Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa
File:                     3139302e3138352e302e302f31382d3138203d3e20323635383235.roa (raw, json)
Hash identifier:          3w4jQ9fmRUzs0uyWAtlboYxq0QPuew6zn3+UHeD1ZV8=
Subject key identifier:   B8:26:C3:6F:3E:34:71:7C:04:49:F2:C2:FA:7A:ED:B6:10:93:80:8E
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       130E17EC8D1DA5B0C7F93372586DDEFB8F568212
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa
Signing time:             Fri 10 Jul 2026 01:51:46 +0000
ROA not before:           Fri 10 Jul 2026 01:46:46 +0000
ROA not after:            Fri 09 Jul 2027 01:51:46 +0000
asID:                     265825
IP address blocks:        190.185.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0e:17:ec:8d:1d:a5:b0:c7:f9:33:72:58:6d:de:fb:8f:56:82:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Jul 10 01:46:46 2026 GMT
            Not After : Jul  9 01:51:46 2027 GMT
        Subject: CN=B826C36F3E34717C0449F2C2FA7AEDB61093808E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:94:f6:99:8f:2a:e4:06:ac:68:86:3e:52:
                    b9:3c:2d:8b:b5:d4:6e:41:9f:e3:e5:fc:fb:7a:4f:
                    9e:5d:a2:f8:c9:09:95:08:17:0f:23:f2:c8:f5:8b:
                    a7:63:9e:0f:ec:19:9b:6d:8e:99:ae:bb:b3:55:c3:
                    4c:bb:a6:bd:2a:f8:23:9b:3e:17:01:49:b9:a6:6b:
                    94:26:51:7d:0b:8e:e6:1e:1c:b0:aa:5f:c8:99:39:
                    37:bc:7d:92:d4:ad:10:76:5f:76:d0:63:c1:6f:3d:
                    e6:51:e3:c3:c1:91:3d:c9:ec:46:30:61:0a:69:16:
                    60:ce:5f:34:a5:da:f9:4c:30:05:b5:69:cc:a2:94:
                    2a:ab:8e:04:7f:63:40:37:29:f6:da:69:61:4e:1a:
                    18:4e:53:57:c1:4d:53:bf:4c:1b:ba:78:ef:77:c3:
                    90:e5:f3:80:ef:81:58:e1:6a:0b:f3:74:06:6f:bc:
                    f4:7b:49:02:e2:8e:8b:f3:25:8e:de:84:2a:31:b9:
                    4c:b7:fb:97:5b:9a:7a:e7:21:f7:99:c8:9e:1c:c8:
                    c4:14:59:1e:8a:7e:3e:d3:2f:1c:ef:bd:5e:48:ee:
                    3c:ac:1b:10:ea:64:74:f1:af:50:8b:66:84:8e:ae:
                    a7:16:f6:b1:0c:31:69:f1:ba:3f:60:08:bb:b8:96:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:C3:6F:3E:34:71:7C:04:49:F2:C2:FA:7A:ED:B6:10:93:80:8E
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bb:dc:fe:c2:99:36:8b:46:84:83:50:20:1a:f7:cb:44:ce:c3:
         b8:f9:42:e6:39:9f:37:86:f4:37:c8:13:cd:53:2f:c4:a9:42:
         98:84:02:95:90:f3:09:ad:fb:14:aa:b1:db:13:b0:e2:d6:1b:
         1d:01:4e:33:1d:cd:74:45:16:1f:af:da:80:18:b1:42:42:a9:
         8d:39:ba:f6:4b:ed:d3:ea:61:06:14:d9:e6:93:45:9a:b2:d8:
         13:14:61:69:2c:5c:6a:dc:64:69:2e:7b:34:47:57:3a:cf:ae:
         ca:62:78:b3:8f:1f:51:ac:b6:fc:9c:5d:22:db:f5:67:2f:c0:
         58:96:d6:d8:68:73:9c:ea:74:01:82:bc:0d:2e:5b:bb:28:4e:
         03:90:8b:00:53:99:cb:34:1f:d3:7b:21:79:e3:1c:a9:36:94:
         05:3c:b8:68:e8:de:a0:0a:1b:af:ed:68:5c:4d:22:f8:9e:63:
         a8:8f:a0:00:cb:9a:6f:f6:17:e4:9b:de:c6:13:1f:33:1d:cf:
         d1:79:1e:e0:5a:f3:f5:8f:c3:6e:fc:e6:87:24:dc:d8:17:4b:
         6b:fc:32:20:45:8c:41:3b:d9:c5:65:0d:e4:28:2d:e9:eb:1c:
         6f:84:49:ed:87:6f:b0:29:25:91:30:b6:ab:0e:48:df:a7:f3:
         29:8f:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:45:20 2026 by rpki-client