Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e32342e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e32342e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          oZXkdlyK6WxKnT7XsxnkZQcu+amSIp60tthhHaIrcfs=
Subject key identifier:   FC:1E:77:CC:D8:65:1E:C1:DC:6B:CA:36:3E:0D:29:C1:69:D0:EF:4D
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       633A0349FAAC9DF999FCF33CA90BE2DF6A4F20C5
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e32342e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:13 +0000
ROA not before:           Tue 02 Jun 2026 17:40:13 +0000
ROA not after:            Tue 01 Jun 2027 17:45:13 +0000
asID:                     18822
IP address blocks:        190.196.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3a:03:49:fa:ac:9d:f9:99:fc:f3:3c:a9:0b:e2:df:6a:4f:20:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:13 2026 GMT
            Not After : Jun  1 17:45:13 2027 GMT
        Subject: CN=FC1E77CCD8651EC1DC6BCA363E0D29C169D0EF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:58:1c:c4:09:2f:a5:94:32:ab:0b:9d:d6:
                    14:d3:14:36:a1:e9:0d:9e:86:68:ab:51:e7:49:42:
                    38:85:45:a6:3e:78:09:f5:8b:e6:3d:4b:fd:85:d8:
                    f0:78:9b:54:86:de:4d:75:2c:f4:90:51:44:df:56:
                    9b:51:14:85:4c:9d:d7:7f:6c:94:74:22:96:47:78:
                    79:48:b7:24:a7:33:26:09:76:72:0c:85:8a:3e:1c:
                    1e:7b:3f:c4:b2:f6:94:94:97:60:87:71:02:e6:cb:
                    10:c5:3c:64:55:c2:2c:95:41:3b:e2:fd:8b:c5:9f:
                    95:f8:85:fb:42:4a:00:bc:70:3d:4d:67:9d:a8:43:
                    b4:0b:fa:cc:ee:f0:45:79:72:54:64:18:5f:2d:0d:
                    ea:2a:fc:79:ea:14:0b:90:fc:40:db:28:e3:aa:0a:
                    54:f9:96:6b:62:43:3e:9b:9a:7e:ec:f7:c6:90:eb:
                    1a:1e:71:cf:6d:1b:c4:9c:27:e3:ae:47:04:f3:22:
                    75:0b:d9:0d:82:ec:4c:ac:2c:87:ef:0d:13:eb:55:
                    f3:25:6d:71:36:bf:0c:8a:3b:73:82:c6:67:5a:8f:
                    e3:ba:ba:10:06:a2:b1:e5:2d:31:4a:01:19:a6:e9:
                    31:94:1b:45:ac:61:48:82:5c:78:a6:82:a9:04:80:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1E:77:CC:D8:65:1E:C1:DC:6B:CA:36:3E:0D:29:C1:69:D0:EF:4D
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e32342e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:d4:bc:94:c8:5b:3b:b7:80:e3:7c:0e:b5:71:d0:82:8b:
         ca:90:0a:56:0d:3f:02:79:ba:18:76:76:f4:77:eb:92:1e:fa:
         e5:1d:1a:3a:e5:8e:6e:38:6b:0c:41:d6:6c:82:ba:a5:98:aa:
         dc:cb:20:98:2c:0c:a7:81:3e:0e:94:ff:6e:79:72:ea:5f:5e:
         9e:ac:ae:4f:f3:78:ae:d2:20:24:0c:e3:a6:e4:9c:58:41:b5:
         63:4a:19:18:2c:c3:a5:6e:c1:41:b2:5d:66:7b:92:1d:3e:ee:
         f0:ae:38:0e:ce:be:5f:d6:5e:a5:05:9e:a6:86:bb:86:fd:fa:
         d8:e1:2a:6f:88:2a:60:ea:dd:0c:e7:41:bd:8c:c5:97:75:70:
         0b:13:1d:9f:2f:b2:bc:89:39:49:89:67:63:ef:50:c1:5f:20:
         03:66:19:6c:62:76:84:5c:3a:e1:bd:bb:04:3a:56:39:2e:94:
         7f:8b:a1:7b:bd:4d:2e:11:63:5e:bc:0f:fa:a8:24:4a:d1:fc:
         cb:b2:4c:11:1a:7a:d1:f4:ca:ac:11:e6:c8:91:29:f7:58:6d:
         f2:11:85:d9:da:16:4a:10:2d:86:ec:4f:4a:cf:e2:9f:ad:62:
         c0:6f:89:1e:da:be:de:74:e0:42:40:76:e1:47:1e:b4:89:99:
         ca:96:2a:2f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYzoDSfqsnfmZ/PM8qQvi32pPIMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNjA2MDIxNzQwMTNaFw0yNzA2MDExNzQ1MTNaMDMxMTAvBgNV
BAMTKEZDMUU3N0NDRDg2NTFFQzFEQzZCQ0EzNjNFMEQyOUMxNjlEMEVGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhlgcxAkvpZQyqwud1hTTFDah
6Q2ehmirUedJQjiFRaY+eAn1i+Y9S/2F2PB4m1SG3k11LPSQUUTfVptRFIVMndd/
bJR0IpZHeHlItySnMyYJdnIMhYo+HB57P8Sy9pSUl2CHcQLmyxDFPGRVwiyVQTvi
/YvFn5X4hftCSgC8cD1NZ52oQ7QL+szu8EV5clRkGF8tDeoq/HnqFAuQ/EDbKOOq
ClT5lmtiQz6bmn7s98aQ6xoecc9tG8ScJ+OuRwTzInUL2Q2C7EysLIfvDRPrVfMl
bXE2vwyKO3OCxmdaj+O6uhAGorHlLTFKARmm6TGUG0WsYUiCXHimgqkEgItnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/B53zNhlHsHca8o2Pg0pwWnQ700wHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzEzOTM2MmUzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7EGDAN
BgkqhkiG9w0BAQsFAAOCAQEAMw7UvJTIWzu3gON8DrVx0IKLypAKVg0/Anm6GHZ2
9Hfrkh765R0aOuWObjhrDEHWbIK6pZiq3MsgmCwMp4E+DpT/bnly6l9enqyuT/N4
rtIgJAzjpuScWEG1Y0oZGCzDpW7BQbJdZnuSHT7u8K44Ds6+X9ZepQWepoa7hv36
2OEqb4gqYOrdDOdBvYzFl3VwCxMdny+yvIk5SYlnY+9QwV8gA2YZbGJ2hFw64b27
BDpWOS6Uf4uhe71NLhFjXrwP+qgkStH8y7JMERp60fTKrBHmyJEp91ht8hGF2doW
ShAthuxPSs/in61iwG+JHtq+3nTgQkB24UcetImZypYqLw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:14:39 2026 by rpki-client