Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32322d3232203d3e20323639373832.roa
File:                     3139302e3137302e36302e302f32322d3232203d3e20323639373832.roa (raw, json)
Hash identifier:          5JC4IPb60HWJYJypmAmqOIj9zoprJmAxzBmDrI9ee3Q=
Subject key identifier:   FB:93:12:06:7C:88:2D:78:AD:ED:8C:EC:0E:A9:0C:CE:2B:EC:10:49
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       1A72E6836466A9377B3C426A5E2B7CB9C14CD54F
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32322d3232203d3e20323639373832.roa
Signing time:             Sun 26 Jul 2026 23:00:00 +0000
ROA not before:           Sun 26 Jul 2026 22:55:00 +0000
ROA not after:            Sun 25 Jul 2027 23:00:00 +0000
asID:                     269782
IP address blocks:        190.170.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 02:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:72:e6:83:64:66:a9:37:7b:3c:42:6a:5e:2b:7c:b9:c1:4c:d5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 26 22:55:00 2026 GMT
            Not After : Jul 25 23:00:00 2027 GMT
        Subject: CN=FB9312067C882D78ADED8CEC0EA90CCE2BEC1049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:52:7a:b3:0f:7b:4d:9f:d1:d8:55:6e:7c:
                    1e:03:6c:77:bc:46:3f:dc:20:55:4f:ac:44:60:75:
                    9e:27:76:4a:b4:66:69:62:d0:62:57:0b:ea:0c:2b:
                    46:79:13:42:54:66:ed:97:a1:96:e1:bb:4e:bf:2d:
                    06:c7:16:ef:68:d3:c6:ae:7a:0f:02:d4:df:72:1b:
                    f9:e5:50:6e:25:03:78:ef:b8:f8:4d:4a:bf:86:e9:
                    e0:26:a1:14:13:37:67:48:e0:43:06:29:a4:8e:86:
                    43:7b:78:12:5e:27:b0:83:73:8a:81:d5:3e:90:f5:
                    4a:1a:3b:a3:8a:29:50:84:55:2f:fa:82:a3:5d:d2:
                    c4:06:3e:f2:8b:41:ee:0d:c8:4c:6f:9b:c7:c4:0c:
                    62:37:f6:3d:7b:4e:2f:f4:34:bb:a7:67:f2:f1:2e:
                    51:d4:b2:36:ca:61:a7:6c:35:6e:ac:1d:f1:d9:1a:
                    b2:db:69:61:37:69:b9:6d:3f:fa:f9:ba:ce:d6:a8:
                    3f:5e:20:71:4a:ac:f3:25:1b:72:88:84:23:70:29:
                    83:3c:42:0f:4d:70:e0:71:12:93:36:cc:98:06:dc:
                    8c:d2:04:4e:1f:33:a6:43:f2:c1:25:f6:ca:77:b6:
                    ff:0d:53:2d:32:ef:ec:24:78:96:7c:15:6e:97:e9:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:93:12:06:7C:88:2D:78:AD:ED:8C:EC:0E:A9:0C:CE:2B:EC:10:49
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32322d3232203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:aa:44:bf:63:e5:22:64:01:8d:08:d3:c0:de:bf:d2:cb:c5:
         87:cc:f6:65:0b:d6:46:43:ed:4d:71:06:81:d6:03:5c:ba:9d:
         12:f5:bf:64:11:a2:3e:14:33:0f:53:30:b3:95:89:81:c8:92:
         21:76:96:9c:30:33:da:f2:dc:47:d2:e4:9b:7a:03:d8:76:c0:
         00:f5:e9:1a:bf:33:fb:0a:e7:74:b3:73:1d:68:d5:87:0d:ca:
         bb:b2:c0:4e:fd:4a:36:c5:e8:cb:0f:86:dd:59:be:77:d2:b7:
         c3:fa:f2:6d:e0:29:ef:e5:ce:59:f4:6d:73:af:70:ac:14:f8:
         46:10:b3:20:15:a9:7d:ec:96:e6:7e:2f:2f:1b:25:db:c9:20:
         b6:45:5b:f0:dc:b8:80:44:a1:55:a4:83:d4:84:aa:ca:ca:05:
         5d:b4:8b:bc:44:79:20:c1:bc:75:1b:cd:87:2c:f8:e9:1b:03:
         fc:7c:28:6b:ac:be:f0:29:1e:bd:68:cc:06:8e:28:60:4e:ca:
         6f:3e:30:5b:af:d4:b7:81:12:85:ff:36:b6:4d:d1:7e:0f:80:
         20:98:33:9f:69:d7:89:24:23:3b:59:f2:f0:4d:30:02:8b:ab:
         3d:51:ea:85:45:ab:ad:35:15:9f:1a:4b:02:ad:d9:ac:46:a2:
         b1:b7:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:42:11 2026 by rpki-client