Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32312d3231203d3e203237383932.roa
File:                     3139302e3137302e33322e302f32312d3231203d3e203237383932.roa (raw, json)
Hash identifier:          yaBGkv1cOqxDmRmevVS28esl3bkqiDV4WAO2Dkq1Jdg=
Subject key identifier:   CA:C5:45:08:99:72:40:9B:3C:CB:AE:8B:44:AE:37:8C:8F:D9:42:65
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       6AAA7B0DF831A2A359749F3826AA6D087716AFCF
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32312d3231203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:06 +0000
ROA not before:           Sun 12 Jul 2026 21:10:06 +0000
ROA not after:            Sun 11 Jul 2027 21:15:06 +0000
asID:                     27892
IP address blocks:        190.170.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:aa:7b:0d:f8:31:a2:a3:59:74:9f:38:26:aa:6d:08:77:16:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:06 2026 GMT
            Not After : Jul 11 21:15:06 2027 GMT
        Subject: CN=CAC545089972409B3CCBAE8B44AE378C8FD94265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bb:45:0a:77:0a:d9:a7:1d:91:52:96:37:2a:
                    10:3f:71:5e:30:08:0b:c3:44:5b:08:22:87:b1:24:
                    47:2a:74:20:3d:1c:b8:c7:28:bf:58:da:1d:ec:fe:
                    0c:89:9d:a5:0a:fb:d6:86:00:0b:b6:3f:42:d4:65:
                    f5:7e:22:44:d9:48:07:d3:f1:d6:fb:da:1e:fb:fd:
                    c3:a2:90:30:18:75:37:b3:71:54:1d:f8:bc:ca:8a:
                    74:e8:da:6d:a7:8e:e6:d7:20:8a:47:53:33:a6:2e:
                    1e:1e:f4:56:74:ef:3b:7f:c4:40:37:ae:51:25:e8:
                    e9:53:f0:02:f2:25:e4:24:08:85:b7:aa:e8:e9:45:
                    95:b5:89:b1:95:7c:65:0f:46:06:ba:4c:b1:49:e2:
                    6e:aa:ee:6e:1b:96:68:59:90:9d:df:41:f7:3c:cb:
                    9a:2c:79:22:81:7c:c3:d0:24:25:eb:5f:7d:60:b3:
                    61:93:c3:e7:8e:9b:0f:29:79:22:c7:5d:b4:68:cd:
                    50:bf:57:4f:be:1f:ca:a3:dc:17:d9:57:83:58:38:
                    5f:de:e2:2b:74:98:3e:32:10:18:b7:86:54:bd:84:
                    a1:9c:09:09:04:c9:b0:a3:a7:4e:a7:4d:cb:6f:08:
                    57:24:94:8c:51:43:ed:17:0c:fd:53:f6:f6:ac:98:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C5:45:08:99:72:40:9B:3C:CB:AE:8B:44:AE:37:8C:8F:D9:42:65
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32312d3231203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:e5:ae:52:e6:f2:1e:6c:52:38:d4:5a:2f:00:f7:dc:24:
         d0:19:8c:b9:1f:63:0b:2d:20:7a:36:81:bc:41:50:2a:9f:9b:
         83:79:c4:ea:2d:c5:15:2c:63:e2:48:47:34:e3:57:44:7a:c0:
         39:ee:8a:d7:51:30:f0:f9:1f:0f:b3:ee:6f:f2:be:69:68:ed:
         db:9c:fb:81:16:ab:bd:5b:9f:9b:e6:7e:78:9f:f4:7c:d9:61:
         1c:14:2b:e2:d1:6d:76:0f:77:35:c6:21:3a:1c:c6:05:26:82:
         2c:56:00:d5:61:f4:8e:d6:8a:9e:4d:cb:53:a2:a4:82:5f:39:
         23:86:94:84:cd:c2:4e:5f:ef:51:03:02:22:2d:cd:06:39:3a:
         ce:39:0a:20:8f:0b:bc:e6:bb:62:df:29:1f:66:32:c7:57:2f:
         80:e3:72:ce:9c:23:bf:d8:d2:03:4a:40:de:eb:95:f5:3a:03:
         b8:fb:e3:ab:30:25:9d:9e:2d:af:1b:06:9a:5a:86:a0:c0:76:
         40:5a:b4:f4:68:eb:7a:1a:40:76:93:21:82:ed:d7:c7:c8:89:
         55:e8:b2:d7:12:a4:66:4a:f3:de:dd:2f:73:a1:b7:00:8f:21:
         40:13:cd:1f:ef:dd:20:af:b6:c1:59:3a:93:c3:2a:b2:e0:db:
         41:fa:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:51 2026 by rpki-client