Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130302e302f32332d3234203d3e203138383232.roa
File:                     3139302e3231352e3130302e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          OERM2OpTM5/DaXn4TKkq0RWtAQBiTl6SASmuDNzUN1o=
Subject key identifier:   3E:94:4B:3F:F5:D1:78:C4:B6:87:FF:93:4A:F4:2F:98:8F:69:54:6E
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       3D7862DD048D09912938CBC070C90B25F3789A2F
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130302e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:32 +0000
ROA not before:           Tue 02 Jun 2026 17:40:32 +0000
ROA not after:            Tue 01 Jun 2027 17:45:32 +0000
asID:                     18822
IP address blocks:        190.215.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:62:dd:04:8d:09:91:29:38:cb:c0:70:c9:0b:25:f3:78:9a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:32 2026 GMT
            Not After : Jun  1 17:45:32 2027 GMT
        Subject: CN=3E944B3FF5D178C4B687FF934AF42F988F69546E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:29:90:83:58:56:47:0b:1f:37:b8:ba:4b:
                    41:da:f9:0d:b8:69:9c:b0:72:1d:09:8d:6d:3a:ff:
                    db:52:4f:fb:d9:f0:80:70:88:b8:45:55:96:de:c6:
                    b4:37:86:be:e3:f0:6f:ec:d7:ee:a8:40:15:fd:b6:
                    36:41:86:81:f8:90:1d:6f:b7:ec:e3:c6:84:e6:38:
                    fd:ed:25:46:e7:e0:6f:2d:91:ed:7a:69:ec:3d:58:
                    37:bb:83:e0:76:0e:75:32:14:f6:b3:49:eb:72:2e:
                    28:78:bf:af:e2:e4:b0:1e:79:98:e8:dc:b8:0c:f7:
                    3a:63:e5:74:aa:2b:c1:4a:ce:c5:00:ce:e7:78:41:
                    41:66:bb:fd:f1:ba:6f:5b:30:d9:46:cf:6a:a9:b4:
                    56:61:13:9e:74:22:bf:63:58:3a:1c:2f:24:8e:90:
                    39:3e:8b:84:65:3c:75:fe:98:66:45:d9:ad:07:a6:
                    44:f5:9b:31:89:b6:b8:84:2f:2a:b2:3d:15:9e:48:
                    6e:82:d3:df:77:6f:e8:45:13:06:a4:4f:8a:b8:81:
                    00:fd:84:ba:aa:89:c8:ec:86:d7:1d:f1:7a:72:dc:
                    cb:c7:9d:aa:4e:b2:ea:04:10:1e:1d:69:35:01:9f:
                    85:ba:bd:9b:21:43:86:c7:91:72:63:49:d6:d8:6c:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:4B:3F:F5:D1:78:C4:B6:87:FF:93:4A:F4:2F:98:8F:69:54:6E
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130302e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:fc:cf:f6:11:8b:38:4c:af:e6:60:6f:f9:44:0c:cd:25:9f:
         b6:1c:6a:81:51:73:12:b8:a2:09:d8:b6:30:d3:b7:75:02:3b:
         97:9a:f0:32:18:c2:b2:fd:68:a7:80:d7:1c:26:aa:ad:84:ce:
         08:68:8a:8c:56:8d:a4:bf:16:ba:d8:f8:ec:8e:6c:9f:67:ea:
         39:d2:4a:33:04:fe:37:97:d0:16:f3:a4:9e:64:80:2f:ee:db:
         3e:70:48:3a:89:c3:89:b9:9c:a7:63:ab:0d:65:62:25:ae:08:
         81:5a:64:8a:bf:54:52:28:14:70:2b:7b:6f:fc:f7:1b:3c:0b:
         86:ea:ae:a0:54:d5:48:66:76:a6:37:16:94:28:eb:4b:1e:a0:
         0e:5e:d3:ae:3e:b5:90:01:69:d8:93:32:6f:3c:cb:52:50:15:
         21:61:ec:99:0c:66:cf:79:c6:b0:78:61:36:e8:a5:dc:72:73:
         48:f9:c4:e7:72:49:09:cd:64:08:19:ce:a6:6e:24:5f:ce:e0:
         bc:26:0d:99:cf:c5:0b:2c:1e:58:0a:12:6e:7f:ea:ac:59:b3:
         37:bc:fd:ee:ef:b1:c7:7d:3a:5a:2a:e1:51:9f:52:25:c0:c9:
         92:54:5e:d7:de:03:3b:02:b9:59:a3:e9:8d:9a:05:6d:46:d7:
         46:32:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:39:53 2026 by rpki-client