Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e36342e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e36342e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Kk7M9ZRwKWgUNR63xiXipHHwBxaO3Ej53v1D1dgnBa0=
Subject key identifier:   A4:CA:CD:4D:8C:6A:96:EC:D0:42:1F:CA:ED:90:CD:18:D9:B9:7C:4C
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       1B8365C8DAAD1FF6F7A51E84A3D77C5493CB73C3
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e36342e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:22 +0000
ROA not before:           Tue 02 Jun 2026 17:40:22 +0000
ROA not after:            Tue 01 Jun 2027 17:45:22 +0000
asID:                     18822
IP address blocks:        190.215.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:83:65:c8:da:ad:1f:f6:f7:a5:1e:84:a3:d7:7c:54:93:cb:73:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:22 2026 GMT
            Not After : Jun  1 17:45:22 2027 GMT
        Subject: CN=A4CACD4D8C6A96ECD0421FCAED90CD18D9B97C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:96:f8:8d:aa:57:b8:76:68:1f:19:5e:42:
                    de:bd:80:bf:b4:1e:7c:73:8c:0c:59:72:62:6c:35:
                    8f:ce:95:b7:aa:6f:b1:f2:ea:81:6f:2b:da:f0:35:
                    45:0e:6b:ae:3d:cd:a7:fe:af:59:42:f0:86:a0:c6:
                    6a:84:48:2e:99:e2:31:f2:84:fd:2b:49:f6:8a:91:
                    b7:45:71:a3:8b:75:a1:f6:68:14:42:7a:59:c3:7d:
                    d6:7c:c7:38:73:16:cd:92:30:7a:66:4c:c9:63:3f:
                    fb:0a:96:92:bd:6b:bc:ab:86:01:28:c9:7a:08:58:
                    2c:e4:74:7c:20:de:da:f2:85:cc:8e:db:e8:16:4d:
                    23:89:4b:31:de:1b:3f:ea:b4:82:9d:3c:24:fe:e1:
                    90:e7:e2:cc:b9:50:c5:d4:1d:c6:70:07:a6:cc:c5:
                    92:e9:20:a1:33:a0:75:08:61:00:eb:8c:c4:c4:98:
                    50:ef:1f:b8:8d:79:db:c8:21:29:ca:33:da:19:8f:
                    b0:ca:67:7a:bf:35:bf:63:30:fb:41:fb:29:1b:5d:
                    ff:8b:9c:3a:5f:09:d1:75:c4:fb:d4:aa:86:e5:c2:
                    9d:56:f7:16:fa:b3:8a:36:65:95:60:2a:2c:fc:29:
                    8b:23:5a:74:26:05:8b:34:4f:86:9d:49:9a:c2:f0:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CA:CD:4D:8C:6A:96:EC:D0:42:1F:CA:ED:90:CD:18:D9:B9:7C:4C
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e36342e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:93:e8:75:63:2d:3f:05:93:0a:2e:82:dc:24:ed:c8:41:a6:
         17:a5:e3:c6:2c:71:43:70:e2:1e:23:a3:29:c9:02:2d:d0:69:
         30:64:c1:9e:98:a0:27:29:7c:44:4b:2d:56:91:7b:23:8a:88:
         23:a5:15:35:7a:3d:f6:76:d6:28:a1:34:ce:72:36:30:94:26:
         f5:91:9c:1e:54:3e:1a:14:7f:77:47:33:a6:e1:38:5e:7a:61:
         63:9b:ff:0a:92:94:19:d7:9f:75:08:31:dd:87:61:06:c2:79:
         f3:b0:72:8d:e9:50:a1:79:af:8e:b1:8b:3d:75:c0:da:5b:2f:
         cf:f0:f6:bd:72:eb:87:5a:f2:e3:20:90:d3:aa:80:27:41:e6:
         ad:cc:5b:bd:e3:d7:86:63:a5:e3:02:f5:a2:1c:06:fd:0a:95:
         c8:9f:34:a2:1e:22:f8:63:54:16:c3:97:49:79:28:39:ba:4b:
         66:be:90:0a:c5:71:a3:9b:f8:60:66:a3:ca:f2:81:c0:5b:44:
         ee:99:92:dc:19:26:56:74:b5:16:ed:e5:57:a8:b8:1a:5b:b4:
         26:28:45:eb:08:61:9c:96:98:b9:37:93:f3:fa:63:bf:4c:0c:
         1f:c2:66:a0:5f:15:32:1b:1c:ed:62:8b:85:a4:46:ce:55:23:
         ee:0f:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:10 2026 by rpki-client