Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e32312e302f32342d3234203d3e203138383232.roa
File:                     3139302e3231352e32312e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          WRydC2N0lqn8Xcs3rxaR3AWZGfqBh30DacONNcfRo+I=
Subject key identifier:   2D:7E:64:2C:0B:78:1C:FA:5E:EE:51:A9:DE:00:11:E7:49:0D:96:1A
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       39DD4D4EAA950BC5D8E2FFE146EEC356495AABBC
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e32312e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:23 +0000
ROA not before:           Tue 02 Jun 2026 17:40:23 +0000
ROA not after:            Tue 01 Jun 2027 17:45:23 +0000
asID:                     18822
IP address blocks:        190.215.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:dd:4d:4e:aa:95:0b:c5:d8:e2:ff:e1:46:ee:c3:56:49:5a:ab:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:23 2026 GMT
            Not After : Jun  1 17:45:23 2027 GMT
        Subject: CN=2D7E642C0B781CFA5EEE51A9DE0011E7490D961A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:f0:17:b8:8c:6a:43:42:74:f7:71:27:cf:
                    3f:9f:71:89:be:ac:9b:2f:3b:dd:97:ee:f4:dd:70:
                    e6:ca:84:2c:a2:11:11:7c:64:9a:da:92:c3:3a:0d:
                    26:bc:55:f2:2e:e1:c9:1a:7c:bc:e2:fe:13:10:16:
                    63:79:1a:c0:c2:9a:9c:05:3a:f1:54:59:60:4b:7e:
                    b8:1e:10:fb:69:90:64:13:b1:f6:67:ea:51:a1:cb:
                    38:1a:14:e4:68:f1:5d:a8:29:9d:64:ca:8b:ee:67:
                    56:e3:11:f4:9e:25:35:ce:c5:0f:e3:83:5a:56:c7:
                    ae:5e:06:89:e3:af:f4:1a:5e:a3:e7:47:05:ba:62:
                    20:8e:5d:61:3b:fc:5f:ee:28:49:39:fd:5a:ae:17:
                    49:11:46:b3:f4:d3:a3:bd:77:72:2b:56:9b:21:22:
                    44:71:e1:c2:de:55:b1:91:20:ad:fd:e2:c1:b8:ab:
                    68:62:f3:f4:33:91:aa:e5:1a:ce:3f:4c:49:c6:30:
                    6f:41:27:be:e2:99:df:5a:db:f4:3a:ab:39:7c:7f:
                    08:c6:d1:e7:14:a1:bf:9c:46:7a:17:6f:29:cd:67:
                    4a:e8:1e:d0:36:d5:7c:c3:b4:da:f5:17:0c:09:2a:
                    db:1d:0a:f2:72:34:57:59:20:08:f4:07:e9:59:40:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7E:64:2C:0B:78:1C:FA:5E:EE:51:A9:DE:00:11:E7:49:0D:96:1A
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e32312e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:96:37:d2:5f:3a:64:08:41:d2:3d:fc:36:27:4e:f3:86:
         e5:81:72:7b:fd:f4:f1:4d:dc:d3:5e:fd:2a:f9:53:77:37:39:
         e3:33:6c:31:f6:80:0d:cf:90:c4:3f:f6:5a:dc:77:82:98:c2:
         0d:f0:57:7a:5f:c5:8d:5f:6b:ee:ca:28:50:49:e9:a3:01:df:
         4f:c7:25:7e:64:07:95:f5:82:f2:57:8f:c9:d3:21:b8:25:6f:
         d7:1e:03:0e:57:41:bf:c5:73:68:a5:82:40:1d:3b:0e:c9:fd:
         8e:96:bc:50:7d:99:29:31:42:3a:4d:70:b2:fb:3b:2c:78:03:
         45:69:d0:00:1d:0a:01:fc:8c:09:d8:ea:52:d8:61:c3:aa:af:
         bc:92:ba:09:e0:af:a8:3a:d7:d0:64:90:fb:6e:f6:6a:f1:5d:
         6a:1e:a1:9a:c7:3a:21:a6:aa:77:f4:4c:d8:93:4b:b2:74:8a:
         dc:72:84:65:14:1c:58:9f:55:6c:65:7a:b8:40:da:00:53:3d:
         bc:05:09:4c:f5:b9:38:6e:fd:06:59:ff:dd:a4:1c:22:03:6c:
         bb:d5:aa:16:b4:f3:17:b6:de:0a:b0:50:1a:e5:cf:0b:57:6b:
         95:22:aa:cc:0a:c0:85:21:d2:7c:69:ce:ae:cc:c8:ca:41:27:
         c1:a6:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:51:55 2026 by rpki-client