Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e35312e302f32342d3234203d3e203532343739.roa
File:                     3139302e3231352e35312e302f32342d3234203d3e203532343739.roa (raw, json)
Hash identifier:          BUrA0J0dgtdoA4vbEYmRixUDrbkFb0g8ZJ4pxdrTXok=
Subject key identifier:   B6:6D:D3:52:6C:65:98:74:27:59:66:A8:39:34:3C:B6:F8:D8:2F:84
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       2F8939A4454167CDCD3F243C434062A97A40056C
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e35312e302f32342d3234203d3e203532343739.roa
Signing time:             Tue 01 Jul 2025 16:55:19 +0000
ROA not before:           Tue 01 Jul 2025 16:50:19 +0000
ROA not after:            Tue 30 Jun 2026 16:55:19 +0000
asID:                     52479
IP address blocks:        190.215.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:89:39:a4:45:41:67:cd:cd:3f:24:3c:43:40:62:a9:7a:40:05:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:19 2025 GMT
            Not After : Jun 30 16:55:19 2026 GMT
        Subject: CN=B66DD3526C659874275966A839343CB6F8D82F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:06:c3:42:48:b0:d4:56:12:d2:47:0c:db:
                    5f:f5:7b:45:e5:03:06:07:82:ba:3b:8b:d0:e1:f7:
                    45:ef:21:d3:45:5a:4a:e1:24:50:0c:36:8e:c8:c3:
                    09:01:5e:ca:f6:de:e4:de:39:23:a3:d9:85:23:70:
                    fe:d7:6f:1a:c1:7c:16:15:38:4d:c8:b8:ef:57:53:
                    97:b3:5f:8e:5f:c5:4c:cd:01:d5:fc:40:f5:dd:aa:
                    14:56:df:d0:f2:1e:bb:7b:24:a7:f8:4a:96:e8:a0:
                    0e:03:1f:be:8e:d9:92:1e:48:a9:d3:eb:86:c3:13:
                    38:c2:7c:2b:5c:9c:4d:ed:1c:10:9e:76:94:15:c6:
                    41:49:9d:44:78:9a:86:df:21:be:94:45:e4:1e:d1:
                    03:fb:16:96:b4:61:d7:88:e3:d9:c1:bf:0f:b5:a5:
                    cf:05:a8:1a:f9:44:90:55:1f:1a:5a:da:ee:cf:69:
                    ee:32:86:66:8c:ca:70:51:ac:a2:6a:44:0c:84:dc:
                    c8:33:35:84:10:b7:aa:58:ae:93:89:7e:97:03:cd:
                    38:7d:26:ae:36:08:61:7a:2c:8a:30:d3:dc:72:75:
                    e0:73:10:0b:32:d8:5d:85:89:3d:58:a5:44:74:49:
                    b8:cf:a7:36:04:64:9a:92:0e:ea:d6:f7:bf:0c:84:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6D:D3:52:6C:65:98:74:27:59:66:A8:39:34:3C:B6:F8:D8:2F:84
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e35312e302f32342d3234203d3e203532343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:79:42:cc:7b:57:4a:42:b4:66:fa:e3:31:3e:64:d5:bf:
         6e:bf:84:fd:04:e0:68:5e:34:10:df:d8:fe:eb:29:34:28:70:
         09:0b:89:5e:70:9d:47:79:e1:7e:fd:8e:3b:7e:1c:f4:6e:cf:
         bc:46:88:d8:61:44:5d:b4:a7:06:29:41:a9:c3:e1:e6:2e:f6:
         2e:f1:28:74:ab:f0:be:b9:20:88:6b:a8:90:d2:03:a6:6c:ab:
         e8:8c:0f:a8:9b:50:f8:ae:97:79:3f:2e:6c:46:f7:1c:5a:3c:
         ed:0c:c1:33:6f:e0:af:55:f4:ff:6d:25:d5:d6:d6:16:96:62:
         66:6f:a0:5a:fe:1c:ee:c9:24:87:76:51:b0:d0:91:04:62:ab:
         35:ca:a4:79:9a:a5:43:4a:f0:5f:c9:b6:01:0e:c1:77:f0:7e:
         39:e2:e6:6f:53:fb:84:3d:df:66:ed:2e:e9:78:5e:cb:90:24:
         4f:53:28:ef:d0:11:74:80:42:f0:fb:3c:1e:1e:82:d7:83:47:
         bb:e4:66:d9:92:69:5f:d1:bd:47:93:8a:c6:ca:74:d6:e7:82:
         99:18:eb:63:b1:59:84:cd:59:87:69:53:b3:99:9d:56:46:52:
         7c:02:ef:b9:16:09:94:e8:1a:10:12:33:0b:39:6c:2a:a2:a1:
         d5:fc:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:47:26 2025 by rpki-client