Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32332d3233203d3e20323639373832.roa
File:                     3139302e3137302e36302e302f32332d3233203d3e20323639373832.roa (raw, json)
Hash identifier:          CUzP/uMKiPkMtlrKwEpMlhOpONJd8LfHa2QYDQpvgvs=
Subject key identifier:   D6:CA:CE:A2:C1:87:BE:2E:82:54:34:48:D4:99:D9:F4:E8:92:74:B9
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       228FEA689F5C307666A656126333C03B96E66EDB
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32332d3233203d3e20323639373832.roa
Signing time:             Sun 26 Jul 2026 23:00:01 +0000
ROA not before:           Sun 26 Jul 2026 22:55:01 +0000
ROA not after:            Sun 25 Jul 2027 23:00:01 +0000
asID:                     269782
IP address blocks:        190.170.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 02:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8f:ea:68:9f:5c:30:76:66:a6:56:12:63:33:c0:3b:96:e6:6e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 26 22:55:01 2026 GMT
            Not After : Jul 25 23:00:01 2027 GMT
        Subject: CN=D6CACEA2C187BE2E82543448D499D9F4E89274B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:58:bb:8a:81:45:a2:95:cf:7a:cb:a3:cd:
                    e7:77:1d:b0:46:e6:6e:5d:48:98:ac:64:6d:28:1e:
                    1d:96:6a:51:fc:b6:a0:33:9b:65:b0:b9:eb:67:e5:
                    66:d7:64:de:bb:0a:df:44:03:c2:16:45:2b:28:7c:
                    0f:81:f1:85:2e:67:58:c0:5d:b5:10:9d:54:bb:10:
                    37:07:e4:a3:8a:df:43:8d:76:a4:d4:ff:38:f8:e9:
                    bb:83:e7:49:87:10:1f:1d:05:78:1b:bc:99:e8:a3:
                    b1:00:3c:f3:fd:27:1c:b1:44:2d:38:3f:f4:c1:6d:
                    a8:89:8f:1c:5f:31:76:19:18:19:d4:a7:c4:fa:a4:
                    11:22:17:56:a0:90:71:a7:06:87:b2:7b:85:91:77:
                    a6:35:ea:62:3e:c8:05:e1:aa:c0:dd:d6:15:78:41:
                    eb:4a:a0:56:f4:4f:b1:32:73:b9:0c:ed:ca:7d:70:
                    d8:f5:ce:78:aa:84:d7:de:46:f3:b5:39:b7:b0:b1:
                    11:5e:ad:ed:af:7e:aa:14:7d:c7:91:a3:fc:ab:5c:
                    d3:85:9b:59:c9:2f:d6:4f:3f:1d:8b:af:6b:17:aa:
                    94:fc:29:d8:98:04:77:a8:16:2f:a1:65:22:04:aa:
                    79:80:5a:d5:b8:ed:56:86:cc:71:60:c3:b9:af:b9:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CA:CE:A2:C1:87:BE:2E:82:54:34:48:D4:99:D9:F4:E8:92:74:B9
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32332d3233203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:e7:23:fa:53:b9:16:f4:02:24:dc:26:8e:70:9b:9f:f6:
         51:ca:55:6a:19:e7:7f:a4:c7:59:04:f3:c1:31:f3:b9:9c:32:
         5f:64:4c:3b:f5:12:f2:5f:e8:02:4c:98:3f:e3:88:42:79:15:
         77:36:fd:1f:f0:c0:8d:34:c2:47:eb:32:68:91:4f:a3:9a:9d:
         22:46:27:3d:6d:91:e5:1d:b1:a8:90:a8:2c:d0:8b:23:a7:23:
         d9:eb:9d:db:3c:6b:79:57:54:0a:2a:5b:c8:e5:77:a8:ba:9a:
         9e:48:d1:cf:89:3a:bb:0e:7b:b6:25:d3:09:c4:f9:9f:f9:2f:
         35:27:f0:a2:3c:74:d7:69:99:fa:63:7d:e6:b0:77:71:ba:03:
         fd:4a:d2:2b:c6:39:0a:3a:43:04:3a:f8:8a:2f:88:89:1b:fd:
         6d:56:15:c7:a4:c8:77:70:77:a7:82:a8:45:02:9e:fb:b5:c9:
         44:57:14:8c:98:92:9d:fc:b5:ab:b5:79:4f:b6:c3:43:a8:3d:
         c5:f3:27:7e:c3:64:21:a6:e6:02:fa:f9:d5:f0:77:40:08:f4:
         8b:5d:3d:c5:1c:9d:20:a9:d0:24:c1:c9:22:79:c1:90:ed:3c:
         db:f5:25:b6:b3:66:7c:5c:5f:aa:c0:3b:71:ca:8b:3f:65:06:
         74:a2:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:42:23 2026 by rpki-client