Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e32382e302f32322d3232203d3e203237383932.roa
File:                     3139302e3137302e32382e302f32322d3232203d3e203237383932.roa (raw, json)
Hash identifier:          oe7RouQHusA7AVIAurn17wFXb6A4/TFaF33mLjRur/c=
Subject key identifier:   81:58:44:44:24:A6:00:A1:68:AE:71:13:BD:B7:FB:DF:CE:91:76:5D
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       28474D0A4B8E22972CC4FCC9654EF8FDDA480C16
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e32382e302f32322d3232203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:07 +0000
ROA not before:           Sun 12 Jul 2026 21:10:07 +0000
ROA not after:            Sun 11 Jul 2027 21:15:07 +0000
asID:                     27892
IP address blocks:        190.170.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:47:4d:0a:4b:8e:22:97:2c:c4:fc:c9:65:4e:f8:fd:da:48:0c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:07 2026 GMT
            Not After : Jul 11 21:15:07 2027 GMT
        Subject: CN=8158444424A600A168AE7113BDB7FBDFCE91765D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:91:e7:40:e6:93:86:af:01:32:3b:92:76:
                    2a:49:e4:3a:90:99:b2:e6:71:32:3d:38:46:99:02:
                    58:be:90:d3:c8:59:21:18:d5:54:b0:46:ed:2e:f3:
                    01:b9:cb:1a:3e:cd:fe:1c:8b:28:cf:14:0a:b9:39:
                    06:c9:3e:03:32:51:35:76:4f:9d:9c:b9:cc:14:f8:
                    7a:b7:27:28:14:ad:ab:5c:60:23:67:f8:d7:e2:e2:
                    7a:b2:26:c4:e7:06:52:ee:d5:22:55:5f:49:83:ac:
                    ce:c9:27:0f:11:d9:2b:24:0a:e0:c1:d6:65:12:b3:
                    94:8c:23:40:80:a6:ce:e5:1f:15:45:2e:c8:4c:e2:
                    a7:f5:4a:2b:3d:7d:ba:09:63:d6:40:bd:37:ce:cb:
                    6e:32:76:8f:bd:87:dc:91:cf:d3:80:0d:33:c1:40:
                    87:14:cc:91:dd:fa:08:cc:92:b9:97:8c:08:30:0b:
                    14:c6:a4:38:c9:b9:3f:76:24:99:6c:2f:0b:57:b6:
                    c8:de:bd:d7:00:ee:7d:8c:62:10:b3:8e:08:70:7d:
                    d3:d0:8e:20:67:b6:4c:63:97:45:11:ac:ea:64:25:
                    86:0f:b5:4d:97:fb:78:08:0d:53:3e:60:ea:2a:ac:
                    d3:e3:34:08:e8:3e:41:a0:af:d8:21:b5:0a:f9:98:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:44:44:24:A6:00:A1:68:AE:71:13:BD:B7:FB:DF:CE:91:76:5D
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e32382e302f32322d3232203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:75:80:40:b4:5b:7b:9b:1c:df:78:69:0a:fa:ef:db:99:
         1d:e9:00:4b:27:39:a0:66:91:da:36:25:1e:54:78:e4:a9:6f:
         8b:ce:4c:b1:37:d9:e0:a1:5b:d4:01:2d:a0:c8:12:c2:9c:49:
         e9:d3:5b:29:87:b4:e1:44:bd:12:ab:db:3f:65:a4:34:7d:f2:
         1a:cb:ef:ce:99:7b:7b:6d:2b:9c:59:b0:22:41:7f:46:ac:1d:
         99:ca:08:11:3e:8c:22:5b:3c:62:4d:19:31:c9:7b:ed:56:70:
         7a:95:59:54:3f:da:d0:47:2d:e2:5b:8d:d3:55:ea:b1:62:e8:
         4a:51:c2:f1:a5:4c:a9:d3:d2:b4:4a:60:b6:25:c0:3f:06:c9:
         25:ee:fb:ea:71:1c:47:75:8b:8e:5a:70:89:b9:08:c2:48:b8:
         74:62:dc:ed:7e:c4:d9:9d:77:d8:d6:74:a7:ba:83:fa:25:98:
         9f:8d:90:25:ed:3e:f7:ea:86:f7:ce:b2:25:c4:22:cc:4e:1e:
         a4:ce:13:bf:c4:27:0c:66:e9:ad:83:7d:a8:82:17:2e:1d:01:
         2d:07:9e:d9:61:06:fc:fc:42:a6:07:1e:c6:65:84:8f:fe:f2:
         bb:b5:00:7d:e5:27:e3:d7:2f:6e:66:11:c7:b7:02:8d:c8:f2:
         35:b6:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:53 2026 by rpki-client