Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32342d3234203d3e20323732313032.roa
File:                     3139302e3137302e35362e302f32342d3234203d3e20323732313032.roa (raw, json)
Hash identifier:          5NNehLiFPcXstzbxDZnH/9yMrNcWh2x/lMj/IMUGmrs=
Subject key identifier:   23:15:B2:C3:60:A0:CB:45:85:D7:5D:37:D5:A4:1C:04:84:32:8D:51
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       4DF7EC18F2DAE9954635A45D5FA8476F7B719204
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32342d3234203d3e20323732313032.roa
Signing time:             Sun 26 Jul 2026 23:05:00 +0000
ROA not before:           Sun 26 Jul 2026 23:00:00 +0000
ROA not after:            Sun 25 Jul 2027 23:05:00 +0000
asID:                     272102
IP address blocks:        190.170.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 06:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f7:ec:18:f2:da:e9:95:46:35:a4:5d:5f:a8:47:6f:7b:71:92:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 26 23:00:00 2026 GMT
            Not After : Jul 25 23:05:00 2027 GMT
        Subject: CN=2315B2C360A0CB4585D75D37D5A41C0484328D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:f2:3f:42:c0:75:ee:d3:fe:1e:64:d7:f6:
                    86:0e:82:4c:d6:8b:79:47:e8:d8:87:01:a9:1d:05:
                    d8:0f:65:2b:d1:34:78:84:01:2f:60:72:00:3f:4b:
                    1a:65:ad:14:fe:35:18:41:3a:0f:15:cf:20:68:1f:
                    1c:d2:de:61:a6:f0:e9:5d:9b:9b:6e:06:d4:c2:d6:
                    1b:f9:54:e3:16:ca:40:21:c9:f8:47:0e:f2:f1:41:
                    81:5f:eb:87:db:41:8c:b5:6b:62:df:24:17:06:b1:
                    9e:2f:73:4c:03:f3:c1:23:18:6b:2e:d9:f6:91:d2:
                    4c:0c:77:40:7f:2f:1c:d9:8a:92:53:b8:10:3e:19:
                    c7:56:4c:1e:88:77:07:29:75:22:74:42:c9:72:c5:
                    9b:91:b7:ee:6a:78:0a:7e:e9:24:fc:74:be:7c:ed:
                    cb:84:1c:cf:6d:b4:c6:fc:d2:85:60:97:90:05:22:
                    8d:59:e2:70:b7:43:e4:b3:bf:02:8a:6b:3a:23:1b:
                    45:c4:b3:3b:08:25:f0:41:9e:1f:7c:ba:96:b9:d1:
                    14:ca:a5:a9:8a:bf:09:83:59:4c:ad:eb:f4:1d:71:
                    ce:c2:78:91:09:aa:f9:e4:cd:51:6b:a1:2a:d2:a2:
                    b3:cd:29:a0:89:db:0d:1a:b5:cf:4a:33:de:17:80:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:15:B2:C3:60:A0:CB:45:85:D7:5D:37:D5:A4:1C:04:84:32:8D:51
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e35362e302f32342d3234203d3e20323732313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:75:58:5f:cb:c6:d3:88:05:b8:e0:f1:b2:ff:8d:6e:3e:
         96:57:e5:ef:59:8f:c6:fc:ad:46:09:7d:66:e1:48:83:92:fd:
         93:0f:ec:77:e6:00:58:3e:8a:8c:f7:a2:a6:ff:2f:6a:44:e7:
         9f:92:13:67:1f:31:fa:c5:c1:80:9c:f5:43:57:f3:17:2d:70:
         5d:9c:6a:a3:17:e6:2a:e9:86:3e:13:a4:c2:76:81:99:5e:36:
         07:af:b9:34:1f:86:93:c6:80:cd:4b:90:c5:fb:64:13:7e:1e:
         12:49:c5:2e:bb:dc:a8:b8:98:99:33:ec:a8:92:6d:3a:9d:ab:
         7e:d0:16:a8:d8:e1:74:df:82:dd:f0:8a:4d:52:fa:88:27:7f:
         9c:e7:27:bf:6f:f0:ce:b8:f4:74:ea:ce:fc:4d:bf:d5:8e:5d:
         5f:7e:b9:c1:bc:2d:dd:32:3e:d6:1c:b6:69:3d:8a:f5:d6:e0:
         e7:51:78:2c:1f:a1:98:70:90:74:78:b5:ad:03:9f:36:43:bf:
         15:62:1e:1d:bf:a0:e6:35:60:82:7d:2f:9d:fc:c8:1c:48:77:
         8d:f3:a6:10:b6:40:08:66:d2:77:3a:c9:d1:42:55:27:bb:6f:
         d6:ec:37:03:93:f1:d5:74:64:06:66:c1:20:b1:cc:12:c1:a6:
         5d:9f:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:58:41 2026 by rpki-client