Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f31392d3230203d3e203237373235.roa
File:                     3139302e362e36342e302f31392d3230203d3e203237373235.roa (raw, json)
Hash identifier:          B9IZobwt0sdT0FF9Mf5pPvDr0Hz8sIJ9sVT7DpqhSUE=
Subject key identifier:   9E:D2:05:7C:C1:01:37:9D:D5:1A:A8:55:7E:19:D2:69:B4:B6:48:ED
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       3359B2E843C92D843DAA2D64279B77D6BDA51997
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f31392d3230203d3e203237373235.roa
Signing time:             Mon 25 May 2026 22:45:00 +0000
ROA not before:           Mon 25 May 2026 22:40:00 +0000
ROA not after:            Mon 24 May 2027 22:45:00 +0000
asID:                     27725
IP address blocks:        190.6.64.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:59:b2:e8:43:c9:2d:84:3d:aa:2d:64:27:9b:77:d6:bd:a5:19:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: May 25 22:40:00 2026 GMT
            Not After : May 24 22:45:00 2027 GMT
        Subject: CN=9ED2057CC101379DD51AA8557E19D269B4B648ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:0e:45:ba:54:a3:9b:14:8e:34:d5:6a:3e:
                    f9:c0:e4:bc:0a:a0:df:61:e6:89:ae:d9:0f:9c:81:
                    25:aa:ad:d9:67:86:e0:42:93:4d:51:85:1d:4f:6d:
                    11:c1:91:2c:c0:86:bd:94:d8:b1:1c:8e:f0:e3:f8:
                    0d:d0:fb:8c:55:a2:2c:cd:b6:80:d1:3a:56:2d:07:
                    80:1d:ba:fd:56:bc:5e:c9:31:02:d7:af:23:81:42:
                    41:67:7d:bf:6b:93:4f:6f:0e:09:54:02:6d:9a:d4:
                    be:ea:1f:63:f2:f3:36:3b:e8:c4:ea:d6:af:bb:0d:
                    1e:16:86:d9:1d:5c:72:8e:0e:23:03:b0:b0:b2:f1:
                    7c:19:c4:73:d7:16:15:8c:79:a7:98:94:a9:52:b0:
                    e1:8f:c3:f9:6b:08:7f:e7:f8:56:76:b9:37:63:73:
                    18:56:66:17:2b:69:de:07:82:79:29:3c:d3:a0:3e:
                    22:d5:e1:5f:4f:51:07:0f:e5:38:ba:e0:e9:4f:56:
                    26:d8:db:ca:31:d3:91:31:35:7b:b8:a1:fb:c9:a3:
                    d1:8b:5f:fd:8e:60:90:45:e1:47:59:86:08:32:a2:
                    88:bf:73:4e:a5:a2:47:51:ef:7f:0d:88:9f:b1:60:
                    db:41:c0:ba:7b:5f:88:46:a4:80:8f:ed:f4:56:e0:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D2:05:7C:C1:01:37:9D:D5:1A:A8:55:7E:19:D2:69:B4:B6:48:ED
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f31392d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:e7:6d:f3:16:b1:59:ab:13:7f:b9:62:f2:2e:f2:16:02:
         22:64:6e:3c:45:fd:61:e0:6e:76:d1:98:b9:b4:c6:cc:6c:39:
         05:3a:42:67:fe:02:55:a0:0a:87:8c:ac:9b:fe:fe:4e:22:d4:
         2f:94:8c:dd:8e:6e:5b:42:ac:f6:b7:a2:00:33:13:ea:34:89:
         8b:1f:f5:eb:25:27:cc:57:0c:5f:ee:4b:d6:57:f5:a7:01:67:
         8a:0c:1c:b9:8a:df:4d:6c:d4:d2:8e:51:02:c3:43:cc:1d:76:
         71:c3:ad:f4:ca:93:58:45:da:21:b3:ee:c2:c8:81:57:29:5d:
         48:bd:ab:a2:35:6d:fe:d8:fb:39:51:d4:d5:6a:92:79:06:ea:
         b8:4e:49:d8:bb:43:50:30:22:c1:91:6b:6d:4a:64:73:e7:60:
         84:58:34:2c:37:3b:f0:08:93:7f:48:79:08:e0:e6:93:9d:1d:
         c8:50:51:1d:2a:57:6a:62:ea:1d:32:90:65:15:20:96:5b:28:
         b2:b8:e8:df:68:87:3c:01:2a:dd:41:27:15:2a:6d:db:bd:d2:
         fc:10:09:48:54:ba:d2:01:5c:e1:62:46:49:80:a1:91:35:6a:
         7f:2d:bc:4c:fa:1b:8a:c4:81:bd:81:1c:6d:ad:ef:bc:9e:6e:
         c2:82:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:04:00 2026 by rpki-client