Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e33332e302f32342d3234203d3e203138383232.roa
File:                     3139302e3139362e33332e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          PVVaLLoSz3Wg70rbR/7c6nyyXg+RZ+ES2PFTPzNSQWQ=
Subject key identifier:   84:DA:E8:F8:9F:14:74:8C:01:C2:55:52:54:91:61:37:E0:D0:BD:FE
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       796792159E46C7981FD58CC746E2BB23000D017E
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e33332e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:17 +0000
ROA not before:           Tue 02 Jun 2026 17:40:17 +0000
ROA not after:            Tue 01 Jun 2027 17:45:17 +0000
asID:                     18822
IP address blocks:        190.196.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:67:92:15:9e:46:c7:98:1f:d5:8c:c7:46:e2:bb:23:00:0d:01:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:17 2026 GMT
            Not After : Jun  1 17:45:17 2027 GMT
        Subject: CN=84DAE8F89F14748C01C2555254916137E0D0BDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:e8:e8:d8:9b:f7:7c:bc:72:a3:9b:db:32:
                    c8:5c:9c:2b:af:66:b8:f1:c1:db:b4:2e:ca:49:19:
                    d0:54:9f:6e:93:72:87:2b:8c:1c:d8:15:69:58:1a:
                    ff:c3:25:6b:d3:48:9b:e7:1a:22:ab:56:8e:c3:b6:
                    2d:42:8b:11:41:ff:38:d6:81:08:96:28:16:f4:10:
                    4c:99:e8:3e:7b:4e:32:c0:80:25:08:d8:29:28:05:
                    c0:2a:32:b8:60:ce:c6:e0:1e:e8:d6:8b:83:db:8d:
                    a4:22:c5:91:fc:79:f5:c4:25:75:c1:2e:48:27:d3:
                    f8:22:eb:b5:7a:03:8c:3c:d4:89:8b:c6:77:08:80:
                    20:c3:9a:39:ef:96:0d:d2:aa:4d:96:25:c6:d8:35:
                    fd:b2:8b:33:bb:f2:68:b6:71:83:9e:12:2a:69:98:
                    c5:e2:47:31:65:54:7f:d0:7b:99:81:2d:6b:26:7f:
                    52:2f:2b:ab:dd:89:0c:b0:cd:33:b3:fe:8e:0b:28:
                    98:ec:02:68:43:22:50:f6:93:bf:cb:23:a5:c1:eb:
                    3e:a1:75:47:4f:ad:d0:92:e5:02:27:f6:ad:11:14:
                    13:b2:c1:e9:f4:9e:d9:25:74:7d:7d:09:28:56:f2:
                    70:f9:39:c3:27:b1:62:e0:73:83:69:ca:6e:b3:39:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DA:E8:F8:9F:14:74:8C:01:C2:55:52:54:91:61:37:E0:D0:BD:FE
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e33332e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:8d:4f:d6:1d:2f:d3:8e:84:e2:38:09:0a:bc:00:d2:3d:df:
         c0:c5:4b:88:de:89:ec:45:04:9f:1a:29:d6:91:4f:2d:d3:00:
         25:27:2b:8f:32:dc:89:a3:fa:dd:2e:25:88:a0:c3:f8:b9:f4:
         b7:08:48:7a:df:28:5b:c3:7e:ab:99:50:68:5f:88:b6:5d:68:
         c7:01:0f:94:fc:2f:59:d7:a5:87:c9:ac:37:9c:7d:33:3c:32:
         43:b1:da:17:54:ed:84:7a:4a:38:55:12:00:b4:c7:11:d3:29:
         af:8a:da:d3:be:b1:b2:f9:35:38:cb:42:80:cb:fb:1c:d5:9c:
         67:8c:4f:38:68:d0:7a:0f:2d:f6:d0:b3:f6:73:ed:1e:e5:b9:
         71:2f:37:c4:46:a9:1b:81:0e:b6:ef:89:97:4d:16:c2:ba:13:
         25:09:95:cf:72:24:4c:25:49:26:13:58:7c:46:f9:43:27:98:
         fc:59:68:ec:f3:1e:7f:16:e3:d8:b2:0a:b0:99:5f:3f:2e:04:
         3a:7b:c5:f7:80:ca:74:84:51:ae:79:a4:5b:9c:9e:eb:77:55:
         cd:0a:6f:60:63:39:a6:07:ff:19:49:32:2f:5f:a2:09:9f:a4:
         d8:2e:95:1f:b5:19:21:10:19:42:db:16:e1:f4:a4:65:c2:25:
         04:6b:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:07 2026 by rpki-client