Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Lo20zLeHVVHQk/7USopHnI/bWuU266qUH8c3i+WTpvo=
Subject key identifier:   3F:2C:9F:0B:A2:C4:1C:72:04:62:8E:59:00:74:62:F5:F4:4C:6B:2C
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       096112A662261EDE0C41173F6B5A2D9D864239AB
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:24 +0000
ROA not before:           Tue 02 Jun 2026 17:40:24 +0000
ROA not after:            Tue 01 Jun 2027 17:45:24 +0000
asID:                     18822
IP address blocks:        190.215.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:61:12:a6:62:26:1e:de:0c:41:17:3f:6b:5a:2d:9d:86:42:39:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:24 2026 GMT
            Not After : Jun  1 17:45:24 2027 GMT
        Subject: CN=3F2C9F0BA2C41C7204628E59007462F5F44C6B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:a9:9d:97:0c:e8:49:97:3e:77:72:29:e1:
                    d9:27:3c:11:39:a7:53:5e:3d:c1:73:a0:74:7c:d1:
                    98:56:df:0f:ac:72:61:e7:70:8a:70:6b:27:7a:4c:
                    cc:c0:da:fb:9b:9f:6d:f7:ae:83:8d:71:43:d7:a3:
                    7f:52:ab:8e:38:e6:44:58:ed:7e:d1:55:ec:50:76:
                    40:ff:c9:3b:03:a4:53:ba:60:8a:35:aa:43:bf:59:
                    10:b8:fe:83:d4:7c:22:09:ad:03:1b:54:82:47:44:
                    df:ab:c3:c6:ad:79:5e:4f:9b:b1:1a:fe:36:16:bd:
                    dc:22:c0:ae:d7:23:28:ef:07:b0:e5:b7:65:95:65:
                    60:17:7e:54:7d:9a:77:d9:3b:25:ef:e3:ed:78:a4:
                    04:ee:0b:1f:2a:fa:e8:42:23:ad:0e:8c:2c:ab:f9:
                    7c:2d:2f:bc:9c:db:ae:7e:a7:5b:4e:59:1e:47:a1:
                    28:b0:85:17:f4:4a:ce:b8:bd:2d:58:27:1d:38:df:
                    8b:51:bd:e8:20:d0:b0:65:bf:12:10:a8:a3:24:23:
                    16:f8:45:b8:9e:18:8a:43:ec:38:bb:d9:b5:02:76:
                    78:66:48:b7:5b:d4:4c:ff:15:a8:0b:73:a2:cd:8d:
                    13:7f:13:20:57:0c:ad:35:5b:9c:8e:91:e0:43:4b:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:9F:0B:A2:C4:1C:72:04:62:8E:59:00:74:62:F5:F4:4C:6B:2C
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3130322e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:10:ad:1b:08:73:28:b9:3e:ad:f8:f7:74:ce:c2:a3:e9:bc:
         55:3e:f1:37:80:89:ae:e5:9f:bf:9f:a5:55:4d:db:0b:90:57:
         d4:97:81:ee:0a:45:12:71:94:49:4a:ec:d6:fb:aa:d7:d0:fd:
         9f:c8:f2:d0:bf:9d:75:92:d2:38:c1:81:6a:8a:03:c0:ac:87:
         53:b4:48:80:04:fb:30:2c:98:e3:8c:ce:77:63:24:1c:1b:4f:
         62:08:54:d3:de:a9:6a:38:56:c4:74:c3:26:80:b6:0e:ec:ee:
         ba:58:75:ac:f3:5f:8d:1b:ce:e7:37:49:4b:c1:52:19:9e:cf:
         75:8a:68:37:24:b4:e5:d2:bc:4a:7d:5e:ff:3e:9f:01:80:64:
         e0:5f:29:fc:51:89:bf:5d:31:72:af:5e:5b:55:f6:67:25:a8:
         2b:f8:95:2f:e7:95:9c:4f:d1:9b:ea:f0:67:a7:37:45:6a:14:
         13:3f:f8:bd:a8:53:b0:aa:93:5a:49:41:6a:06:7c:59:99:8f:
         71:04:27:4a:63:7b:6f:2d:48:f2:58:a9:1e:8b:63:7e:bf:83:
         c0:3c:60:4a:34:0d:40:56:57:9c:43:2c:5d:86:08:3f:60:14:
         69:06:e2:2c:dc:1d:f2:83:7d:d3:b3:d8:25:83:09:6a:ae:c4:
         a6:f9:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:31:22 2026 by rpki-client