Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234362e302f32332d3234203d3e203138383232.roa
File:                     3139302e3231352e3234362e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          QbPAtlh8VGQMmiT13bqVEHZYSBBKC0YSqgSFF81MsHo=
Subject key identifier:   21:91:75:DD:47:15:20:DB:39:17:F6:7E:95:B2:7D:29:AF:87:9A:3F
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       1197954C705945E96A540A3CF7F53DA0977EC6E0
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234362e302f32332d3234203d3e203138383232.roa
Signing time:             Wed 04 Mar 2026 09:40:01 +0000
ROA not before:           Wed 04 Mar 2026 09:35:01 +0000
ROA not after:            Wed 03 Mar 2027 09:40:01 +0000
asID:                     18822
IP address blocks:        190.215.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:97:95:4c:70:59:45:e9:6a:54:0a:3c:f7:f5:3d:a0:97:7e:c6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Mar  4 09:35:01 2026 GMT
            Not After : Mar  3 09:40:01 2027 GMT
        Subject: CN=219175DD471520DB3917F67E95B27D29AF879A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:6d:13:33:90:d9:bc:30:bf:3b:7f:35:62:
                    ad:62:81:a8:b4:96:31:7b:c4:ce:97:7f:1a:9c:84:
                    39:94:f6:5e:f6:d8:3a:bd:89:cb:a4:9c:d6:88:0f:
                    53:8b:94:3f:9a:99:dd:68:b3:1b:0f:c5:44:2e:ce:
                    58:d8:29:fb:56:7f:7a:40:52:b5:08:fb:8d:13:c0:
                    f0:e8:cd:06:d9:49:17:87:3e:2c:a2:a3:c7:03:aa:
                    55:26:63:dd:c3:89:7f:1e:a2:e7:97:fb:39:b9:2b:
                    da:e7:6b:b1:de:da:da:f5:79:1f:09:45:43:07:97:
                    9e:1a:9b:e7:50:27:a1:8d:99:82:59:46:61:6c:40:
                    12:d9:89:33:d9:3d:03:67:6f:80:55:a0:73:d3:3c:
                    83:ed:aa:5d:74:be:66:76:4f:df:6d:76:ac:08:18:
                    41:f1:11:8a:18:94:74:20:11:d8:c3:cc:83:2f:47:
                    b3:72:4a:7f:7d:d6:e7:22:bc:c1:1d:4f:0d:f8:55:
                    99:e5:d1:11:c0:a8:e2:6f:74:e4:87:4b:d0:b1:02:
                    06:43:27:0a:1e:5b:f9:18:3c:e0:2f:fa:0b:4a:90:
                    15:6c:fc:d6:9b:65:0c:c0:31:af:c3:be:fa:23:db:
                    df:4e:30:03:7c:f4:a8:92:1c:24:d2:67:89:89:b6:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:75:DD:47:15:20:DB:39:17:F6:7E:95:B2:7D:29:AF:87:9A:3F
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234362e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:55:cb:37:83:4f:b9:80:14:da:06:03:0f:85:3f:17:d5:8b:
         5d:7d:99:cd:30:40:b8:b0:ee:05:40:5c:3d:fe:1e:5e:aa:d0:
         45:71:1c:6e:fc:75:e5:97:67:e4:e6:e8:03:61:bc:84:b4:85:
         31:af:7f:cb:b5:a5:6b:bd:0f:e1:58:4a:bd:ee:58:14:c3:8d:
         9f:9d:23:36:b7:94:98:54:5a:e8:1b:0d:14:71:ac:92:85:02:
         7b:41:ad:c1:09:dc:c7:79:c5:90:b0:8a:f6:8a:56:1b:ff:95:
         d2:33:e9:08:4f:42:ca:c4:8c:7b:af:6c:3e:9a:66:7e:cb:b9:
         c0:f6:63:12:4c:d3:f1:ec:c0:fa:3d:fd:4e:bc:e6:bc:07:eb:
         61:59:ef:78:62:37:a9:da:44:fb:f4:7d:85:02:ce:8a:12:00:
         d2:fa:52:41:d1:95:fc:f5:75:bf:fc:17:13:29:f9:b9:ec:ce:
         1d:10:ec:51:5e:1c:e8:b9:87:77:34:0f:0f:52:3b:54:76:2b:
         c7:95:61:6e:46:8d:81:61:0f:1a:95:35:58:7f:a3:10:f7:4e:
         4e:64:d9:18:91:c4:22:69:c0:b2:7b:7d:d8:59:bc:0e:47:05:
         9d:59:f6:06:81:9d:93:72:82:9e:aa:98:d8:69:c8:86:0c:fd:
         e2:d0:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:23:39 2026 by rpki-client