Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31322e302f32322d3232203d3e203237383932.roa
File:                     3139302e3137302e31322e302f32322d3232203d3e203237383932.roa (raw, json)
Hash identifier:          PIr9PKP/zg0SNIK95XfljacApT9O7NdbwitO5PfS3V4=
Subject key identifier:   F0:39:CD:5F:67:F6:EF:BA:82:C4:7D:A9:23:28:27:49:CF:90:2F:2C
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       15E436B34DF433841361CA106969C3F3802C1F33
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31322e302f32322d3232203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:05 +0000
ROA not before:           Sun 12 Jul 2026 21:10:05 +0000
ROA not after:            Sun 11 Jul 2027 21:15:05 +0000
asID:                     27892
IP address blocks:        190.170.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:36:b3:4d:f4:33:84:13:61:ca:10:69:69:c3:f3:80:2c:1f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:05 2026 GMT
            Not After : Jul 11 21:15:05 2027 GMT
        Subject: CN=F039CD5F67F6EFBA82C47DA923282749CF902F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:cc:e8:b9:b3:40:74:29:07:2d:1e:72:07:
                    a1:cd:14:53:ce:f9:42:4f:05:e4:cf:56:01:5e:c9:
                    5c:3b:48:27:a5:ed:03:30:41:c2:a6:fb:b7:e2:60:
                    99:93:2c:e2:73:60:aa:28:d8:83:99:a9:76:09:1d:
                    89:53:b8:5c:41:6c:bc:bb:e6:11:bd:12:c9:63:ab:
                    1a:0b:55:dc:67:2d:59:e1:78:b8:e8:4e:9c:4a:48:
                    ee:a6:cb:ab:21:f9:22:77:c5:a2:0c:47:81:d2:2c:
                    51:63:db:06:3e:56:73:88:76:87:26:71:c8:ae:c1:
                    e2:43:1c:a5:e6:0a:21:4d:04:28:9c:64:a0:ea:c5:
                    d2:16:47:a8:37:11:82:80:49:b9:60:1e:4c:5e:a2:
                    ed:d1:df:21:f9:ff:c0:4a:e7:fb:6e:85:fe:e5:cc:
                    a7:f4:46:82:f4:ac:24:0f:b9:d8:72:60:ff:0e:0a:
                    03:31:3a:53:a1:fd:a9:13:68:b0:43:65:e7:4d:64:
                    e6:99:f9:ad:88:5c:c3:68:37:86:f4:e9:cc:fe:d5:
                    fb:9c:8b:ae:70:50:ec:b3:d4:c2:d4:a4:0f:f9:da:
                    6c:c1:7d:71:f0:4c:81:6b:00:b1:fc:67:74:41:3a:
                    de:52:6b:88:98:63:f2:d2:34:2b:5d:a1:a5:dd:87:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:CD:5F:67:F6:EF:BA:82:C4:7D:A9:23:28:27:49:CF:90:2F:2C
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31322e302f32322d3232203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:24:c6:3a:b6:c3:b0:0f:92:44:1b:05:2d:65:70:2c:9b:
         93:49:6f:87:6a:d7:d0:04:72:75:06:9c:54:fe:1a:38:26:70:
         e8:4c:3a:a7:f6:80:b1:00:1a:15:77:b6:ab:43:94:66:27:72:
         ba:2d:66:31:26:d5:23:f4:75:5b:75:61:e1:98:f0:1c:81:8e:
         75:e6:05:82:79:79:1c:ba:26:a8:f1:30:a4:69:0e:c9:d4:ce:
         d1:8b:e5:5c:ca:f8:d5:8d:6c:49:18:6e:61:b2:c0:fa:92:65:
         0d:8d:f8:7d:24:43:fd:5b:71:23:df:71:a4:f3:ce:57:cb:54:
         c7:93:7c:85:6f:fc:63:8b:42:e8:35:e2:68:28:04:f9:60:fc:
         94:ba:c3:aa:75:33:23:10:3e:c6:80:30:9e:dc:84:5c:ab:c1:
         7e:bb:8a:de:8d:c6:94:8c:98:4c:5c:f4:bc:92:8d:81:18:9a:
         dd:6d:88:73:e0:a6:ec:e5:4d:69:77:4f:d3:5b:6f:bf:40:26:
         52:36:cc:1c:00:f8:72:e9:9b:ae:c2:bd:23:d7:c6:4a:1f:2b:
         33:be:b3:a7:78:39:71:52:c0:45:4c:8b:c6:98:e2:40:ac:07:
         59:ba:8c:dc:46:6d:be:ac:e5:e3:af:51:17:c6:2e:b3:15:10:
         2c:96:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:53 2026 by rpki-client