Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e302e302f31382d3138203d3e203237383932.roa
File:                     3139302e3137302e302e302f31382d3138203d3e203237383932.roa (raw, json)
Hash identifier:          SIIYcQX2MnxgGRPylnM/0AD//a7XF0x4DA4dKjpkyr0=
Subject key identifier:   55:5B:A2:80:5E:6B:A8:C5:13:BE:34:30:D0:E1:29:5E:9D:E0:1C:ED
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       66F0DA9EBB86305C4FD3DD4F5DC34924D4F0D012
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e302e302f31382d3138203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:05 +0000
ROA not before:           Sun 12 Jul 2026 21:10:05 +0000
ROA not after:            Sun 11 Jul 2027 21:15:05 +0000
asID:                     27892
IP address blocks:        190.170.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f0:da:9e:bb:86:30:5c:4f:d3:dd:4f:5d:c3:49:24:d4:f0:d0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:05 2026 GMT
            Not After : Jul 11 21:15:05 2027 GMT
        Subject: CN=555BA2805E6BA8C513BE3430D0E1295E9DE01CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:fd:de:26:e4:f0:22:9e:4f:85:90:6f:d1:
                    ad:72:13:f1:fc:70:49:ce:00:8c:9b:84:99:57:22:
                    c2:9b:c2:6a:7c:75:46:23:16:69:99:b9:84:4f:ab:
                    84:07:a2:dd:88:c5:b6:2d:5b:3c:8d:9a:46:a9:9d:
                    6c:a2:21:0f:13:6c:e8:a8:b3:ee:d0:d1:ce:96:ba:
                    41:97:e0:ab:ea:6e:8c:fc:58:2e:53:52:35:1d:46:
                    c7:d3:3e:82:c5:be:b4:5a:a9:f4:35:9e:ae:f6:da:
                    d9:83:3a:cf:54:ec:aa:0e:79:72:56:3e:8b:c5:4b:
                    95:3e:ed:5b:47:3a:88:c3:53:cf:9b:2e:3a:30:fe:
                    a6:2f:6f:e0:5c:98:a2:61:af:ff:e0:ea:c1:68:df:
                    67:c4:9b:a3:20:7a:ef:3e:de:38:ca:1c:1a:99:15:
                    f8:9e:5d:13:99:89:60:09:cb:50:7c:61:8f:6e:12:
                    5a:e6:f5:70:49:98:6d:78:f1:1c:16:1d:01:9b:f2:
                    7f:3b:19:5b:e9:c8:07:e0:25:6a:c9:b7:4e:e2:89:
                    d4:5a:56:a9:b2:df:26:f4:4d:70:40:77:fc:35:02:
                    61:3d:ce:01:7d:2f:1e:8e:24:e2:9e:f7:79:f9:b9:
                    7a:1a:95:b0:1f:9a:e4:5a:4a:41:ad:19:1b:68:9d:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:A2:80:5E:6B:A8:C5:13:BE:34:30:D0:E1:29:5E:9D:E0:1C:ED
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e302e302f31382d3138203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:9f:82:b6:60:16:a4:97:d2:64:a0:d8:93:f9:a9:8a:7c:
         ed:a0:d2:d8:e9:59:da:0d:3d:74:4e:e3:bc:e7:e0:d9:06:ff:
         75:d1:26:28:fa:ad:67:1d:b6:d0:e8:d9:2b:1f:fd:f7:34:d0:
         00:e1:55:46:16:48:e2:33:df:27:db:5f:48:ec:16:e4:d8:40:
         31:bc:9a:3c:cb:b4:bd:f8:d2:d9:07:1c:e7:73:1f:8e:df:2e:
         c6:78:6a:e6:32:39:68:d1:f5:8b:24:a9:8e:c8:a4:ab:a5:16:
         a4:92:94:6e:e6:9c:5d:37:b0:65:02:d3:d7:64:a1:b7:36:40:
         18:cc:95:5a:63:ab:c9:7a:15:f9:39:cc:97:85:fe:20:5a:4d:
         ef:69:82:3c:d3:92:ed:68:bd:7a:1c:6f:d5:69:bd:5a:fc:7b:
         d8:cb:16:cb:fb:73:fd:b4:16:a1:7c:5a:7c:15:7b:f6:09:86:
         41:3e:a0:e0:f5:2c:a8:4a:2e:ee:f4:df:ee:6c:3b:69:2d:5b:
         18:02:0e:8a:a8:4b:1c:fb:38:b3:57:4f:d6:48:7b:ce:87:e3:
         6c:20:aa:32:f0:42:05:4c:4f:3b:c8:77:f7:ba:b0:fd:d5:27:
         fa:2a:59:fb:40:18:86:48:a2:8e:be:69:4b:a5:e3:54:21:bb:
         ad:a8:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:18 2026 by rpki-client