Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34382e302f32322d3234203d3e203138383232.roa
File:                     3139302e3139362e34382e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          no2OyJB62WMqBOxn4Ta3N6gUq5P00m9/yUgee7aj6uU=
Subject key identifier:   5B:8F:70:FC:B5:48:7B:CF:2B:EE:B3:2F:83:C1:A4:EE:7F:FF:B5:09
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       4A3D5E8454B8ECE975798A81C4348EB55AD1EB91
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34382e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:20 +0000
ROA not before:           Tue 02 Jun 2026 17:40:20 +0000
ROA not after:            Tue 01 Jun 2027 17:45:20 +0000
asID:                     18822
IP address blocks:        190.196.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:5e:84:54:b8:ec:e9:75:79:8a:81:c4:34:8e:b5:5a:d1:eb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:20 2026 GMT
            Not After : Jun  1 17:45:20 2027 GMT
        Subject: CN=5B8F70FCB5487BCF2BEEB32F83C1A4EE7FFFB509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:32:be:08:f4:23:7c:be:87:ed:7b:57:1f:
                    99:08:15:16:e0:bc:5c:f8:bf:18:6d:24:9f:60:ac:
                    e7:cb:bb:3b:87:e4:76:e8:02:ce:72:a4:70:60:63:
                    df:1b:85:67:9a:c5:9a:44:9a:be:60:84:d6:64:c3:
                    42:a9:bd:3a:f2:8d:fb:19:b6:f6:0a:60:8d:f1:c8:
                    d7:19:da:95:57:42:ca:63:42:24:6c:e0:d8:d8:b2:
                    dd:87:23:fa:af:d1:f7:11:a6:4f:7d:63:71:b6:f4:
                    b3:d2:f7:ca:cf:d9:54:9a:cb:df:03:43:32:a4:c3:
                    5a:40:1f:e7:74:8f:cb:66:6f:47:b7:3b:71:4f:bb:
                    ea:5e:fc:a9:eb:79:5a:23:7b:93:16:1d:80:02:b3:
                    b4:bc:7b:a1:d3:5d:3e:b2:61:44:78:ca:41:33:d7:
                    02:a8:f5:63:db:20:93:5a:61:d8:b3:c8:98:e6:ab:
                    82:a7:ff:eb:a9:41:15:bf:e8:1a:c2:90:3e:36:f2:
                    43:e7:bf:e3:dd:40:c0:7f:9b:1c:94:bc:40:52:79:
                    fb:c8:46:d7:53:86:16:03:ed:f1:99:99:c7:bf:f2:
                    1c:c4:03:57:e8:fa:cb:71:86:27:23:54:3d:a2:04:
                    8d:07:66:99:42:cf:09:31:47:25:de:5f:01:2c:80:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:70:FC:B5:48:7B:CF:2B:EE:B3:2F:83:C1:A4:EE:7F:FF:B5:09
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e34382e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:1b:5f:a4:8c:f0:f1:42:93:84:c5:98:2d:5c:16:75:00:
         66:4c:68:b9:ba:d9:04:c9:f3:40:89:87:f2:75:c0:2c:dc:ee:
         60:65:7f:0e:2d:fd:18:a0:02:31:c8:05:25:8c:01:86:5f:67:
         65:81:b1:1b:69:2f:f2:f4:24:fd:5b:e2:25:24:cf:4d:5a:76:
         5b:66:6f:a6:c6:e3:d9:c4:c1:bd:95:52:32:96:1f:cd:2b:ca:
         be:db:00:58:62:c2:8a:10:9f:ef:60:1c:82:09:53:fc:96:a5:
         2f:66:a4:34:81:fe:59:73:85:33:81:03:23:6c:3e:d8:29:6c:
         b7:89:45:b6:32:91:f6:85:91:c4:ce:9c:ee:08:1c:bd:8c:3e:
         4c:2d:2f:c8:cc:75:fc:0a:d9:62:3c:64:50:1e:ca:ea:6c:1c:
         4c:97:7c:36:04:db:c6:ab:f8:d3:56:17:30:fb:e8:a8:d2:87:
         06:ae:b0:6e:82:f1:b0:11:4f:7a:e9:bf:60:5c:38:eb:26:8d:
         79:6b:79:98:b6:8f:31:4a:6a:55:1f:7b:2b:16:36:f4:f1:49:
         db:83:6f:f9:4e:7b:da:8a:82:82:10:27:7c:3f:7e:43:b4:29:
         65:ca:bc:99:ad:fa:9f:34:1e:40:10:d5:c8:72:99:2e:e3:03:
         05:06:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:23:04 2026 by rpki-client