Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134382e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e3134382e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          85Xw1bAg8+08FWXx5gFGPkiz+6IeexsxAqZGxJ7q3VA=
Subject key identifier:   E2:A9:50:80:68:4B:2C:8E:87:32:B9:5A:E8:CA:5A:08:D6:86:DE:85
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       7D0EC6F2D127CFD9B59E67595C32CF1946597ED1
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134382e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:27 +0000
ROA not before:           Tue 02 Jun 2026 17:40:27 +0000
ROA not after:            Tue 01 Jun 2027 17:45:27 +0000
asID:                     18822
IP address blocks:        190.215.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0e:c6:f2:d1:27:cf:d9:b5:9e:67:59:5c:32:cf:19:46:59:7e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:27 2026 GMT
            Not After : Jun  1 17:45:27 2027 GMT
        Subject: CN=E2A95080684B2C8E8732B95AE8CA5A08D686DE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:b0:24:49:bc:a6:15:5a:cc:3d:ee:76:5d:
                    dc:ea:6f:55:81:81:e1:ca:95:43:d3:4e:2f:a6:8b:
                    66:e6:80:18:df:c5:c3:f3:8c:79:7d:78:9b:84:b5:
                    48:f1:d1:0b:60:cf:7e:4a:f8:25:5c:03:69:17:01:
                    7e:bb:a5:9c:ba:dc:2c:4c:39:f5:3c:a8:fd:4d:bd:
                    fa:03:1e:5b:27:44:5a:42:14:7e:20:c9:d7:0c:4f:
                    d2:a4:6e:31:fe:c5:49:c5:ed:b0:f4:1f:97:a8:5b:
                    f1:4d:74:6f:d8:54:da:41:b8:de:85:28:dd:fd:fc:
                    e6:db:a8:f1:c0:c8:e6:34:fb:7d:94:ad:e0:94:39:
                    4c:d1:5b:0f:bc:5d:7a:7c:80:07:08:83:82:c1:85:
                    64:83:f7:b2:5d:52:54:dc:a4:c6:dd:6b:e3:af:64:
                    7a:ac:27:42:d7:7b:da:75:53:4f:dc:c7:a8:52:c4:
                    8d:b6:20:33:70:ab:f3:89:84:14:ea:59:54:8f:02:
                    7c:5c:1e:c7:91:7a:36:09:52:0a:63:e9:a3:b2:02:
                    b5:23:0b:bb:48:28:6b:24:0a:e0:ed:97:74:db:1c:
                    0f:64:6b:8b:68:68:de:fe:69:c9:7b:e1:f6:40:27:
                    e4:a1:a5:5a:fa:fb:76:9b:4a:17:c4:f4:28:4f:b8:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A9:50:80:68:4B:2C:8E:87:32:B9:5A:E8:CA:5A:08:D6:86:DE:85
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3134382e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:a4:4d:1b:fc:b3:06:93:3a:bf:a3:92:c3:57:37:56:5a:
         6a:35:f0:d9:c6:c4:5b:45:dd:8a:53:7a:81:81:0d:75:e0:eb:
         2d:f8:a3:ca:df:7b:82:b9:6c:de:ac:40:02:0b:bf:6a:2d:b7:
         56:4d:ac:31:30:0f:d2:f4:23:a2:cf:0e:88:cc:8b:85:ff:55:
         17:74:4b:1d:39:a6:fe:67:a3:2d:49:14:e9:ce:9a:1a:33:55:
         f8:6c:82:f5:86:4b:c2:69:aa:f4:b1:6d:b4:4d:cf:bf:48:c6:
         70:84:e7:6b:e3:cc:1f:60:1f:ac:96:19:a5:47:04:c6:e9:22:
         78:a7:41:52:1a:18:7a:14:83:81:3a:07:f5:cf:6a:49:b9:e7:
         67:d0:ff:7c:90:6a:e0:15:0e:b2:ae:c6:0a:d9:a8:5e:18:3c:
         b6:ab:ce:cb:6a:d9:49:fb:93:15:78:05:b0:2a:06:15:e3:6c:
         dd:0d:0b:5a:35:2e:08:00:6b:69:95:9b:00:6f:77:ad:77:6f:
         63:6e:aa:7a:59:46:40:97:24:2a:7a:6f:a9:b5:2f:ab:c4:ed:
         25:c0:49:ca:5f:8b:2d:00:82:7d:f6:9f:60:80:bd:ce:0b:cb:
         95:3a:87:47:17:6d:2e:46:55:b5:44:da:4c:b0:e6:50:79:fc:
         bd:a4:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:31:09 2026 by rpki-client