Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32312d3234203d3e203138383232.roa
File:                     3139302e3139362e39362e302f32312d3234203d3e203138383232.roa (raw, json)
Hash identifier:          DNky89oZ+EqV6bIUgoGQ+Jjkb3siNOFnAH7gHPOt2LI=
Subject key identifier:   C9:9A:47:17:3C:4B:61:01:45:64:BE:F9:9F:92:3E:5A:64:68:3D:51
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       067BDEF9A93CA11B1B868A6B24151D9B2C8FF411
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32312d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:15 +0000
ROA not before:           Tue 02 Jun 2026 17:40:15 +0000
ROA not after:            Tue 01 Jun 2027 17:45:15 +0000
asID:                     18822
IP address blocks:        190.196.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:de:f9:a9:3c:a1:1b:1b:86:8a:6b:24:15:1d:9b:2c:8f:f4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:15 2026 GMT
            Not After : Jun  1 17:45:15 2027 GMT
        Subject: CN=C99A47173C4B61014564BEF99F923E5A64683D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:9e:32:96:b1:ed:fe:aa:bb:8d:1b:a4:53:
                    61:18:e3:11:8c:af:a6:e4:ac:4c:7c:93:55:f6:87:
                    c1:a7:10:de:9e:e5:59:43:4a:34:13:90:90:ee:38:
                    1e:68:d0:39:1d:69:4d:50:ff:6c:cc:be:23:b3:2a:
                    c5:73:ba:ac:50:4f:ba:38:13:a3:7c:fa:32:d6:a2:
                    9a:1f:3f:d4:56:be:df:c8:df:d2:58:e8:71:6a:ae:
                    9e:bf:2f:06:e6:40:12:24:38:b3:75:ac:c0:87:bc:
                    b7:ee:08:48:8a:d4:55:ad:d6:ea:36:08:af:cc:8c:
                    fa:21:43:19:e1:47:d7:3d:f8:b1:b9:e6:f1:2a:8b:
                    d3:a8:df:17:f7:a3:a4:21:78:b7:54:80:80:cf:b2:
                    ea:a8:35:22:b3:f6:f5:ea:8f:b1:e3:fa:12:81:c0:
                    e4:05:ff:2f:11:fd:77:20:4f:fe:97:b3:68:87:62:
                    fd:eb:79:9c:a3:bc:17:f3:66:e6:44:cb:2d:45:91:
                    94:e6:50:db:13:ed:b7:2c:40:4c:25:6d:5a:6a:b1:
                    a4:d9:bd:3b:0b:4d:ef:0c:bc:98:14:f3:70:24:8a:
                    88:e8:32:cc:7b:0c:1a:72:37:75:10:2c:71:a7:17:
                    5b:37:7d:18:8e:b8:a5:b2:a2:0f:ef:61:e8:75:72:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9A:47:17:3C:4B:61:01:45:64:BE:F9:9F:92:3E:5A:64:68:3D:51
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e39362e302f32312d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:08:ba:99:19:0b:4c:8d:11:e4:aa:92:9c:cc:ec:d4:dc:14:
         30:5e:e8:c8:ff:87:39:81:1c:9e:ee:99:55:8a:c0:b3:64:61:
         61:c9:65:f8:a9:c4:94:95:54:66:42:d8:eb:b4:8f:ab:c9:76:
         91:70:f3:50:c5:1e:45:4a:9e:c9:c2:45:08:93:71:20:3c:0f:
         1e:14:89:ea:6b:ad:16:1c:49:5d:11:93:7e:e9:9a:f2:4c:5e:
         d4:3f:68:d8:d1:1f:2b:18:38:08:b2:60:61:a4:f8:ab:2b:dd:
         6a:00:1c:f1:84:8e:4a:fc:8a:64:4b:d1:78:cc:32:92:47:fb:
         db:db:ee:57:87:eb:c9:9f:c7:0d:f3:32:97:dc:f4:d6:f3:03:
         7a:1e:0e:d8:64:19:a1:d2:bc:a9:47:ca:ea:98:05:15:9c:13:
         6b:0c:58:3f:77:6e:14:ea:0b:42:1d:24:99:a4:ae:93:4f:67:
         62:50:d7:13:1a:4a:34:1e:1f:61:87:09:ac:bd:17:87:61:96:
         25:13:ae:bb:79:9d:46:f6:f4:48:06:35:f8:11:2e:de:4c:d9:
         cf:4c:78:a8:76:c2:db:d0:4e:37:c7:c4:75:b8:3f:a0:a6:0e:
         b9:f0:f6:3f:d3:cd:10:9a:28:7b:93:fe:08:7a:71:f0:19:cd:
         1b:56:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:23:24 2026 by rpki-client