Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3136382e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e3136382e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          QTcHD4TzPxHBO3G/iaeBNXoeJnDbU3EO0AhaKhrbmAw=
Subject key identifier:   22:2E:6A:24:1D:17:5C:1B:6B:B4:E5:E2:F1:1B:33:9D:42:17:16:58
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       46FAEC4442CAA39C26B31027E2B5EA188F47DF90
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3136382e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:25 +0000
ROA not before:           Tue 02 Jun 2026 17:40:25 +0000
ROA not after:            Tue 01 Jun 2027 17:45:25 +0000
asID:                     18822
IP address blocks:        190.196.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fa:ec:44:42:ca:a3:9c:26:b3:10:27:e2:b5:ea:18:8f:47:df:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:25 2026 GMT
            Not After : Jun  1 17:45:25 2027 GMT
        Subject: CN=222E6A241D175C1B6BB4E5E2F11B339D42171658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:9b:f3:7d:cf:6e:b8:f5:fd:93:c3:9b:25:
                    d1:88:fb:42:52:10:5b:c3:76:3b:ae:a2:60:fc:13:
                    d0:ac:58:bb:76:58:ff:aa:1d:81:d5:f5:7b:97:90:
                    cb:4c:f6:1b:18:2a:28:bd:80:fa:3c:98:fa:5f:f2:
                    b9:8e:37:be:6e:42:a7:4e:c8:7c:a5:19:90:10:b5:
                    0e:59:f6:08:c2:70:2c:65:53:16:9e:34:c0:d4:9f:
                    2b:ec:60:51:be:5d:89:29:1b:50:0d:95:8b:0d:8c:
                    cd:41:aa:f0:6a:6f:09:72:34:a3:18:20:69:07:e2:
                    d6:ad:42:16:f6:e0:22:00:e5:2e:69:37:47:dd:ec:
                    a4:8d:6d:75:82:df:d1:83:a9:6f:00:79:3e:11:70:
                    11:04:4f:57:a9:4e:ee:50:7f:81:48:05:49:67:3c:
                    fd:46:0c:da:2e:ec:03:b4:6f:12:7c:ca:df:7b:e8:
                    50:3e:da:8f:e0:ef:42:26:65:d2:dd:0c:c1:ff:a1:
                    58:bc:4e:ab:a9:0c:6c:b5:cd:1d:c0:12:51:6b:a0:
                    cd:b5:a4:6c:c1:ee:1c:fa:74:b6:5b:14:13:89:68:
                    14:d5:a2:41:13:d9:c2:e0:0b:69:d3:ec:e3:6b:bc:
                    5f:25:5c:e9:2b:26:3a:fc:4a:26:f0:90:3b:77:e8:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2E:6A:24:1D:17:5C:1B:6B:B4:E5:E2:F1:1B:33:9D:42:17:16:58
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3136382e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:69:b0:ef:1a:2a:94:9a:d4:4e:07:c1:71:e5:8f:78:49:06:
         d6:0a:a9:c6:be:5e:07:c0:8d:16:a2:70:0c:f1:12:fc:97:af:
         00:f0:c9:d7:0d:01:12:84:82:b6:51:98:13:30:d0:1a:a3:e1:
         c3:fe:70:18:dd:06:fd:84:ee:8c:9c:36:8c:3b:62:25:37:7c:
         7b:86:db:8f:19:15:aa:5d:61:60:cf:3d:54:cc:af:6b:72:1d:
         21:21:8d:4c:d7:d2:96:c4:f2:72:88:39:f5:6e:24:bc:54:50:
         d3:e3:53:d5:31:dc:a6:ed:32:5e:76:db:1e:9d:b3:3b:12:60:
         4d:a4:45:66:20:1c:71:50:56:93:e0:03:ca:0c:2e:4a:0f:97:
         65:a1:9c:88:f9:d5:50:1d:20:8a:59:e2:34:f5:ff:3e:72:b6:
         3c:13:6d:36:57:3e:77:2d:93:75:87:4b:49:1a:75:37:12:b9:
         07:16:80:b7:c8:4e:01:c0:d0:ed:1a:96:06:cb:3e:2a:26:6e:
         47:13:ba:9a:cc:24:62:23:24:8b:fe:46:62:ff:c4:a9:20:15:
         28:f9:c5:e6:05:bc:f3:f6:c9:cf:d9:b8:16:75:44:aa:8e:f4:
         9e:f0:6d:6f:68:94:3a:bc:c2:1a:aa:e9:f3:8c:94:00:4f:d6:
         f5:ac:92:c1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURvrsRELKo5wmsxAn4rXqGI9H35AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNjA2MDIxNzQwMjVaFw0yNzA2MDExNzQ1MjVaMDMxMTAvBgNV
BAMTKDIyMkU2QTI0MUQxNzVDMUI2QkI0RTVFMkYxMUIzMzlENDIxNzE2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WZvzfc9uuPX9k8ObJdGI+0JS
EFvDdjuuomD8E9CsWLt2WP+qHYHV9XuXkMtM9hsYKii9gPo8mPpf8rmON75uQqdO
yHylGZAQtQ5Z9gjCcCxlUxaeNMDUnyvsYFG+XYkpG1ANlYsNjM1BqvBqbwlyNKMY
IGkH4tatQhb24CIA5S5pN0fd7KSNbXWC39GDqW8AeT4RcBEET1epTu5Qf4FIBUln
PP1GDNou7AO0bxJ8yt976FA+2o/g70ImZdLdDMH/oVi8TqupDGy1zR3AElFroM21
pGzB7hz6dLZbFBOJaBTVokET2cLgC2nT7ONrvF8lXOkrJjr8SibwkDt36IIXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIi5qJB0XXBtrtOXi8RsznUIXFlgwHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzEzOTM2MmUzMTM2Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvsSo
MA0GCSqGSIb3DQEBCwUAA4IBAQADabDvGiqUmtROB8Fx5Y94SQbWCqnGvl4HwI0W
onAM8RL8l68A8MnXDQEShIK2UZgTMNAao+HD/nAY3Qb9hO6MnDaMO2IlN3x7htuP
GRWqXWFgzz1UzK9rch0hIY1M19KWxPJyiDn1biS8VFDT41PVMdym7TJedtsenbM7
EmBNpEVmIBxxUFaT4APKDC5KD5dloZyI+dVQHSCKWeI09f8+crY8E202Vz53LZN1
h0tJGnU3ErkHFoC3yE4BwNDtGpYGyz4qJm5HE7qazCRiIySL/kZi/8SpIBUo+cXm
Bbzz9snP2bgWdUSqjvSe8G1vaJQ6vMIaqunzjJQAT9b1rJLB
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:41:08 2026 by rpki-client