Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32332d3233203d3e20323732313032.roa
File:                     3139302e3137302e35362e302f32332d3233203d3e20323732313032.roa (raw, json)
Hash identifier:          EWAAkncpgksfWMKmXEuFskPVRyt8OGD6rcFyG2+EvXU=
Subject key identifier:   3A:0F:45:09:55:C1:CC:C7:1A:AD:81:80:35:0E:6E:9A:9E:7E:67:43
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       156AD13F67472AB485194C50B95B1B8436E6FBCD
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32332d3233203d3e20323732313032.roa
Signing time:             Sun 26 Jul 2026 23:05:02 +0000
ROA not before:           Sun 26 Jul 2026 23:00:02 +0000
ROA not after:            Sun 25 Jul 2027 23:05:02 +0000
asID:                     272102
IP address blocks:        190.170.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 02:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6a:d1:3f:67:47:2a:b4:85:19:4c:50:b9:5b:1b:84:36:e6:fb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 26 23:00:02 2026 GMT
            Not After : Jul 25 23:05:02 2027 GMT
        Subject: CN=3A0F450955C1CCC71AAD8180350E6E9A9E7E6743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:bb:33:97:63:60:5c:c9:07:cf:bc:bc:0d:
                    ad:65:3e:91:31:8c:ea:3d:2e:ed:db:fd:e9:b4:14:
                    a4:4e:71:d8:8c:aa:81:c3:13:f5:b9:17:01:f9:f3:
                    8b:99:4b:c4:98:b4:33:89:86:75:27:13:4e:46:c1:
                    ea:18:9b:68:dd:67:28:9b:e3:19:68:bb:97:69:65:
                    e2:3e:19:ab:61:26:5a:e6:55:f1:1c:ca:1c:c3:1c:
                    12:0f:f7:44:b1:4d:a6:f5:52:b4:28:08:5c:41:fa:
                    6e:1f:6a:50:2a:9f:3d:d1:0b:bc:14:17:e6:cb:c7:
                    fc:71:50:ae:98:6c:e6:7e:83:e4:32:33:8c:4b:ad:
                    7a:e9:c8:59:27:3e:40:b7:64:01:73:96:da:b0:9c:
                    a5:ad:f6:99:f9:cb:82:0f:ef:63:6f:49:4b:60:d1:
                    2b:6c:c5:0d:c0:79:79:4c:83:97:ba:fb:75:23:d7:
                    7f:f1:09:c2:5f:51:f7:f3:45:d3:49:76:65:e9:e3:
                    72:1f:38:cf:09:1b:38:28:0a:30:a1:e1:a0:17:d8:
                    bb:cd:82:c1:63:2d:13:86:5a:bc:73:2a:c5:06:55:
                    b7:1c:97:d9:5f:9a:36:bf:b8:c2:19:ca:28:b6:ce:
                    4f:80:93:06:86:06:40:5f:49:9e:14:09:56:f5:e8:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0F:45:09:55:C1:CC:C7:1A:AD:81:80:35:0E:6E:9A:9E:7E:67:43
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32332d3233203d3e20323732313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:6b:02:8d:60:99:6b:85:3c:0d:fb:dd:1f:77:ae:0b:04:
         10:62:35:fa:86:ce:63:0e:98:17:e8:e4:26:0a:3d:8b:3f:a3:
         90:89:7a:01:a1:99:80:a1:41:39:b9:1b:ee:e3:15:2d:48:1e:
         05:1d:e5:68:d5:dd:24:9b:0e:72:0a:37:4b:c3:51:7a:26:9b:
         4d:d8:5c:94:21:3d:98:d1:ad:65:99:f1:97:ad:61:d6:bd:b2:
         5a:a7:6c:ea:00:b9:b0:b0:53:0c:57:d0:19:ae:f9:7f:31:e3:
         69:ce:d0:83:1a:a7:28:57:22:60:8b:fa:13:64:63:1e:df:9f:
         c1:3d:da:d4:d9:a0:21:58:65:64:c3:ca:82:0a:89:18:e9:60:
         4f:3c:48:4f:a4:99:aa:03:48:1c:aa:46:2a:52:c0:93:ed:3e:
         b8:4b:ef:34:ec:e0:33:4b:6b:6b:e2:69:89:8d:3f:b5:ec:1a:
         b0:93:83:0f:5a:7a:19:0b:41:2e:ab:db:a1:95:e0:9d:7e:88:
         c5:90:9d:90:de:19:54:7b:a5:b9:e2:4e:b3:02:16:7e:1b:a9:
         f8:99:97:83:63:61:9a:f0:c4:e7:a4:24:76:e9:22:33:72:86:
         c7:5c:70:12:d0:c2:f5:cd:81:bb:06:cb:40:3a:bc:4c:ab:49:
         99:3e:ed:bf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFWrRP2dHKrSFGUxQuVsbhDbm+80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhEQkNDNUNFMTQwMTYwQjE4NUJGMTdGNDExNDM0N0Uy
QzgyQjI3NTAeFw0yNjA3MjYyMzAwMDJaFw0yNzA3MjUyMzA1MDJaMDMxMTAvBgNV
BAMTKDNBMEY0NTA5NTVDMUNDQzcxQUFEODE4MDM1MEU2RTlBOUU3RTY3NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIf7szl2NgXMkHz7y8Da1lPpEx
jOo9Lu3b/em0FKROcdiMqoHDE/W5FwH584uZS8SYtDOJhnUnE05GweoYm2jdZyib
4xlou5dpZeI+GathJlrmVfEcyhzDHBIP90SxTab1UrQoCFxB+m4falAqnz3RC7wU
F+bLx/xxUK6YbOZ+g+QyM4xLrXrpyFknPkC3ZAFzltqwnKWt9pn5y4IP72NvSUtg
0StsxQ3AeXlMg5e6+3Uj13/xCcJfUffzRdNJdmXp43IfOM8JGzgoCjCh4aAX2LvN
gsFjLROGWrxzKsUGVbccl9lfmja/uMIZyii2zk+AkwaGBkBfSZ4UCVb16IipAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOg9FCVXBzMcarYGANQ5ump5+Z0MwHwYDVR0j
BBgwFoAUaNvMXOFAFgsYW/F/QRQ0fiyCsnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDZGNjhDMEM4NTYzMzM2RDFDMDJDOTU4OTQ1NTgwNjBB
OTEyRUVBNUI4MkI3N0ZEQUMxNjNGQTgzMEJDRTIwLzAvNjhEQkNDNUNFMTQwMTYw
QjE4NUJGMTdGNDExNDM0N0UyQzgyQjI3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OERCQ0M1Q0UxNDAxNjBCMTg1
QkYxN0Y0MTE0MzQ3RTJDODJCMjc1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA2RjY4QzBDODU2MzMzNkQxQzAyQzk1ODk0NTU4MDYwQTkxMkVFQTVC
ODJCNzdGREFDMTYzRkE4MzBCQ0UyMC8wLzMxMzkzMDJlMzEzNzMwMmUzNTM2MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMyMzEzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvqo4
MA0GCSqGSIb3DQEBCwUAA4IBAQBEHmsCjWCZa4U8DfvdH3euCwQQYjX6hs5jDpgX
6OQmCj2LP6OQiXoBoZmAoUE5uRvu4xUtSB4FHeVo1d0kmw5yCjdLw1F6JptN2FyU
IT2Y0a1lmfGXrWHWvbJap2zqALmwsFMMV9AZrvl/MeNpztCDGqcoVyJgi/oTZGMe
35/BPdrU2aAhWGVkw8qCCokY6WBPPEhPpJmqA0gcqkYqUsCT7T64S+807OAzS2tr
4mmJjT+17Bqwk4MPWnoZC0Euq9uhleCdfojFkJ2Q3hlUe6W54k6zAhZ+G6n4mZeD
Y2Ga8MTnpCR26SIzcobHXHAS0ML1zYG7BstAOrxMq0mZPu2/
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:42:09 2026 by rpki-client