Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32342d3234203d3e20323639373832.roa
File:                     3139302e3137302e36302e302f32342d3234203d3e20323639373832.roa (raw, json)
Hash identifier:          xpU+aY9LRb0y624i7j/m1LJ9ud5lOPUd+kGMnroOfhk=
Subject key identifier:   DC:85:87:E4:C3:25:A9:7F:C1:F3:B8:3F:83:50:CC:DD:90:8A:94:96
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       744E720BE89D5A99DBE19B94A34AF91CC77BA79B
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32342d3234203d3e20323639373832.roa
Signing time:             Sun 26 Jul 2026 23:00:00 +0000
ROA not before:           Sun 26 Jul 2026 22:55:00 +0000
ROA not after:            Sun 25 Jul 2027 23:00:00 +0000
asID:                     269782
IP address blocks:        190.170.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 02:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4e:72:0b:e8:9d:5a:99:db:e1:9b:94:a3:4a:f9:1c:c7:7b:a7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 26 22:55:00 2026 GMT
            Not After : Jul 25 23:00:00 2027 GMT
        Subject: CN=DC8587E4C325A97FC1F3B83F8350CCDD908A9496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9d:2c:cc:e8:ce:46:c0:fc:9e:f3:a1:ff:36:
                    39:82:ef:d4:46:d9:24:fb:c9:c3:7c:af:d3:78:56:
                    5b:f8:68:4c:9b:9b:d4:32:7a:30:ca:67:af:7a:0c:
                    44:f1:af:62:8a:db:52:bc:40:d7:b6:1c:8a:7f:cf:
                    a6:b1:09:e5:8e:72:fb:c9:a4:e7:82:1d:74:a9:b2:
                    45:c9:0b:ab:9d:95:16:b6:f3:d0:f6:d6:ec:af:f3:
                    37:49:a6:db:72:12:76:75:28:23:1f:5d:a7:c2:4a:
                    0f:d2:ea:35:cc:79:a0:96:43:73:0d:36:6c:3f:08:
                    80:09:fb:c2:b1:26:aa:db:7d:35:f1:ec:45:2e:73:
                    4f:77:42:ac:2c:5c:bc:78:e6:0f:87:cd:f4:8a:4f:
                    57:e8:0e:1b:d0:5c:2f:6a:a4:4c:d4:b6:22:a8:ec:
                    1c:e5:3d:3e:1a:60:84:06:24:71:80:1d:cf:43:78:
                    82:d2:84:4d:de:f4:15:6e:59:a3:65:08:34:95:bd:
                    dd:32:06:a4:df:3b:34:64:59:08:db:05:de:f0:fb:
                    81:55:d3:05:07:8d:f5:18:9b:c9:09:1c:ee:31:15:
                    eb:7b:ae:f4:51:c7:2c:cf:f8:53:53:ff:18:89:fd:
                    05:48:00:eb:68:f4:23:56:18:d0:34:8e:dd:9d:13:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:85:87:E4:C3:25:A9:7F:C1:F3:B8:3F:83:50:CC:DD:90:8A:94:96
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36302e302f32342d3234203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:40:93:3b:1e:cf:be:7a:53:43:97:72:c1:2b:99:a8:a5:e4:
         66:58:f0:3c:64:18:18:74:3e:f1:d6:db:95:e5:cf:e1:15:c8:
         9a:48:d2:bb:63:5d:ed:2c:7c:97:bf:eb:e0:3b:af:69:7c:2a:
         3b:49:e7:29:40:38:21:ca:3d:04:88:c9:4f:5e:3e:36:69:fa:
         dd:7f:b8:a4:a0:5e:16:6f:4e:96:99:2e:c7:ab:b9:a0:0b:e6:
         6a:45:99:96:69:15:78:b8:76:eb:65:06:2a:01:2b:19:56:f6:
         e2:31:04:8a:14:90:4f:65:d4:32:53:75:bd:6d:95:e4:32:e6:
         1e:a1:a6:de:4c:db:84:b0:99:de:8f:be:35:eb:e3:b5:7a:51:
         32:01:d3:b8:b0:0b:94:49:8b:27:d1:4e:f9:c9:03:9d:c8:22:
         32:64:db:72:74:a7:ed:17:89:b1:82:e3:86:87:c4:76:05:f8:
         59:42:92:a7:b8:ee:eb:7b:a3:7d:59:ed:09:6c:26:04:19:7e:
         ba:e8:82:77:0e:e1:68:d6:73:05:41:60:1c:21:ec:7d:16:3f:
         9d:35:e5:c7:a6:36:5e:a3:f9:e9:e5:61:2f:81:53:c2:ce:7b:
         5a:be:65:03:13:59:14:27:a2:1b:62:3c:3e:27:d2:66:08:4d:
         92:60:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:54 2026 by rpki-client