Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32312d3231203d3e203237383932.roa
File:                     3139302e3137302e33322e302f32312d3231203d3e203237383932.roa (raw, json)
Hash identifier:          jiAuJFYQ/C7m4j9HxfhdZfTEZp1hhOIymJAFZCwMMic=
Subject key identifier:   C8:B9:6B:30:45:8B:55:39:98:2C:FC:E2:C9:ED:9B:3F:A6:36:92:AD
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       34A596BFA1EE5DC5D46FBED66D1D21D34ED4744D
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32312d3231203d3e203237383932.roa
Signing time:             Sun 26 Jul 2026 23:05:01 +0000
ROA not before:           Sun 26 Jul 2026 23:00:01 +0000
ROA not after:            Sun 25 Jul 2027 23:05:01 +0000
asID:                     27892
IP address blocks:        190.170.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 02:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a5:96:bf:a1:ee:5d:c5:d4:6f:be:d6:6d:1d:21:d3:4e:d4:74:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 26 23:00:01 2026 GMT
            Not After : Jul 25 23:05:01 2027 GMT
        Subject: CN=C8B96B30458B5539982CFCE2C9ED9B3FA63692AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:d5:68:22:62:b6:e7:ea:7a:e4:c8:eb:c8:
                    ce:f1:c0:40:d9:97:28:26:66:6b:01:c9:ea:ed:93:
                    7e:90:f0:b1:d4:bb:7c:51:7f:fb:d1:f0:04:ea:47:
                    f0:d7:b5:96:cd:12:06:67:dc:09:97:b4:91:f6:af:
                    ee:8f:ce:f3:b6:d5:5d:0d:7c:d2:03:cd:0e:36:64:
                    b7:3d:52:3f:83:f7:32:53:c7:1d:b2:3f:ee:56:00:
                    44:21:4b:d4:2c:08:d0:77:59:4a:b9:80:f0:f8:ee:
                    fc:97:67:2a:75:ca:4d:cb:d8:da:46:85:41:dd:ee:
                    65:b1:4c:42:86:19:c1:7f:ea:b0:27:cf:11:9d:6b:
                    e2:fa:b2:8d:ea:c6:69:3c:6d:9c:a5:8e:d0:23:37:
                    51:10:75:21:fc:18:91:14:c6:1a:ad:68:23:d5:35:
                    92:7b:88:c7:2c:2e:58:b2:c1:61:30:66:2b:58:5a:
                    50:6c:fc:56:42:94:64:9d:84:2c:a9:5c:67:d3:30:
                    09:3b:3b:cd:1a:e3:b4:2d:44:04:67:d9:6b:e1:cb:
                    54:6a:43:9e:02:96:11:b7:6c:05:f2:21:c4:67:9e:
                    ef:ae:b2:d7:d9:37:1a:73:a8:80:50:39:3c:92:03:
                    5c:c8:06:29:3f:a1:4d:6c:3b:58:e4:f2:e1:15:e7:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:6B:30:45:8B:55:39:98:2C:FC:E2:C9:ED:9B:3F:A6:36:92:AD
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e33322e302f32312d3231203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:34:b9:70:14:46:8a:10:23:1b:5b:e7:27:3a:f4:d4:18:a3:
         9a:11:23:ab:57:de:b1:cd:1b:6b:53:c2:b7:74:82:df:98:cc:
         70:78:ed:23:f6:83:b8:23:ae:33:e2:b8:c9:4b:a6:bb:63:22:
         71:13:37:b8:cf:4d:51:24:d3:16:51:e6:84:82:c3:bd:1f:24:
         d0:3a:8a:c4:dc:d9:b0:bd:cd:67:c9:49:86:95:25:42:a5:87:
         34:9e:fd:62:0c:de:a7:91:eb:ce:07:d6:df:63:9d:1d:04:d1:
         47:40:2b:78:09:70:3d:22:28:44:05:5e:3f:da:2a:69:e1:c3:
         25:d1:28:76:bb:e2:f7:29:26:0f:07:51:31:f2:c2:5b:dd:ac:
         e6:b4:52:20:80:7a:24:8b:59:83:fa:35:d7:0b:43:e0:96:d8:
         a6:79:f8:29:33:1a:7e:38:9f:f2:ed:a6:51:6c:e5:2a:bf:44:
         25:06:2d:ce:ee:05:a8:d5:bc:44:b5:8e:56:6c:e1:de:38:cf:
         b1:ee:cc:b5:57:a8:c3:af:e9:08:9b:02:5d:4c:ee:83:3b:9a:
         6e:1b:88:75:0d:8c:f6:c9:39:95:77:3f:35:00:91:e4:b8:12:
         40:2e:19:3e:36:15:8c:b1:42:c8:66:8b:ba:fa:26:27:86:02:
         7a:f0:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:57 2026 by rpki-client