Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          6voCMOK0wG7NkmAS3iZwLdI4t1XwewieeHtaCVr6C1w=
Subject key identifier:   3A:91:FD:E9:E3:89:9E:39:31:55:C5:16:70:8E:3D:97:45:1A:D1:2B
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       5C4D6CC24D0EC3AAD23B36D6DAA93CFA555EAF58
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:33 +0000
ROA not before:           Tue 02 Jun 2026 17:40:33 +0000
ROA not after:            Tue 01 Jun 2027 17:45:33 +0000
asID:                     18822
IP address blocks:        190.215.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4d:6c:c2:4d:0e:c3:aa:d2:3b:36:d6:da:a9:3c:fa:55:5e:af:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:33 2026 GMT
            Not After : Jun  1 17:45:33 2027 GMT
        Subject: CN=3A91FDE9E3899E393155C516708E3D97451AD12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:4e:bf:85:fb:9e:f1:dc:c5:30:b5:9f:0e:
                    ff:83:b7:ee:45:5b:6e:d3:b4:3c:47:a5:b1:7c:2f:
                    f1:7c:52:5c:d0:78:75:1b:14:f0:bb:87:1c:fb:11:
                    bf:29:8d:c4:a1:37:26:67:fe:b3:2b:b1:6d:a5:72:
                    f9:23:ec:27:3f:92:ef:83:fa:66:83:4a:38:48:18:
                    19:ce:d4:c6:0a:48:7f:07:55:23:32:22:98:f3:4c:
                    67:87:88:be:93:c8:80:28:8d:aa:c9:d7:1a:bb:75:
                    35:54:c5:d7:04:38:50:53:f8:1d:40:90:50:46:a6:
                    97:af:9a:9a:4f:29:c0:df:6a:ee:58:65:28:87:e0:
                    39:5e:06:ee:01:15:6e:c5:c8:6b:26:43:79:2f:cd:
                    3a:f1:3d:65:c4:ea:92:81:e8:dd:26:b3:88:be:b6:
                    70:c5:89:d2:4c:d2:96:6c:50:21:d7:5d:9f:5b:c7:
                    59:c4:2a:da:f7:23:a7:18:ef:dc:4f:f0:35:93:4a:
                    f8:9d:41:a3:3f:14:60:b5:09:fe:38:0e:ea:e7:b8:
                    dd:33:0b:88:d4:27:16:1a:f2:3e:26:63:4f:77:27:
                    87:fb:34:be:65:e7:2b:90:e3:8a:3a:db:39:bc:4c:
                    f3:5b:9d:34:0e:18:2d:1d:fc:a7:e5:bc:38:2b:d5:
                    05:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:91:FD:E9:E3:89:9E:39:31:55:C5:16:70:8E:3D:97:45:1A:D1:2B
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3137302e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:6a:1e:68:18:c8:89:54:e3:49:56:42:ec:a6:ec:25:d8:
         9f:6a:6a:9b:18:16:74:2d:d0:2a:84:92:2b:c7:d5:32:8f:11:
         67:b6:06:0d:60:54:5b:aa:a0:e2:ed:ee:32:1f:13:d8:a6:7a:
         e9:39:58:d1:c6:d6:19:a8:93:14:d0:d0:37:51:91:f4:5b:c2:
         04:df:8f:ec:44:a7:ce:74:7f:e9:14:08:0e:c4:7f:82:86:49:
         f9:62:fa:2a:3f:68:ff:18:9a:3d:04:cb:78:1c:f9:f4:e7:42:
         90:66:05:eb:56:af:27:94:23:90:81:d3:b1:68:3e:6a:1d:e4:
         f3:c0:83:fa:e9:bd:5d:75:cd:99:22:ea:e9:7e:7a:41:fc:0b:
         1d:d7:d3:70:de:76:cd:c6:c6:e2:90:32:6a:f7:6e:e4:db:cb:
         d0:e2:e8:a1:2b:31:c6:10:c1:4c:a0:6c:a3:ac:39:2d:45:40:
         92:44:79:ef:a5:0e:bf:16:92:59:c3:49:78:ec:e7:ff:40:2f:
         25:d6:9c:f2:38:7b:e8:fb:80:cf:4e:f1:3a:67:96:4d:50:1d:
         56:8b:ca:15:8d:61:fc:81:2b:53:a0:58:68:ff:0f:cb:f1:0d:
         b0:5c:12:e2:ed:fb:c1:70:93:57:44:cb:91:9d:39:87:a5:bb:
         47:61:f7:0e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXE1swk0Ow6rSOzbW2qk8+lVer1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNjA2MDIxNzQwMzNaFw0yNzA2MDExNzQ1MzNaMDMxMTAvBgNV
BAMTKDNBOTFGREU5RTM4OTlFMzkzMTU1QzUxNjcwOEUzRDk3NDUxQUQxMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYU6/hfue8dzFMLWfDv+Dt+5F
W27TtDxHpbF8L/F8UlzQeHUbFPC7hxz7Eb8pjcShNyZn/rMrsW2lcvkj7Cc/ku+D
+maDSjhIGBnO1MYKSH8HVSMyIpjzTGeHiL6TyIAojarJ1xq7dTVUxdcEOFBT+B1A
kFBGppevmppPKcDfau5YZSiH4DleBu4BFW7FyGsmQ3kvzTrxPWXE6pKB6N0ms4i+
tnDFidJM0pZsUCHXXZ9bx1nEKtr3I6cY79xP8DWTSvidQaM/FGC1Cf44DurnuN0z
C4jUJxYa8j4mY093J4f7NL5l5yuQ44o62zm8TPNbnTQOGC0d/KflvDgr1QXJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOpH96eOJnjkxVcUWcI49l0Ua0SswHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzIzMTM1MmUzMTM3MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvteq
MA0GCSqGSIb3DQEBCwUAA4IBAQAc8moeaBjIiVTjSVZC7KbsJdifamqbGBZ0LdAq
hJIrx9UyjxFntgYNYFRbqqDi7e4yHxPYpnrpOVjRxtYZqJMU0NA3UZH0W8IE34/s
RKfOdH/pFAgOxH+Chkn5YvoqP2j/GJo9BMt4HPn050KQZgXrVq8nlCOQgdOxaD5q
HeTzwIP66b1ddc2ZIurpfnpB/Asd19Nw3nbNxsbikDJq927k28vQ4uihKzHGEMFM
oGyjrDktRUCSRHnvpQ6/FpJZw0l47Of/QC8l1pzyOHvo+4DPTvE6Z5ZNUB1Wi8oV
jWH8gStToFho/w/L8Q2wXBLi7fvBcJNXRMuRnTmHpbtHYfcO
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:30:43 2026 by rpki-client