Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e302e302f32302d3234203d3e203138383232.roa
File:                     3139302e3231352e302e302f32302d3234203d3e203138383232.roa (raw, json)
Hash identifier:          nf0qbFYHFT6cjuIQZ+pTwLwQNQE8FEbGSNQu/OfviSU=
Subject key identifier:   A0:EE:B6:D5:08:50:7F:19:68:53:F4:8A:88:A5:52:56:AA:01:CA:E8
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       5748E7799D7B3DBD8E56366DE3E34FC65F7722C8
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e302e302f32302d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:17 +0000
ROA not before:           Tue 02 Jun 2026 17:40:17 +0000
ROA not after:            Tue 01 Jun 2027 17:45:17 +0000
asID:                     18822
IP address blocks:        190.215.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:48:e7:79:9d:7b:3d:bd:8e:56:36:6d:e3:e3:4f:c6:5f:77:22:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:17 2026 GMT
            Not After : Jun  1 17:45:17 2027 GMT
        Subject: CN=A0EEB6D508507F196853F48A88A55256AA01CAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:1d:0a:b7:80:70:02:29:21:bb:89:d8:7a:
                    38:f0:19:83:9f:9d:93:39:d3:b9:0c:2a:0b:0e:68:
                    62:f9:f9:66:e7:73:53:d8:77:5c:f7:92:29:0b:6f:
                    0c:8e:c4:e9:ec:d3:8a:94:13:95:0d:78:50:6d:cd:
                    48:21:24:2d:90:cb:37:64:af:0d:37:f9:1c:fc:ed:
                    f2:cc:dd:22:cb:5d:78:f6:b8:9a:63:42:40:ca:85:
                    2f:0d:67:4c:a1:eb:18:0c:0c:f2:3e:5d:b0:e3:0d:
                    1a:46:6f:de:68:88:34:25:bc:42:0f:b8:0b:53:2f:
                    02:36:ce:32:cd:7c:c3:ac:10:32:b4:2f:fe:47:4c:
                    73:be:81:17:55:bb:80:e1:86:6e:7c:40:42:00:7f:
                    d5:62:56:21:bf:59:96:73:e5:7a:1a:cc:22:21:7e:
                    d2:2a:86:ae:42:67:86:2a:43:40:b8:a5:92:9c:f0:
                    44:cb:98:52:5c:cc:57:ac:46:ac:e7:7a:04:05:9a:
                    15:82:3a:06:10:dc:a8:4b:af:03:7c:7e:ab:e6:cf:
                    05:78:9b:b4:c6:40:83:a6:a7:de:8f:ce:f3:cf:ba:
                    16:32:0c:2d:f4:4f:ed:08:f6:85:cf:60:93:a9:a1:
                    85:54:bd:0a:41:46:fe:d4:9c:85:b5:a9:a2:82:04:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:B6:D5:08:50:7F:19:68:53:F4:8A:88:A5:52:56:AA:01:CA:E8
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e302e302f32302d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:5c:6a:c1:de:14:db:3e:66:20:ad:35:6b:88:f4:82:b4:
         9d:40:60:68:c4:24:8a:70:cd:d2:f4:da:df:de:9b:5b:ad:75:
         b7:80:23:1c:f6:89:ef:37:12:a9:de:25:fc:9f:95:37:11:ad:
         28:f3:b6:c8:06:10:1e:0e:4e:ab:52:bb:d5:87:30:c3:5f:5e:
         d7:bf:b3:c5:b3:6f:7d:fe:6c:a6:25:a7:9f:e7:9e:2d:5f:44:
         e2:16:57:65:79:d9:29:a7:a5:af:d6:25:86:9e:63:9d:1a:fc:
         c7:06:14:93:52:3b:77:94:53:d7:2a:41:74:c1:47:a4:0d:c8:
         f2:02:b7:45:9f:6e:c2:c0:a0:5d:6c:af:63:46:f7:26:67:7f:
         dd:c7:bf:bf:e1:9b:d8:f4:32:f7:4b:a5:89:d7:06:a6:ea:29:
         a4:f1:f5:76:64:4b:33:70:b6:2a:2c:ef:9e:d4:e2:85:bf:e7:
         d9:24:51:bd:70:3d:90:19:50:43:66:e8:8d:cf:ec:0e:62:c8:
         8d:dc:03:53:1f:59:86:7f:9d:f9:53:00:cf:78:dd:a8:23:44:
         30:8c:b2:79:35:ce:3a:16:8f:08:46:ac:0d:97:53:ee:d8:c0:
         4b:07:83:66:ef:80:29:6d:22:a7:de:0a:ca:b9:90:55:fe:fa:
         4d:4e:5c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:20:29 2026 by rpki-client