Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32322d3232203d3e203237383932.roa
File:                     3139302e3137302e35362e302f32322d3232203d3e203237383932.roa (raw, json)
Hash identifier:          friZTBH2NTv/2PSF/EL13pyef2UPJ9Ol/F0lpn2m++4=
Subject key identifier:   C8:80:A9:E7:69:F3:B8:AC:08:30:63:E0:AE:B0:F9:B7:92:44:CB:B4
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       0AC05A9172FB318F0C17AF2679AC60E2A977C931
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32322d3232203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:06 +0000
ROA not before:           Sun 12 Jul 2026 21:10:06 +0000
ROA not after:            Sun 11 Jul 2027 21:15:06 +0000
asID:                     27892
IP address blocks:        190.170.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c0:5a:91:72:fb:31:8f:0c:17:af:26:79:ac:60:e2:a9:77:c9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:06 2026 GMT
            Not After : Jul 11 21:15:06 2027 GMT
        Subject: CN=C880A9E769F3B8AC083063E0AEB0F9B79244CBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7f:12:a1:6a:48:b0:29:c2:a3:47:34:d2:a5:
                    22:73:b3:3d:1f:ed:61:7c:b5:3d:48:c3:bb:8a:f7:
                    b5:0e:42:dc:9a:b0:89:92:76:4f:03:5c:ea:33:7f:
                    9c:e9:f8:86:be:8b:63:3c:a7:bc:01:27:5e:1d:1f:
                    14:8a:1f:b8:4b:55:4a:9a:d1:8b:c4:db:48:51:5c:
                    ad:37:da:81:c3:ef:4a:ac:36:d5:90:4d:70:fe:fd:
                    a4:dc:29:02:af:8a:94:bb:09:5e:60:ff:e2:3f:c3:
                    60:1a:d5:27:c9:c4:20:5b:ee:49:a3:18:c2:28:eb:
                    31:92:74:9b:62:30:40:6f:36:9c:7d:79:d6:2f:11:
                    8b:dc:92:99:54:7a:83:75:b0:46:32:49:98:51:84:
                    5c:5c:b3:a4:27:eb:51:bf:17:78:4f:a4:97:08:5f:
                    c5:27:31:df:20:f1:88:70:85:80:5d:f8:97:f9:68:
                    5a:a7:f2:bf:9a:6a:bd:71:17:fa:6a:1d:ad:ec:d9:
                    bf:ec:ed:fb:af:ce:57:36:65:24:ee:5a:8d:cc:90:
                    4f:90:4e:a6:b1:e2:17:ae:e2:b8:5a:65:c3:7c:54:
                    d5:5e:5d:3e:cc:6b:c0:65:29:15:61:4f:26:43:ff:
                    85:47:09:b3:da:ae:27:77:87:4b:4b:f4:d8:f7:7e:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:80:A9:E7:69:F3:B8:AC:08:30:63:E0:AE:B0:F9:B7:92:44:CB:B4
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32322d3232203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:69:d0:da:a6:f2:86:7f:24:1c:53:25:59:67:18:a4:cb:9a:
         52:2c:0f:27:94:71:0c:0a:c8:40:23:00:39:2d:e1:6f:e6:b4:
         49:87:e4:e1:7c:08:fe:5b:45:63:05:87:11:bb:76:43:da:58:
         4c:a1:54:12:83:3e:5f:46:d3:ca:cc:c5:fc:90:97:6e:75:4d:
         14:fd:35:18:b1:ac:d3:6c:23:ee:af:c4:6b:65:90:83:96:7d:
         84:9b:f8:08:83:35:69:17:bd:47:54:df:26:ac:b6:f6:ea:60:
         06:3b:ae:1b:eb:61:d5:31:9f:bd:01:f5:d3:c8:c3:40:e0:cf:
         31:34:c0:b2:1b:98:7d:ea:35:d9:2f:73:52:45:18:b8:1c:9e:
         07:ed:93:17:2d:59:d2:93:fd:e1:1e:f4:c0:d5:11:45:11:4b:
         63:92:72:06:67:10:f0:de:d5:b5:45:5d:1f:61:10:6f:bb:05:
         88:ac:ef:cf:78:68:da:05:48:35:a9:47:2c:15:2c:05:42:a9:
         a3:5f:f0:0c:51:2a:a9:0c:03:ef:5f:88:b4:0f:e7:8d:9a:95:
         b2:19:b8:75:57:d7:29:03:6a:bd:f9:fb:03:f9:43:29:ba:3f:
         7b:fa:12:ee:bd:de:a7:33:09:42:41:53:55:17:ca:6c:df:ec:
         5d:77:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:53 2026 by rpki-client