/kWV
rD2MqMEN8+JSLeA3c/TAk+NkXprekhMB27iQQUsZYVOJEn/NI3uXQyXGYiTpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiaPhT7nTfSqPtYV6h3xztgaK9IowHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzIzMTM1MmUzMjM0MzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvtf0
MA0GCSqGSIb3DQEBCwUAA4IBAQC2h44L81by3G9hPns+idT4nKWgxKp5s2ZwLM96
Z/VDnkOV8iwDoGEWlrse7Ss6Xr+r3nO68BTPLcZv2lf7FVYomcQnwPJyfWiycMkW
PWZTsgpI19PNAJAdakwSS5diGAT0zIYCM4NQnPNvoOldZpdWkKfDziuoGsoirFwS
rGbA8tVkWuo5LesNY4d4XDFJWIp2TgDFEf5jfAcxMvp7BWpIutStf9HKcKRRp7/D
9qj9pvpnXe7BQkpDAOqqNZEYJIHFPU8fE0yWOSiDwc78Jl4XDu05/vkMV6F+vgGk
7/nd3hqZmUFakwM2SJUEfL2lW7x7oLLvWshzwL8iGSO/qLYw
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:23:40 2026 by rpki-client