Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa
File:                     3139302e3138352e302e302f31382d3138203d3e20323635383235.roa (raw, json)
Hash identifier:          um44i+VzxrfK3RnwpzrOe4H2oTXGpWjpIFN0C0v7v20=
Subject key identifier:   42:00:B6:D9:BC:F6:2E:A4:09:4C:9C:34:33:23:6F:B9:AE:0B:B2:A4
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       0DE88C2D682AC31975DFD1D0F5605458BB9885CB
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa
Signing time:             Fri 08 Aug 2025 01:10:00 +0000
ROA not before:           Fri 08 Aug 2025 01:05:00 +0000
ROA not after:            Fri 07 Aug 2026 01:10:00 +0000
asID:                     265825
IP address blocks:        190.185.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 05:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e8:8c:2d:68:2a:c3:19:75:df:d1:d0:f5:60:54:58:bb:98:85:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Aug  8 01:05:00 2025 GMT
            Not After : Aug  7 01:10:00 2026 GMT
        Subject: CN=4200B6D9BCF62EA4094C9C3433236FB9AE0BB2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:2c:3b:95:89:6d:4e:f3:9f:c1:52:c7:eb:
                    c4:85:79:9e:1b:f3:ee:ff:8a:24:ac:eb:24:bc:e1:
                    ce:34:01:e0:d4:4f:06:34:65:4f:3f:a8:7e:79:24:
                    e2:9f:56:82:4f:51:cd:d0:2a:ae:8c:86:97:92:e2:
                    8b:d2:6c:c0:e5:fd:7a:e0:46:f6:a4:9e:5e:cb:93:
                    a2:e3:ff:2c:5f:3f:8f:af:8f:60:0d:29:bc:3c:7f:
                    41:05:b0:a6:84:c2:6e:24:97:35:d5:4d:0b:e8:4c:
                    b5:ed:16:3b:81:f4:e1:7e:42:79:90:68:21:76:09:
                    3e:00:d9:58:a6:55:ca:ef:8e:3c:b2:4f:82:3e:26:
                    37:75:f4:ec:e7:1b:de:6e:16:b7:2a:20:d8:e3:66:
                    62:e7:81:bf:97:89:70:43:0a:ce:3a:ea:4e:1e:bc:
                    5e:d4:4b:98:4c:33:93:10:68:c1:ee:14:a1:8c:37:
                    c4:36:94:e7:c5:a1:5e:4e:c1:0f:fb:97:f3:d4:61:
                    7c:e1:10:3f:9d:cd:f0:9d:d9:62:15:09:74:76:16:
                    5a:0b:97:46:58:59:af:64:78:d5:18:55:75:6c:c9:
                    f6:fb:fa:c9:33:5e:a5:26:78:95:be:de:a0:58:da:
                    6c:d6:2f:bd:99:b5:90:38:df:6a:b2:b5:39:f6:02:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:00:B6:D9:BC:F6:2E:A4:09:4C:9C:34:33:23:6F:B9:AE:0B:B2:A4
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:35:a0:e2:b4:9f:cf:4c:13:ed:35:ed:4a:b7:d1:f2:56:
         e4:56:e4:4e:fc:04:96:85:bb:4e:40:f2:5c:3e:81:7b:71:50:
         80:d0:85:15:74:ed:35:48:7b:97:6b:76:e2:15:d7:eb:99:6b:
         32:b8:b4:f0:c9:ba:d0:5c:9e:90:34:f2:0d:fb:8f:89:c4:c4:
         41:13:a2:9e:84:ba:da:f5:1d:0d:c0:52:a8:c6:8a:54:46:52:
         a7:59:33:68:f6:1f:f9:69:25:67:05:6d:fc:c7:39:be:43:e4:
         d1:b0:68:ee:6e:73:d4:cb:c3:33:27:ae:c3:f2:5e:d1:fd:19:
         1d:ed:e7:27:4b:ad:1f:3f:77:0e:14:7f:fd:90:88:55:d9:81:
         c4:87:f4:73:5f:01:35:f9:bc:c6:82:25:1b:14:af:ad:f1:c1:
         95:8b:36:82:87:09:54:6b:d5:87:83:0a:41:51:8b:30:29:86:
         d8:22:ad:c8:29:3a:a4:87:1a:af:8c:29:df:ba:a4:fc:ff:48:
         48:a7:8d:99:07:fd:04:35:67:98:4f:74:8a:b4:4e:25:47:9a:
         99:c2:04:a7:dc:58:00:7d:67:46:00:c4:8e:cc:18:55:e2:31:
         75:20:3f:4a:ee:71:35:82:60:6a:f6:8a:11:6c:8d:80:74:34:
         4f:2e:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:03:25 2025 by rpki-client