Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32322d3232203d3e203237383932.roa
File:                     3139302e3137302e33322e302f32322d3232203d3e203237383932.roa (raw, json)
Hash identifier:          UEyAl92zMohxsihbTYDhz8OV1pBbnl6afqJz7+PJyKk=
Subject key identifier:   A9:6B:28:04:02:D4:E7:8E:6D:10:8C:98:AF:2B:CA:E5:40:D6:B5:F3
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       763120AEA2F7BC4699560D9DFA03E49CE422BAA5
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32322d3232203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:00 +0000
ROA not before:           Sun 12 Jul 2026 21:10:00 +0000
ROA not after:            Sun 11 Jul 2027 21:15:00 +0000
asID:                     27892
IP address blocks:        190.170.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:31:20:ae:a2:f7:bc:46:99:56:0d:9d:fa:03:e4:9c:e4:22:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:00 2026 GMT
            Not After : Jul 11 21:15:00 2027 GMT
        Subject: CN=A96B280402D4E78E6D108C98AF2BCAE540D6B5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:b6:54:3f:e8:8b:ed:12:5d:af:6f:fe:f0:
                    60:05:4c:56:a2:b8:96:b5:87:22:9f:35:7a:8a:7c:
                    17:83:03:de:4c:3a:95:96:09:c9:74:07:17:60:5c:
                    83:99:ce:1e:7d:75:af:87:31:3f:aa:b5:6b:b9:a3:
                    d8:90:49:2c:0d:b8:ae:52:20:f8:07:30:dc:33:52:
                    18:4f:92:15:59:48:83:e8:42:cc:41:03:18:a1:cb:
                    08:17:de:e1:57:c9:fb:72:e7:fb:c1:d7:d3:6b:85:
                    7d:7f:32:96:bc:ee:5f:12:c6:d7:7a:56:8f:ce:21:
                    e8:f2:1e:60:d5:d3:09:8c:41:41:29:49:19:da:72:
                    be:84:f3:9c:00:b8:ec:f5:8d:97:a0:91:5a:9b:ad:
                    a7:d1:fc:a0:8b:58:9f:33:bf:b8:64:bc:5d:d7:3b:
                    1f:23:cc:24:ea:d1:70:4f:b0:3a:66:58:a2:08:12:
                    43:f8:8c:82:04:8a:49:40:3b:77:b3:38:17:39:38:
                    a8:70:bb:a6:40:7f:00:45:6f:ad:de:45:79:0d:de:
                    32:77:37:6e:5f:98:26:e3:67:dd:b9:70:bd:5c:c8:
                    d6:b5:b8:d6:69:4b:cd:34:e9:77:13:78:62:1f:8b:
                    5b:c9:3b:a9:28:1f:c9:9d:60:c0:90:be:50:8b:29:
                    27:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:28:04:02:D4:E7:8E:6D:10:8C:98:AF:2B:CA:E5:40:D6:B5:F3
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32322d3232203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:35:be:a5:2b:f3:2e:2b:52:c5:98:86:dd:4c:c2:0d:e6:
         c9:85:16:e0:62:9c:5c:3b:2f:1d:bd:9f:a7:37:78:f5:e3:45:
         8c:fe:84:bc:e2:65:29:e2:03:9a:ff:f1:a8:c6:bd:56:27:8c:
         c0:a2:f0:ac:ef:71:7d:8b:8d:b8:49:f1:10:ff:13:64:69:40:
         c7:e4:36:2c:9c:cf:3f:cb:87:41:10:b6:55:b8:91:07:6b:55:
         84:50:ef:9f:58:56:43:a3:0d:1c:1d:89:77:d5:b3:b0:a5:80:
         57:3a:d5:85:0a:b0:df:f9:27:db:9b:a9:e6:87:8a:a9:9f:3a:
         67:92:64:22:0d:ed:ae:aa:80:36:02:ac:86:87:fd:85:34:b9:
         59:46:cc:9e:25:81:4e:95:0f:2c:eb:ec:44:0e:51:50:4b:95:
         ec:d6:17:56:a9:21:c3:05:56:8c:f0:8f:71:44:1f:23:1b:aa:
         e5:94:d6:f7:8e:81:bc:57:9f:fb:80:78:e2:6b:c1:39:03:58:
         a6:f4:e2:c7:f7:c8:ca:14:0b:6c:85:31:34:11:03:d4:21:e6:
         e2:f2:2b:ab:cc:d7:ea:94:92:e8:1e:85:03:9d:a6:e6:4a:5f:
         4e:0a:77:7c:1b:c0:51:92:64:a1:f9:9c:35:3e:ae:93:ae:fa:
         1f:52:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:52 2026 by rpki-client