Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33362e302f32322d3232203d3e203237383932.roa
File:                     3139302e3137302e33362e302f32322d3232203d3e203237383932.roa (raw, json)
Hash identifier:          I2uUWNlMqdqPslzZQ1PrwQ5denWdrG35me0X3Wwklzw=
Subject key identifier:   2B:19:56:B3:B1:E0:D2:4E:5E:6A:8C:11:4A:2D:23:2B:66:37:85:4F
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       54402D2370B5685AFA80A382ADDF615EC307E185
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33362e302f32322d3232203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:00 +0000
ROA not before:           Sun 12 Jul 2026 21:10:00 +0000
ROA not after:            Sun 11 Jul 2027 21:15:00 +0000
asID:                     27892
IP address blocks:        190.170.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:40:2d:23:70:b5:68:5a:fa:80:a3:82:ad:df:61:5e:c3:07:e1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:00 2026 GMT
            Not After : Jul 11 21:15:00 2027 GMT
        Subject: CN=2B1956B3B1E0D24E5E6A8C114A2D232B6637854F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:4b:83:b7:74:a6:25:8e:d3:4d:e6:ee:fe:
                    f6:33:1c:5c:cd:2e:3b:a0:d6:cd:b1:84:66:cf:06:
                    d6:19:3c:4a:20:95:4e:5e:f1:d5:06:3e:11:61:7e:
                    67:8c:f1:3f:89:c5:50:df:0f:20:cf:f0:7c:36:ca:
                    d3:14:5d:a4:c9:0c:45:ad:ab:e1:8a:bf:13:d2:23:
                    38:47:88:0d:8e:ed:eb:bd:7f:ce:1a:52:39:51:c7:
                    3a:1e:47:b7:91:09:7d:12:47:bf:e7:01:72:1c:b9:
                    ea:18:57:0b:f5:16:3b:2b:1b:d9:e1:a9:55:7a:e5:
                    fd:c4:78:1f:b4:f9:3e:98:23:65:7e:bc:4f:b0:fd:
                    0b:03:ba:3b:3a:d9:13:40:9d:29:fa:a8:fc:0f:e4:
                    bb:31:fd:82:e9:11:60:80:d2:02:84:51:0b:b1:6b:
                    12:02:e3:8a:c3:15:0e:e9:f7:2a:21:6c:53:4a:c3:
                    76:19:34:3b:b9:43:75:24:96:b6:6a:87:59:04:5e:
                    66:d5:14:3b:62:a2:fd:c0:60:d6:46:42:e7:4c:1b:
                    65:e3:0d:3d:7a:12:93:5c:91:de:77:c8:c0:b6:c8:
                    94:84:9e:88:31:60:d1:7e:15:62:e3:35:aa:a8:fd:
                    f2:1e:e2:f7:77:fc:56:70:93:44:9e:5b:16:e2:4d:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:19:56:B3:B1:E0:D2:4E:5E:6A:8C:11:4A:2D:23:2B:66:37:85:4F
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33362e302f32322d3232203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:3e:c0:4f:28:86:b9:23:f6:6e:82:8f:b0:15:dd:ea:34:31:
         9a:ea:7b:d2:f9:27:0d:14:c3:9c:19:ae:32:8c:5e:e3:54:ac:
         72:35:8b:ed:47:03:7a:a6:3c:4f:cd:e1:40:e5:f9:92:25:75:
         9b:3e:4f:8d:1a:27:51:8e:07:59:2e:a7:61:07:8c:a1:f9:0e:
         e1:cb:78:22:bc:57:e8:ee:94:76:77:22:b4:a1:6d:f5:ff:e5:
         d7:fc:91:fc:29:ba:c3:3f:42:33:2f:07:57:2a:60:df:d8:94:
         c5:43:c9:4f:d8:48:f9:28:62:53:a3:63:a9:eb:22:87:e9:71:
         7c:8c:f3:92:fc:78:aa:ed:57:96:ac:01:9a:f9:41:7a:6a:88:
         e9:e4:91:17:3e:6e:e4:8c:b1:6e:21:3a:34:e8:ab:65:af:98:
         33:62:c6:62:42:46:f6:93:d4:d6:84:64:1d:0c:5f:57:d6:c2:
         78:05:67:ed:29:02:dc:88:30:5d:6d:5b:63:0e:aa:25:5a:25:
         01:e6:1b:92:3f:bf:d3:d6:22:53:ea:84:8b:8b:32:53:66:2a:
         cf:dc:77:b2:0f:10:92:b6:be:e2:9c:4b:b8:46:38:15:61:16:
         a7:1c:76:a2:58:a1:86:25:c6:cd:59:03:30:11:40:8c:36:69:
         7e:27:18:b7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVEAtI3C1aFr6gKOCrd9hXsMH4YUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhEQkNDNUNFMTQwMTYwQjE4NUJGMTdGNDExNDM0N0Uy
QzgyQjI3NTAeFw0yNjA3MTIyMTEwMDBaFw0yNzA3MTEyMTE1MDBaMDMxMTAvBgNV
BAMTKDJCMTk1NkIzQjFFMEQyNEU1RTZBOEMxMTRBMkQyMzJCNjYzNzg1NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqCkuDt3SmJY7TTebu/vYzHFzN
Ljug1s2xhGbPBtYZPEoglU5e8dUGPhFhfmeM8T+JxVDfDyDP8Hw2ytMUXaTJDEWt
q+GKvxPSIzhHiA2O7eu9f84aUjlRxzoeR7eRCX0SR7/nAXIcueoYVwv1FjsrG9nh
qVV65f3EeB+0+T6YI2V+vE+w/QsDujs62RNAnSn6qPwP5Lsx/YLpEWCA0gKEUQux
axIC44rDFQ7p9yohbFNKw3YZNDu5Q3UklrZqh1kEXmbVFDtiov3AYNZGQudMG2Xj
DT16EpNckd53yMC2yJSEnogxYNF+FWLjNaqo/fIe4vd3/FZwk0SeWxbiTeFvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUKxlWs7Hg0k5eaowRSi0jK2Y3hU8wHwYDVR0j
BBgwFoAUaNvMXOFAFgsYW/F/QRQ0fiyCsnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDZGNjhDMEM4NTYzMzM2RDFDMDJDOTU4OTQ1NTgwNjBB
OTEyRUVBNUI4MkI3N0ZEQUMxNjNGQTgzMEJDRTIwLzAvNjhEQkNDNUNFMTQwMTYw
QjE4NUJGMTdGNDExNDM0N0UyQzgyQjI3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OERCQ0M1Q0UxNDAxNjBCMTg1
QkYxN0Y0MTE0MzQ3RTJDODJCMjc1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA2RjY4QzBDODU2MzMzNkQxQzAyQzk1ODk0NTU4MDYwQTkxMkVFQTVC
ODJCNzdGREFDMTYzRkE4MzBCQ0UyMC8wLzMxMzkzMDJlMzEzNzMwMmUzMzM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr6qJDAN
BgkqhkiG9w0BAQsFAAOCAQEAMz7ATyiGuSP2boKPsBXd6jQxmup70vknDRTDnBmu
Moxe41SscjWL7UcDeqY8T83hQOX5kiV1mz5PjRonUY4HWS6nYQeMofkO4ct4IrxX
6O6UdncitKFt9f/l1/yR/Cm6wz9CMy8HVypg39iUxUPJT9hI+ShiU6Njqesih+lx
fIzzkvx4qu1XlqwBmvlBemqI6eSRFz5u5IyxbiE6NOirZa+YM2LGYkJG9pPU1oRk
HQxfV9bCeAVn7SkC3IgwXW1bYw6qJVolAeYbkj+/09YiU+qEi4syU2Yqz9x3sg8Q
kra+4pxLuEY4FWEWpxx2olihhiXGzVkDMBFAjDZpficYtw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:17 2026 by rpki-client