Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e39362e302f32322d3234203d3e203138383232.roa
File:                     3139302e3231352e39362e302f32322d3234203d3e203138383232.roa (raw, json)
Hash identifier:          XY5086Iy0xZ6Jk9s9nstSPJteBedm07pi1ykXHxtV/g=
Subject key identifier:   7E:E8:BA:FC:55:BD:BA:92:12:DD:6A:FA:37:49:0E:40:4F:A5:B3:E8
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       53BB0683635CEA27D636286E1D7321F0719AE0C8
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e39362e302f32322d3234203d3e203138383232.roa
Signing time:             Tue 02 Jun 2026 17:45:23 +0000
ROA not before:           Tue 02 Jun 2026 17:40:23 +0000
ROA not after:            Tue 01 Jun 2027 17:45:23 +0000
asID:                     18822
IP address blocks:        190.215.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bb:06:83:63:5c:ea:27:d6:36:28:6e:1d:73:21:f0:71:9a:e0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jun  2 17:40:23 2026 GMT
            Not After : Jun  1 17:45:23 2027 GMT
        Subject: CN=7EE8BAFC55BDBA9212DD6AFA37490E404FA5B3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:cb:a1:ee:75:0d:07:38:8a:07:6b:cc:eb:
                    76:44:62:4c:a9:4d:83:09:f6:96:54:87:48:2f:bb:
                    90:6f:46:c0:67:f4:3e:e4:cb:f1:e1:57:bd:f5:9c:
                    50:45:d3:1a:2d:c5:47:2b:c2:f7:57:bd:78:72:ba:
                    1c:92:b6:92:ca:de:d6:3c:02:68:3b:06:fa:a2:a9:
                    0f:ef:7a:0b:0f:e5:75:cf:8f:23:38:d6:14:0c:9d:
                    2c:fb:07:20:f1:ee:2a:b6:d8:b3:ec:ef:18:a0:b8:
                    cf:a1:b8:a1:5c:21:17:90:6b:bb:18:7e:26:b8:41:
                    e4:1a:37:c9:ed:59:65:b8:30:49:dc:05:b7:2f:b0:
                    77:3f:d1:6d:07:8f:43:cb:70:25:65:90:97:fa:e0:
                    36:76:ec:19:e6:93:55:58:2a:ec:0a:3d:ea:99:8f:
                    c1:d9:e6:97:0a:ba:99:9c:96:79:1c:f1:c0:41:34:
                    fb:5a:a1:42:ec:86:e0:f7:7b:45:ce:ec:bf:7e:6c:
                    15:26:4d:6c:3a:ce:8e:9d:f0:0c:79:59:83:c4:0c:
                    28:20:f2:a6:11:51:67:ca:ed:29:ed:a1:b4:74:21:
                    d7:4b:cc:ba:9a:b8:a7:5b:0b:16:3a:b0:06:ab:14:
                    8e:f1:53:06:a2:2a:ac:66:a3:5d:fe:dc:b0:ae:06:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E8:BA:FC:55:BD:BA:92:12:DD:6A:FA:37:49:0E:40:4F:A5:B3:E8
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3231352e39362e302f32322d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.215.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:b8:c5:83:25:4c:8a:69:c7:60:37:81:92:48:14:15:13:e2:
         19:cc:e7:d5:4d:ba:48:02:f9:14:ca:31:e7:c1:a7:62:4d:c9:
         23:5f:ef:48:79:35:c2:97:1a:dc:6f:c8:ab:39:d7:6a:be:44:
         11:e4:1c:21:9a:91:a9:4d:9f:8d:30:47:5c:e0:34:e7:59:7c:
         f3:ab:15:16:1e:c3:2a:f6:c3:50:ff:6a:ce:7b:fa:5d:17:6c:
         ab:7c:23:4f:ad:96:1a:02:fd:ff:2a:a6:07:e8:f0:bc:3e:0d:
         80:b9:39:90:2a:28:f7:62:c1:cc:e2:5f:a5:8c:a9:6b:de:28:
         f5:b7:c7:67:e7:ae:49:c8:25:0b:53:ae:c6:ed:88:2d:dd:de:
         10:b2:7a:31:f7:d4:70:26:49:10:85:bc:a3:e5:87:86:a5:45:
         40:bc:85:b2:f2:79:0e:3e:c2:3d:81:90:af:40:02:53:c3:b6:
         b9:7b:5d:fd:a7:f2:77:ae:ca:2a:51:79:91:38:60:a8:13:66:
         94:4a:f6:f3:c0:bb:dd:99:33:5e:05:81:92:74:a4:ef:f8:b8:
         69:b0:74:8d:bd:b0:1a:ff:67:52:2c:e5:4e:72:a2:2a:cb:0f:
         71:21:bc:ef:66:9b:6d:4f:e9:7b:b0:da:0a:a1:88:b1:89:7d:
         61:b8:a5:e8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUU7sGg2Nc6ifWNihuHXMh8HGa4MgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxOTEyMjFFMkM5QTJEOEFFOEQ2QjM1MUM0QTAwRDU5
Qzk2NkM4NTAeFw0yNjA2MDIxNzQwMjNaFw0yNzA2MDExNzQ1MjNaMDMxMTAvBgNV
BAMTKDdFRThCQUZDNTVCREJBOTIxMkRENkFGQTM3NDkwRTQwNEZBNUIzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c8uh7nUNBziKB2vM63ZEYkyp
TYMJ9pZUh0gvu5BvRsBn9D7ky/HhV731nFBF0xotxUcrwvdXvXhyuhyStpLK3tY8
Amg7BvqiqQ/vegsP5XXPjyM41hQMnSz7ByDx7iq22LPs7xiguM+huKFcIReQa7sY
fia4QeQaN8ntWWW4MEncBbcvsHc/0W0Hj0PLcCVlkJf64DZ27Bnmk1VYKuwKPeqZ
j8HZ5pcKupmclnkc8cBBNPtaoULshuD3e0XO7L9+bBUmTWw6zo6d8Ax5WYPEDCgg
8qYRUWfK7SntobR0IddLzLqauKdbCxY6sAarFI7xUwaiKqxmo13+3LCuBkqzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfui6/FW9upIS3Wr6N0kOQE+ls+gwHwYDVR0j
BBgwFoAURhkSIeLJotiujWs1HEoA1ZyWbIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzE4M0VGMkQxMTFENjRCNkRERUU0N0MyQkU2NzRFNzFC
NTYwREI4NzRFOTc2QUU5QzQ1NkQ0NzFBOENCN0FFLzAvNDYxOTEyMjFFMkM5QTJE
OEFFOEQ2QjM1MUM0QTAwRDU5Qzk2NkM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NjE5MTIyMUUyQzlBMkQ4QUU4
RDZCMzUxQzRBMDBENTlDOTY2Qzg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMxODNFRjJEMTExRDY0QjZEREVFNDdDMkJFNjc0RTcxQjU2MERCODc0
RTk3NkFFOUM0NTZENDcxQThDQjdBRS8wLzMxMzkzMDJlMzIzMTM1MmUzOTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr7XYDAN
BgkqhkiG9w0BAQsFAAOCAQEAn7jFgyVMimnHYDeBkkgUFRPiGczn1U26SAL5FMox
58GnYk3JI1/vSHk1wpca3G/IqznXar5EEeQcIZqRqU2fjTBHXOA051l886sVFh7D
KvbDUP9qznv6XRdsq3wjT62WGgL9/yqmB+jwvD4NgLk5kCoo92LBzOJfpYypa94o
9bfHZ+euScglC1Ouxu2ILd3eELJ6MffUcCZJEIW8o+WHhqVFQLyFsvJ5Dj7CPYGQ
r0ACU8O2uXtd/afyd67KKlF5kThgqBNmlEr288C73ZkzXgWBknSk7/i4abB0jb2w
Gv9nUizlTnKiKssPcSG872abbU/pe7DaCqGIsYl9Ybil6A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:05 2026 by rpki-client