Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3239203d3e203137323837.roa
File:                     3139302e3137302e36342e302f31382d3239203d3e203137323837.roa (raw, json)
Hash identifier:          oddZGM8NitHgQp/wBEtU64U85OLtNrvT/1s7CnYswf4=
Subject key identifier:   4F:90:8C:E2:3D:18:48:AF:04:75:3E:4F:36:B4:A2:8D:56:AD:6E:18
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       753A6F208C6CC2D8AF159D206CB4E788CFC3DE61
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3239203d3e203137323837.roa
Signing time:             Wed 08 Jul 2026 02:51:26 +0000
ROA not before:           Wed 08 Jul 2026 02:46:26 +0000
ROA not after:            Wed 07 Jul 2027 02:51:26 +0000
asID:                     17287
IP address blocks:        190.170.64.0/18 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3a:6f:20:8c:6c:c2:d8:af:15:9d:20:6c:b4:e7:88:cf:c3:de:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Jul  8 02:46:26 2026 GMT
            Not After : Jul  7 02:51:26 2027 GMT
        Subject: CN=4F908CE23D1848AF04753E4F36B4A28D56AD6E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:76:71:0a:db:c5:6a:b3:08:4e:b8:72:32:
                    62:39:e1:f5:ed:3f:ca:1c:e2:7c:d1:53:ca:6a:80:
                    01:6e:9e:91:58:cd:c7:18:e0:e0:f2:0f:aa:48:d5:
                    f2:53:e9:f8:0b:08:2c:7e:9a:9b:bd:96:97:30:44:
                    24:71:64:04:71:98:24:1a:17:5b:f7:34:86:40:d0:
                    d4:87:68:2a:50:4a:29:a3:92:c1:95:40:1b:71:1f:
                    d9:1d:ec:c1:ac:13:f0:d5:bb:2b:73:49:e1:f9:06:
                    b9:fe:34:c3:72:83:55:1f:f5:0b:02:14:24:23:55:
                    52:68:f7:a2:3c:c7:36:61:a7:8c:bf:f6:fd:2f:5a:
                    ca:a2:21:59:a4:36:af:c2:14:30:c0:f2:db:55:9e:
                    60:c3:4a:e3:8e:fb:a5:0d:af:a9:f0:37:ca:9a:0c:
                    33:c2:ab:39:75:9f:8f:0b:24:cb:09:bd:84:e6:de:
                    9f:17:e0:ff:c1:99:f8:85:70:30:ec:b9:fc:df:a6:
                    45:a6:18:bc:5d:11:28:43:a3:76:a8:4b:62:09:fd:
                    12:51:ac:1f:a3:89:39:11:1a:68:c5:06:99:8c:e4:
                    b8:52:ab:6d:6d:95:ae:97:e3:bb:2b:d3:51:d3:61:
                    8e:8b:d4:0c:a4:cb:67:89:4b:64:d4:67:fd:9d:73:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:90:8C:E2:3D:18:48:AF:04:75:3E:4F:36:B4:A2:8D:56:AD:6E:18
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3239203d3e203137323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:67:81:f1:45:40:97:6d:12:1a:26:98:65:55:41:14:1b:4b:
         5a:64:6d:8c:7e:66:a9:68:6d:d6:59:eb:19:8e:0e:fc:32:3d:
         a0:a0:37:88:72:fb:ed:a8:7b:5d:a2:bb:29:e7:da:e6:61:8c:
         d4:de:3f:ef:a8:b2:23:fb:2f:5a:20:fb:1d:34:fb:4c:0a:45:
         14:ad:12:6a:e2:6e:be:77:25:b5:88:eb:f6:50:12:af:20:2e:
         f6:83:f1:da:47:22:08:2d:b4:e6:ee:84:5e:07:8b:f6:8a:c4:
         12:e5:e0:ea:66:cf:96:b7:d5:b8:00:5b:3b:a6:e9:6e:6e:03:
         4d:ab:52:cb:c7:62:91:6e:c6:28:d7:09:5b:39:1d:1a:a3:43:
         58:8c:ee:e3:2a:cf:d1:ef:fb:72:db:72:3c:0a:3e:f5:ca:e5:
         fb:83:0c:e0:8e:b3:3c:0f:ed:eb:50:ab:11:af:e7:6b:9c:89:
         c0:00:be:84:2e:43:28:02:28:de:44:19:91:ab:bf:7e:3a:c2:
         d3:da:bf:45:1b:77:c6:4e:0b:06:19:f0:7d:21:81:48:a4:79:
         74:80:9c:28:94:ce:81:66:7a:48:91:65:04:93:7d:35:b3:93:
         c3:b8:23:cf:a1:43:86:82:de:88:6b:09:10:45:88:30:d0:2c:
         1c:df:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:31:10 2026 by rpki-client