Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e382e302f32322d3232203d3e203237383932.roa
File:                     3139302e3137302e382e302f32322d3232203d3e203237383932.roa (raw, json)
Hash identifier:          RPT8AWuj1Qj4pFLW2VsprDnEo2xxhJErZ6B3+O89Swg=
Subject key identifier:   35:40:49:05:EB:E0:B9:B3:11:34:DC:DA:48:70:EE:26:75:36:E9:35
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       604222A16FBC0896145E2839C053E821A6B5F593
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e382e302f32322d3232203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:04 +0000
ROA not before:           Sun 12 Jul 2026 21:10:04 +0000
ROA not after:            Sun 11 Jul 2027 21:15:04 +0000
asID:                     27892
IP address blocks:        190.170.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:42:22:a1:6f:bc:08:96:14:5e:28:39:c0:53:e8:21:a6:b5:f5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:04 2026 GMT
            Not After : Jul 11 21:15:04 2027 GMT
        Subject: CN=35404905EBE0B9B31134DCDA4870EE267536E935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:81:4e:69:cb:8a:fa:0c:83:ea:6e:71:3a:
                    a8:08:51:ca:64:1d:67:19:cf:b8:6c:14:3d:e0:a1:
                    51:3f:cb:1d:ef:37:72:32:24:ab:d8:f3:9c:60:b7:
                    a7:de:6d:ed:8f:ff:73:eb:3a:59:c7:ae:b8:1e:5b:
                    7f:0f:ae:f9:5b:e9:b6:dc:b0:64:e8:94:ea:bb:f4:
                    c6:9c:aa:28:b7:03:80:30:6a:6d:14:e7:2a:0b:03:
                    4f:49:b6:2e:0d:d4:cc:b3:d8:83:7f:44:bb:98:0c:
                    7f:91:8f:0b:85:ca:c2:ba:51:7a:d6:86:4a:50:a0:
                    9c:87:f7:23:67:91:c6:51:f7:8e:c2:2d:d7:7d:ff:
                    c8:fe:bd:b9:ef:2b:93:3b:3d:b3:3b:36:5b:20:8f:
                    e4:a3:97:00:43:b2:64:de:63:fa:4a:e4:91:5f:8d:
                    a0:31:a2:1b:6b:88:9a:a1:36:1e:40:3c:4d:8e:17:
                    af:4a:d5:54:f0:d2:d8:f8:f8:35:29:95:9c:34:fc:
                    2f:f7:81:35:f4:84:62:cd:7c:de:e1:0a:dd:6d:5f:
                    59:23:3a:9b:92:f0:a3:f7:e1:10:62:73:b7:4f:e8:
                    63:08:57:c5:2e:3a:2c:5f:8a:66:ae:96:f2:ba:c7:
                    25:69:a4:84:d2:cd:f2:33:d3:15:65:ea:1e:d5:2a:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:40:49:05:EB:E0:B9:B3:11:34:DC:DA:48:70:EE:26:75:36:E9:35
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e382e302f32322d3232203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:28:93:88:49:08:22:5f:5e:ad:e8:98:23:58:36:fe:9f:
         22:d9:d1:0e:a1:21:0c:a8:de:2f:d3:7a:42:24:19:c7:6f:3a:
         2a:48:51:b9:68:5f:48:20:d2:24:79:03:a2:aa:b7:de:9c:83:
         32:f5:76:c4:c6:ad:5f:86:f2:15:17:27:22:14:e1:3e:80:ee:
         88:6e:4a:8c:b8:99:a6:28:74:78:61:5e:f4:53:66:55:2f:93:
         0f:1e:0b:be:16:5b:bb:17:69:e4:99:f7:46:94:6e:c9:22:bd:
         86:86:e1:0d:94:82:5b:1d:36:e2:01:eb:50:b5:45:fa:5f:3d:
         e4:75:0a:e6:a6:f5:31:e1:d1:d2:47:c7:31:80:ef:9e:84:2a:
         a7:08:08:0e:d7:43:e9:f2:1e:50:65:bc:f0:d1:b4:67:d2:9d:
         8c:03:fc:9e:f8:40:d2:e1:3b:3d:de:6e:72:de:78:76:39:df:
         e1:86:ba:de:6c:6e:c8:b1:bf:01:5f:46:03:50:de:bc:e4:a7:
         06:5c:4a:b3:24:9c:a9:f7:35:d4:dd:18:da:76:31:80:84:65:
         b8:ff:d8:2d:17:94:b0:f6:42:a5:f5:66:75:c0:b6:fc:33:46:
         4c:e4:a7:f2:5a:57:90:bc:54:51:1a:70:99:1a:32:c4:6a:40:
         6f:bb:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:17 2026 by rpki-client