Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          n8jZMKlq957HeylnhoaO5JSMnb7wNevtDCEMVvbKahI=
Subject key identifier:   16:83:74:7A:7F:FB:4C:2A:A2:C5:4F:15:AD:B5:24:FD:DC:CC:E5:FE
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       7791A6C969D3ECC10841178E7FD5464A3A77AAA8
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:13 +0000
ROA not before:           Tue 02 Jun 2026 17:40:13 +0000
ROA not after:            Tue 01 Jun 2027 17:45:13 +0000
asID:                     18822
IP address blocks:        190.215.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:91:a6:c9:69:d3:ec:c1:08:41:17:8e:7f:d5:46:4a:3a:77:aa:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:13 2026 GMT
            Not After : Jun  1 17:45:13 2027 GMT
        Subject: CN=1683747A7FFB4C2AA2C54F15ADB524FDDCCCE5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:9e:33:65:98:d3:45:65:97:74:ea:78:4f:
                    06:7b:3a:e8:ec:c4:2d:02:4c:4a:86:6e:17:4e:d0:
                    09:19:8e:fc:cb:e1:ca:be:bc:2a:dc:39:b4:55:5f:
                    5b:14:03:fb:6b:99:25:cf:1d:b1:f0:97:67:4a:aa:
                    81:f2:6e:f4:fb:25:35:06:a2:be:5c:61:b2:a7:96:
                    b3:15:a2:bd:58:a1:71:4c:62:5f:0d:1c:76:9b:4c:
                    b3:89:9a:93:44:06:d3:36:cb:bc:7b:f0:f6:39:7b:
                    0a:70:61:bc:a9:1b:09:e8:94:44:42:f9:03:bd:db:
                    bc:49:50:a0:be:dd:df:e7:25:7e:8f:93:da:62:e0:
                    6c:ab:af:e8:d0:da:11:2a:17:be:75:7d:2b:d7:81:
                    38:7e:85:99:74:a5:d5:91:94:23:90:ef:bd:20:ab:
                    49:cd:88:9c:df:07:a7:88:61:22:d6:fe:23:48:69:
                    c2:cc:94:bc:0d:6a:83:a4:6f:9e:07:bb:af:3e:36:
                    40:20:ed:e9:6b:b3:70:27:20:d1:32:7d:5d:bd:72:
                    a6:af:d7:83:4d:8a:4f:4b:13:9c:e2:ca:e1:6b:03:
                    8e:8d:dd:82:3d:a6:42:8b:9f:a7:28:90:f6:15:b9:
                    88:09:1a:89:85:49:a1:1d:30:65:5c:bc:97:03:7f:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:83:74:7A:7F:FB:4C:2A:A2:C5:4F:15:AD:B5:24:FD:DC:CC:E5:FE
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3132302e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:34:13:58:a7:9b:38:b7:ea:cc:5e:09:12:ef:b8:fb:fa:3a:
         94:a4:d1:2c:71:b8:c4:79:16:d0:5f:5b:d7:ab:fc:f9:3f:2f:
         c5:b2:cc:75:5f:95:69:7b:e5:88:96:7a:48:07:2a:f8:95:25:
         13:16:87:75:f5:26:6e:b1:b4:4d:97:1f:af:54:3c:ba:ee:63:
         4d:54:82:af:c7:36:13:12:ca:9e:77:52:fb:0c:6d:6f:68:d6:
         d0:c0:d2:16:9f:f8:bd:d3:a7:16:81:1e:94:b7:fd:cc:70:30:
         8a:9c:a3:cf:4d:08:d3:3b:99:fb:2a:45:ea:86:7f:5c:26:c2:
         a6:7b:97:19:3f:28:78:81:0f:ab:bf:84:39:3c:44:83:11:25:
         38:2b:2e:51:d2:cc:45:1c:33:da:fd:4a:f2:4a:f4:48:4a:72:
         2a:13:a5:82:1f:45:b6:4d:9f:7a:06:9d:58:c9:98:c7:8a:15:
         df:1d:4a:cb:78:d6:c7:b0:6e:70:87:c7:77:3b:c3:13:64:b5:
         da:54:16:f1:ba:a0:99:70:7d:1d:2d:7c:4f:b5:d5:6f:e9:1e:
         ac:c2:6b:fa:3d:b8:a0:e3:86:b9:33:4c:75:51:d1:6f:e7:1a:
         ba:cb:cd:42:d8:0b:2e:40:00:1e:7b:fc:da:28:d2:69:6a:8b:
         d7:4a:96:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:28 2026 by rpki-client