Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36312e302f32342d3234203d3e20323639373832.roa
File:                     3139302e3137302e36312e302f32342d3234203d3e20323639373832.roa (raw, json)
Hash identifier:          gaOeumrN8dqAO4kTsy+yD9Qx92L2UuXW06CNjLVhqB0=
Subject key identifier:   76:C8:EB:A2:EC:F1:CC:8D:3A:FC:4B:8C:22:0C:05:28:4A:13:97:2D
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       69706F67FDD0B130A6C11AD3F32E8A3A6D39F2BB
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36312e302f32342d3234203d3e20323639373832.roa
Signing time:             Sun 26 Jul 2026 23:00:00 +0000
ROA not before:           Sun 26 Jul 2026 22:55:00 +0000
ROA not after:            Sun 25 Jul 2027 23:00:00 +0000
asID:                     269782
IP address blocks:        190.170.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 02:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:6f:67:fd:d0:b1:30:a6:c1:1a:d3:f3:2e:8a:3a:6d:39:f2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 26 22:55:00 2026 GMT
            Not After : Jul 25 23:00:00 2027 GMT
        Subject: CN=76C8EBA2ECF1CC8D3AFC4B8C220C05284A13972D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:63:38:0b:2b:57:2c:86:27:77:9a:83:69:
                    ee:f4:89:05:cc:73:14:a8:09:cc:0a:b3:54:54:1a:
                    8a:2d:7c:40:c7:a1:32:7b:a4:f5:e8:75:77:ca:dd:
                    f4:35:1d:2f:99:20:55:b5:69:a7:5c:0a:dd:de:6d:
                    a9:f7:21:22:31:bd:e7:b6:d5:5e:2c:5f:54:d1:1f:
                    3f:95:6c:b4:d1:a4:bf:f1:d2:cb:16:7e:4c:f8:dd:
                    31:63:78:ce:bf:6e:29:0a:7b:c0:c6:6e:c9:c6:e0:
                    00:18:52:59:55:99:1f:61:b2:fe:53:6f:81:5b:3f:
                    74:10:93:b8:38:24:bc:9c:e8:8d:19:3e:08:8a:df:
                    80:f8:d1:5a:c4:09:72:ba:95:8c:45:84:62:ae:8e:
                    dc:d2:57:ea:94:53:77:0f:30:63:98:a9:49:d8:a7:
                    d0:c2:2d:84:5b:e3:c3:95:e4:7d:be:ee:31:bb:d2:
                    68:b8:87:b8:cf:14:2f:e8:83:1e:60:6b:49:aa:81:
                    af:3c:74:76:ff:ee:68:ec:10:fa:28:f1:ee:94:28:
                    c0:20:43:ee:af:be:46:23:c4:9d:63:8d:f0:82:11:
                    d1:7a:e4:8a:ba:65:f7:d6:cb:b7:ff:4f:1a:75:a9:
                    52:2b:d8:78:74:83:64:d8:52:39:5b:c7:c7:f1:7d:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:EB:A2:EC:F1:CC:8D:3A:FC:4B:8C:22:0C:05:28:4A:13:97:2D
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/3139302e3137302e36312e302f32342d3234203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:ec:eb:3a:e0:51:18:fa:e1:5e:06:9a:66:f2:bc:11:17:
         ff:a4:c8:3b:28:aa:35:c1:79:51:8e:75:98:cd:2f:3e:98:b6:
         15:9d:10:5e:b1:99:59:b2:e6:43:7b:0e:fa:7d:75:41:d9:5d:
         17:bf:62:bd:18:84:39:1b:0f:55:79:66:47:17:04:94:52:8d:
         94:6c:29:a1:5b:12:4c:89:24:1c:9e:2a:40:95:ec:9e:c8:7d:
         93:1c:8a:6b:1f:2d:87:1a:f2:cf:13:71:99:8e:9e:e2:34:ae:
         32:88:07:84:d7:25:23:30:b2:62:0c:dc:60:a8:f1:7a:f8:af:
         f5:b2:32:37:44:19:ad:72:94:1a:87:bd:e2:67:8b:fc:90:15:
         a8:fb:eb:11:d2:48:3b:fe:9e:fb:92:75:68:cc:00:e3:58:c1:
         b8:31:7c:4e:f7:14:5d:14:78:b0:b6:02:d6:8b:c6:87:25:ab:
         5b:3c:28:f8:a5:23:6f:88:f0:57:73:e4:d6:55:b0:59:c3:8f:
         cc:dd:d5:6f:60:fb:ce:3f:ad:3c:24:53:03:09:9c:c4:f6:b2:
         33:db:07:ae:21:65:bd:62:5e:a9:11:e9:92:92:5b:ee:b7:36:
         e5:ac:f5:99:f1:05:d1:f8:7a:c4:8e:7d:cb:14:50:10:5b:3c:
         af:d5:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:46 2026 by rpki-client