Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31362e302f32312d3231203d3e203237383932.roa
File:                     3139302e3137302e31362e302f32312d3231203d3e203237383932.roa (raw, json)
Hash identifier:          wg8yQ7zHaWIpI3bh/4hZ6ILp7w8C5eeWK3CVfDp10qs=
Subject key identifier:   E4:8A:B0:D2:7B:1D:E4:DD:30:88:3D:E7:C4:96:F3:14:A8:AD:98:E4
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       2C381B2F99A83847E1FCF611F80C362D414BABC0
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31362e302f32312d3231203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:01 +0000
ROA not before:           Sun 12 Jul 2026 21:10:01 +0000
ROA not after:            Sun 11 Jul 2027 21:15:01 +0000
asID:                     27892
IP address blocks:        190.170.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:38:1b:2f:99:a8:38:47:e1:fc:f6:11:f8:0c:36:2d:41:4b:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:01 2026 GMT
            Not After : Jul 11 21:15:01 2027 GMT
        Subject: CN=E48AB0D27B1DE4DD30883DE7C496F314A8AD98E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:c3:50:39:73:1e:1c:fb:37:fa:47:cd:c7:
                    80:cc:af:5b:d9:eb:dc:7d:7d:30:24:ba:f7:a1:09:
                    f2:0f:ed:23:1d:17:cf:88:d8:32:d6:3f:50:8d:39:
                    a0:70:3e:48:e2:d5:55:75:3a:cf:d7:4f:5e:f0:2b:
                    4d:10:b4:88:52:24:bf:39:d0:ae:f7:db:4c:34:91:
                    0a:ec:3e:3d:ed:d2:17:13:48:8e:52:7e:7a:ee:8a:
                    3e:70:42:98:9f:c1:78:d2:c6:bd:9b:cc:b9:7f:2b:
                    11:8c:6a:dc:1b:f3:8f:9b:ca:a4:f5:85:07:e5:d8:
                    6b:b3:70:58:ff:47:cc:d3:c7:4c:e7:bd:c4:c9:71:
                    c7:39:62:5a:a6:ac:b8:1a:9f:52:18:dc:8f:7c:c5:
                    c6:dc:7c:8c:06:d3:03:9f:3e:f7:29:81:1a:ef:38:
                    0f:45:d7:98:0a:cc:c2:3c:36:bd:7b:84:1b:91:a7:
                    9d:75:a3:ee:81:17:44:e2:96:62:5c:62:1a:e8:40:
                    3c:e5:3d:35:2e:dc:78:61:f5:3b:bb:2c:5c:5c:cf:
                    01:80:cb:57:09:c8:6e:a6:d3:1f:6e:fe:9b:a6:60:
                    61:5f:de:48:17:47:e3:c9:53:9d:94:4e:5b:cf:e7:
                    da:bf:fd:15:91:7b:06:ed:dc:6c:22:a5:06:9c:f1:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8A:B0:D2:7B:1D:E4:DD:30:88:3D:E7:C4:96:F3:14:A8:AD:98:E4
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31362e302f32312d3231203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:fd:07:c3:97:3b:a8:b6:dc:f6:78:63:e9:c4:af:0e:d4:64:
         3a:63:10:6c:a5:e2:28:35:6d:40:bd:b1:fc:1b:b0:b7:24:14:
         86:23:8c:99:3b:5a:16:e1:39:f3:25:86:cb:00:77:cc:74:24:
         19:58:c0:d6:51:b5:7d:54:b0:35:7c:d4:ce:a3:0d:ff:9b:0a:
         57:93:d0:d2:f9:45:26:0f:9a:42:6b:09:18:90:fd:6f:30:6c:
         cc:a4:41:5a:30:5f:00:20:1d:99:d8:0d:f2:bb:1f:21:90:d8:
         07:bb:6e:a8:63:55:6b:2a:4a:4e:d3:5d:27:d3:81:28:9b:8d:
         cb:8d:78:7a:93:20:ac:e5:cb:80:91:b0:58:4b:62:a8:64:6f:
         a4:44:89:15:e3:b2:59:87:0f:7c:df:9f:c2:ef:34:5e:91:7a:
         7a:db:a8:42:0f:95:d4:db:cc:74:74:c0:60:29:aa:eb:ef:e8:
         1d:14:93:30:5e:c4:d5:82:77:93:4c:08:80:3b:41:a7:f8:d5:
         b1:0d:0a:a4:68:26:cc:64:70:ef:c3:fa:cb:a0:d3:e3:2f:df:
         14:c8:68:56:b2:af:4e:d4:b8:35:a6:5a:cd:95:9c:17:68:4a:
         4f:48:2f:cf:48:05:42:69:20:c7:81:9a:98:c5:9c:3e:c0:8c:
         57:42:10:7d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULDgbL5moOEfh/PYR+Aw2LUFLq8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhEQkNDNUNFMTQwMTYwQjE4NUJGMTdGNDExNDM0N0Uy
QzgyQjI3NTAeFw0yNjA3MTIyMTEwMDFaFw0yNzA3MTEyMTE1MDFaMDMxMTAvBgNV
BAMTKEU0OEFCMEQyN0IxREU0REQzMDg4M0RFN0M0OTZGMzE0QThBRDk4RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbMNQOXMeHPs3+kfNx4DMr1vZ
69x9fTAkuvehCfIP7SMdF8+I2DLWP1CNOaBwPkji1VV1Os/XT17wK00QtIhSJL85
0K7320w0kQrsPj3t0hcTSI5Sfnruij5wQpifwXjSxr2bzLl/KxGMatwb84+byqT1
hQfl2GuzcFj/R8zTx0znvcTJccc5YlqmrLgan1IY3I98xcbcfIwG0wOfPvcpgRrv
OA9F15gKzMI8Nr17hBuRp511o+6BF0TilmJcYhroQDzlPTUu3Hhh9Tu7LFxczwGA
y1cJyG6m0x9u/pumYGFf3kgXR+PJU52UTlvP59q//RWRewbt3GwipQac8SIbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5Iqw0nsd5N0wiD3nxJbzFKitmOQwHwYDVR0j
BBgwFoAUaNvMXOFAFgsYW/F/QRQ0fiyCsnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDZGNjhDMEM4NTYzMzM2RDFDMDJDOTU4OTQ1NTgwNjBB
OTEyRUVBNUI4MkI3N0ZEQUMxNjNGQTgzMEJDRTIwLzAvNjhEQkNDNUNFMTQwMTYw
QjE4NUJGMTdGNDExNDM0N0UyQzgyQjI3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OERCQ0M1Q0UxNDAxNjBCMTg1
QkYxN0Y0MTE0MzQ3RTJDODJCMjc1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA2RjY4QzBDODU2MzMzNkQxQzAyQzk1ODk0NTU4MDYwQTkxMkVFQTVC
ODJCNzdGREFDMTYzRkE4MzBCQ0UyMC8wLzMxMzkzMDJlMzEzNzMwMmUzMTM2MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNzM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA76qEDAN
BgkqhkiG9w0BAQsFAAOCAQEAdP0Hw5c7qLbc9nhj6cSvDtRkOmMQbKXiKDVtQL2x
/BuwtyQUhiOMmTtaFuE58yWGywB3zHQkGVjA1lG1fVSwNXzUzqMN/5sKV5PQ0vlF
Jg+aQmsJGJD9bzBszKRBWjBfACAdmdgN8rsfIZDYB7tuqGNVaypKTtNdJ9OBKJuN
y414epMgrOXLgJGwWEtiqGRvpESJFeOyWYcPfN+fwu80XpF6etuoQg+V1NvMdHTA
YCmq6+/oHRSTMF7E1YJ3k0wIgDtBp/jVsQ0KpGgmzGRw78P6y6DT4y/fFMhoVrKv
TtS4NaZazZWcF2hKT0gvz0gFQmkgx4GamMWcPsCMV0IQfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:53 2026 by rpki-client