Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e31362e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e31362e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          rKliiwW9ajmcko/bwtCHFxRRLkoFUNLN0kOWQL7Gbas=
Subject key identifier:   89:68:64:7B:12:F2:9A:EF:33:70:E1:C5:C5:A9:25:EE:19:C2:7C:03
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       78717D774F4F5D6C1BCA0E741DE08D2C9FC45097
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e31362e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:26 +0000
ROA not before:           Tue 02 Jun 2026 17:40:26 +0000
ROA not after:            Tue 01 Jun 2027 17:45:26 +0000
asID:                     18822
IP address blocks:        190.215.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:71:7d:77:4f:4f:5d:6c:1b:ca:0e:74:1d:e0:8d:2c:9f:c4:50:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:26 2026 GMT
            Not After : Jun  1 17:45:26 2027 GMT
        Subject: CN=8968647B12F29AEF3370E1C5C5A925EE19C27C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:7e:ae:bc:1b:29:26:ee:4f:fc:80:cb:6f:
                    47:84:70:f7:94:fd:05:13:79:f4:94:e9:24:95:ad:
                    9c:6f:4a:40:15:57:2f:6c:9c:71:d4:d6:92:bd:cc:
                    d7:09:ba:14:3c:50:52:8c:96:e7:c2:2c:22:ae:b6:
                    21:c3:99:12:12:99:f5:da:79:2d:00:23:1d:c0:3b:
                    7e:eb:95:a6:6a:2c:4d:ff:6a:6e:f3:16:02:b4:7d:
                    de:a4:22:2d:7b:6d:fe:bd:ea:ad:aa:7f:48:28:a5:
                    88:ad:f7:f9:4c:36:3d:68:1f:7a:34:38:92:14:af:
                    f4:af:9e:74:18:ef:d8:2d:7a:79:c7:e9:af:22:d2:
                    03:ef:c7:3f:12:a0:29:e2:a7:63:c4:8a:54:b4:89:
                    ca:ad:ad:17:e5:7b:c9:03:14:6e:6b:73:91:61:35:
                    2e:f9:fe:60:b6:fb:aa:49:a1:1b:aa:38:fa:b1:8b:
                    fe:01:a1:31:6d:f4:86:d0:d4:b6:23:a5:f6:61:db:
                    a5:38:b5:32:8e:f5:b6:15:4f:ad:c5:ad:4f:9d:c3:
                    6b:00:17:54:2b:e0:69:f2:ba:17:87:e3:99:12:ad:
                    b8:18:f9:3c:54:5c:ef:c1:6b:0b:e2:d2:03:c0:65:
                    0e:09:66:c0:fe:53:f9:51:e6:ff:61:34:b5:7a:88:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:64:7B:12:F2:9A:EF:33:70:E1:C5:C5:A9:25:EE:19:C2:7C:03
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e31362e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:dd:e6:c2:da:b3:55:d3:75:a6:b3:c8:05:d4:46:e9:50:97:
         12:7a:db:50:91:14:5a:ec:07:82:a3:c4:b7:50:db:61:76:27:
         d0:c3:2a:de:06:ee:72:09:49:e7:dd:ae:46:7b:1b:2d:a1:bd:
         7a:63:fe:f6:37:75:cc:83:e9:45:55:34:fc:72:a2:13:64:84:
         b2:79:1a:d1:06:57:64:2e:93:88:f5:75:9d:4f:e6:79:c8:8c:
         32:d8:e5:82:54:f6:b2:66:ee:d1:b1:91:11:74:53:46:36:97:
         10:b8:b7:68:74:43:7a:82:1c:e9:d3:2c:d2:e5:02:87:a0:a6:
         c7:e5:ac:d9:1a:c0:a9:88:28:a6:b4:45:8b:49:bd:42:e4:37:
         56:0c:0b:fd:25:39:f3:c1:37:d1:a5:70:28:32:01:4f:bb:2b:
         06:ad:69:bc:63:8f:48:26:b2:f3:8f:e0:b4:d0:8b:79:dc:a0:
         70:f2:e3:d7:a7:fd:01:af:31:35:3d:09:36:e2:8b:b5:34:9b:
         2e:f3:14:c3:32:e1:22:5e:8e:eb:3b:70:99:12:b7:38:f4:69:
         2b:dd:d5:74:b0:79:ff:bd:92:19:ac:be:c4:59:c0:73:d2:35:
         49:50:a7:28:06:17:8e:7e:68:ee:1d:95:5d:e7:2a:70:b4:ef:
         6a:f9:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:22 2026 by rpki-client