Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          8381Jg6FvChZszDyRpTG4uFrpLzE0SbWZg3k47m3HPU=
Subject key identifier:   ED:58:0B:7D:64:A4:DC:D7:C8:3A:B2:ED:87:3E:70:EB:EE:88:36:88
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       09865286C9AE3E0F52E84F6F887961E09CD549C8
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:31 +0000
ROA not before:           Tue 02 Jun 2026 17:40:31 +0000
ROA not after:            Tue 01 Jun 2027 17:45:31 +0000
asID:                     18822
IP address blocks:        190.215.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:86:52:86:c9:ae:3e:0f:52:e8:4f:6f:88:79:61:e0:9c:d5:49:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:31 2026 GMT
            Not After : Jun  1 17:45:31 2027 GMT
        Subject: CN=ED580B7D64A4DCD7C83AB2ED873E70EBEE883688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:63:13:55:cc:57:57:76:4b:d5:49:b5:b7:
                    00:57:a0:f1:80:f9:cc:2b:a1:b1:4c:eb:6e:9a:a3:
                    43:b9:0c:c8:7a:1b:fe:c8:75:fe:4b:ad:48:67:10:
                    e9:72:6d:90:b4:f7:45:34:f8:11:3a:f5:eb:e5:96:
                    cc:aa:08:af:c9:c0:06:46:3d:29:a5:44:fc:cd:a2:
                    27:aa:b7:54:f3:ec:07:4c:a3:31:09:d0:d0:81:03:
                    a3:f1:11:58:9b:27:4a:57:2f:4e:8e:36:fd:3e:b2:
                    0b:dd:9f:22:34:77:39:54:9d:16:54:56:ea:1b:a3:
                    94:53:f6:18:28:4a:06:b4:ff:3d:c0:bf:92:80:88:
                    f9:92:ce:38:4d:4d:d8:fb:6b:01:90:ba:0b:95:b9:
                    ad:d3:fc:85:0f:57:8c:da:90:a6:eb:18:5f:cf:79:
                    c7:55:8e:36:88:da:c4:bd:ff:f0:08:29:70:4a:67:
                    bc:3e:3e:3a:cf:f8:7b:da:9c:ca:80:4f:a7:a7:9b:
                    66:65:fd:25:76:fe:0c:d7:7b:41:71:a7:b3:85:23:
                    f0:42:5c:f9:3a:d5:41:77:63:56:b5:d1:58:89:96:
                    a9:dc:b3:7f:14:5b:31:e7:f1:29:e4:f1:17:80:0a:
                    bf:fc:56:a9:7c:52:06:a1:66:24:b4:f4:34:08:9b:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:58:0B:7D:64:A4:DC:D7:C8:3A:B2:ED:87:3E:70:EB:EE:88:36:88
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e3234382e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:bc:ff:ff:af:fa:e4:f6:13:6d:d6:71:bd:cb:ac:ea:b0:
         c9:c6:9f:e5:10:1c:c1:7f:98:f6:ab:06:6f:32:22:8d:b4:47:
         32:a9:4d:91:64:81:a2:40:9c:67:8b:3f:23:38:c0:be:a4:11:
         cd:3b:fa:05:e3:18:58:ad:b0:ed:8a:4c:ec:99:eb:f4:f0:d8:
         59:de:61:db:16:41:e0:e0:1c:0b:90:c1:71:9c:08:df:12:a1:
         b1:52:cc:1e:5a:5a:aa:33:9c:2e:55:d9:99:a1:a6:2e:42:0b:
         70:f4:19:15:c2:0a:a3:c0:4c:18:ee:a3:7f:b9:e3:e1:5d:5e:
         a8:dc:e8:b0:d2:97:0a:67:70:31:aa:32:d1:cd:a7:1b:f4:00:
         58:c8:51:88:e0:ee:49:a3:c3:e1:4b:37:2b:28:e9:1f:48:84:
         4b:cb:b8:54:bf:33:39:64:68:eb:9b:7b:da:aa:d4:06:bb:9f:
         2d:ab:70:9b:0f:43:1f:40:94:f5:72:59:14:88:4f:51:56:e8:
         b1:8d:87:c0:37:c3:44:62:ac:d8:67:e1:db:05:82:ac:ce:79:
         e4:e5:b6:b5:76:19:e2:01:20:c5:a5:4e:ce:05:e8:8d:01:a2:
         eb:fe:9e:5d:f1:5d:1c:b8:87:e4:84:26:b4:a7:ca:d3:d8:ca:
         ad:0f:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:33:14 2026 by rpki-client