Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31362e302f32322d3232203d3e203237383932.roa
File:                     3139302e3137302e31362e302f32322d3232203d3e203237383932.roa (raw, json)
Hash identifier:          RQUo/saGa3kqS8uRSRuKxrjMQVd3LV6cg0sXU7db2mU=
Subject key identifier:   94:77:3C:70:19:AF:7E:70:72:C1:6F:60:27:91:8E:4C:53:6B:B8:19
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       023A10B1A1B57D57EAC7603313B5573EA2B453D9
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31362e302f32322d3232203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:02 +0000
ROA not before:           Sun 12 Jul 2026 21:10:02 +0000
ROA not after:            Sun 11 Jul 2027 21:15:02 +0000
asID:                     27892
IP address blocks:        190.170.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3a:10:b1:a1:b5:7d:57:ea:c7:60:33:13:b5:57:3e:a2:b4:53:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:02 2026 GMT
            Not After : Jul 11 21:15:02 2027 GMT
        Subject: CN=94773C7019AF7E7072C16F6027918E4C536BB819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:dc:8b:d0:f1:66:20:ef:3a:4a:0f:a7:30:
                    c8:67:fb:05:64:85:59:45:78:2e:5d:ca:51:76:f9:
                    8d:3e:f0:a9:da:66:b2:7f:38:f2:22:e9:7f:b3:cd:
                    32:b2:14:34:68:8d:e7:e5:1e:3a:3d:9e:1a:da:9d:
                    c7:e8:34:e5:55:ed:08:2c:43:46:ad:f1:ca:c3:75:
                    43:18:e3:87:2e:ee:a1:3c:71:9e:b8:63:77:11:a5:
                    c2:e1:55:9c:45:1b:a3:81:45:55:dc:81:71:0c:94:
                    55:a1:27:e9:5e:44:6a:00:18:4c:66:53:57:59:0c:
                    e2:2b:7b:79:7c:a7:4a:80:4d:a7:30:be:9f:a3:eb:
                    94:ac:06:80:1c:fc:d3:a2:87:f4:9b:94:da:e8:54:
                    b2:3c:1b:98:75:f1:c5:c0:ad:aa:b5:51:26:80:ba:
                    62:4b:4e:32:a1:6e:a2:5a:ee:c1:b6:eb:24:73:de:
                    c5:71:6b:24:75:32:e3:22:03:e6:ad:1e:e0:41:70:
                    50:69:53:9b:4f:2e:cc:c5:25:4c:3f:bf:53:7b:50:
                    cc:4f:e8:98:1c:06:e1:f1:53:95:96:40:8b:73:1c:
                    c7:ef:0d:52:a7:2e:22:90:ba:6c:b9:8c:0e:1b:4c:
                    80:ef:cd:f2:a1:db:82:29:15:ff:6c:a8:ca:ac:b9:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:77:3C:70:19:AF:7E:70:72:C1:6F:60:27:91:8E:4C:53:6B:B8:19
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e31362e302f32322d3232203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:8f:a6:da:c4:01:02:4d:05:25:cd:bf:96:88:8d:85:b9:9f:
         3c:19:10:0c:f3:e4:8d:b9:83:07:f6:3c:e1:e1:d9:52:9b:42:
         27:c8:c9:f8:62:b8:08:e5:b5:68:be:fb:09:f0:28:58:5c:55:
         b0:b8:41:b2:4b:20:8e:e6:da:85:45:8f:10:2f:4a:7c:cf:1c:
         30:53:1d:88:ec:6f:f1:2b:c9:d5:4b:06:7a:94:69:be:38:52:
         81:cb:0d:1e:b4:3b:3f:a1:fb:c9:ac:29:05:ed:28:bf:7f:0e:
         0d:b1:fe:f0:5a:99:d2:73:c4:99:4d:80:37:7c:13:18:dd:e0:
         dc:41:c9:47:d8:60:5a:ce:aa:93:be:e7:73:3f:e7:59:56:09:
         07:15:fa:ee:18:4f:71:5e:4b:05:c8:4a:eb:12:a7:fc:ce:f5:
         b9:32:36:13:3a:c3:6c:49:06:10:c9:f3:88:f7:42:38:10:79:
         94:44:14:03:34:83:b9:e2:3b:fd:a2:2a:35:d7:c0:0d:e0:ae:
         48:0e:02:af:e6:14:48:79:e4:a4:53:bb:ce:38:c2:db:9f:81:
         3e:2e:4d:2c:ef:42:bc:d0:01:b9:44:79:d8:29:49:dc:45:49:
         bb:cd:4f:31:91:af:79:33:da:ec:1e:87:d4:58:98:0f:a9:c2:
         b1:6d:f5:44
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAjoQsaG1fVfqx2AzE7VXPqK0U9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhEQkNDNUNFMTQwMTYwQjE4NUJGMTdGNDExNDM0N0Uy
QzgyQjI3NTAeFw0yNjA3MTIyMTEwMDJaFw0yNzA3MTEyMTE1MDJaMDMxMTAvBgNV
BAMTKDk0NzczQzcwMTlBRjdFNzA3MkMxNkY2MDI3OTE4RTRDNTM2QkI4MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+NyL0PFmIO86Sg+nMMhn+wVk
hVlFeC5dylF2+Y0+8KnaZrJ/OPIi6X+zzTKyFDRojeflHjo9nhrancfoNOVV7Qgs
Q0at8crDdUMY44cu7qE8cZ64Y3cRpcLhVZxFG6OBRVXcgXEMlFWhJ+leRGoAGExm
U1dZDOIre3l8p0qATacwvp+j65SsBoAc/NOih/SblNroVLI8G5h18cXAraq1USaA
umJLTjKhbqJa7sG26yRz3sVxayR1MuMiA+atHuBBcFBpU5tPLszFJUw/v1N7UMxP
6JgcBuHxU5WWQItzHMfvDVKnLiKQumy5jA4bTIDvzfKh24IpFf9sqMqsuYEPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlHc8cBmvfnBywW9gJ5GOTFNruBkwHwYDVR0j
BBgwFoAUaNvMXOFAFgsYW/F/QRQ0fiyCsnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDZGNjhDMEM4NTYzMzM2RDFDMDJDOTU4OTQ1NTgwNjBB
OTEyRUVBNUI4MkI3N0ZEQUMxNjNGQTgzMEJDRTIwLzAvNjhEQkNDNUNFMTQwMTYw
QjE4NUJGMTdGNDExNDM0N0UyQzgyQjI3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OERCQ0M1Q0UxNDAxNjBCMTg1
QkYxN0Y0MTE0MzQ3RTJDODJCMjc1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA2RjY4QzBDODU2MzMzNkQxQzAyQzk1ODk0NTU4MDYwQTkxMkVFQTVC
ODJCNzdGREFDMTYzRkE4MzBCQ0UyMC8wLzMxMzkzMDJlMzEzNzMwMmUzMTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr6qEDAN
BgkqhkiG9w0BAQsFAAOCAQEAB4+m2sQBAk0FJc2/loiNhbmfPBkQDPPkjbmDB/Y8
4eHZUptCJ8jJ+GK4COW1aL77CfAoWFxVsLhBsksgjubahUWPEC9KfM8cMFMdiOxv
8SvJ1UsGepRpvjhSgcsNHrQ7P6H7yawpBe0ov38ODbH+8FqZ0nPEmU2AN3wTGN3g
3EHJR9hgWs6qk77ncz/nWVYJBxX67hhPcV5LBchK6xKn/M71uTI2EzrDbEkGEMnz
iPdCOBB5lEQUAzSDueI7/aIqNdfADeCuSA4Cr+YUSHnkpFO7zjjC25+BPi5NLO9C
vNABuUR52ClJ3EVJu81PMZGveTPa7B6H1FiYD6nCsW31RA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:53 2026 by rpki-client