Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3239203d3e2033343931.roa
File:                     3136382e39302e39322e302f32322d3239203d3e2033343931.roa (raw, json)
Hash identifier:          B+/jdOCU2hzYWu/uuMBepeX80xzEcqa4hrsJxgPdY1I=
Subject key identifier:   6C:11:1B:A2:72:C6:E3:1E:65:0E:A3:76:3F:7D:63:D0:A3:52:29:3E
Certificate issuer:       /CN=6B65A1F6D98ACE843BE9B667AC22F33884FD9243
Certificate serial:       7B762BCD79A2D19A679D55381803808FFAC8D502
Authority key identifier: 6B:65:A1:F6:D9:8A:CE:84:3B:E9:B6:67:AC:22:F3:38:84:FD:92:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B65A1F6D98ACE843BE9B667AC22F33884FD9243.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3239203d3e2033343931.roa
Signing time:             Fri 20 Mar 2026 12:50:00 +0000
ROA not before:           Fri 20 Mar 2026 12:45:00 +0000
ROA not after:            Fri 19 Mar 2027 12:50:00 +0000
asID:                     3491
IP address blocks:        168.90.92.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/6B65A1F6D98ACE843BE9B667AC22F33884FD9243.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/6B65A1F6D98ACE843BE9B667AC22F33884FD9243.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B65A1F6D98ACE843BE9B667AC22F33884FD9243.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:76:2b:cd:79:a2:d1:9a:67:9d:55:38:18:03:80:8f:fa:c8:d5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B65A1F6D98ACE843BE9B667AC22F33884FD9243
        Validity
            Not Before: Mar 20 12:45:00 2026 GMT
            Not After : Mar 19 12:50:00 2027 GMT
        Subject: CN=6C111BA272C6E31E650EA3763F7D63D0A352293E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:04:ff:e4:aa:d8:8e:17:92:8f:fb:29:b1:
                    c9:1d:70:ca:69:68:f7:65:ba:2c:26:11:8b:bb:08:
                    f8:04:c4:fc:17:2f:7f:c6:97:17:92:20:a1:ec:c8:
                    c5:36:fd:3e:cd:44:d5:d3:71:4b:d8:26:6b:6d:4c:
                    cc:ef:c6:82:32:6e:95:71:e0:fb:e6:22:88:4e:d7:
                    03:6b:77:90:43:a3:66:1c:01:53:ba:45:d4:7a:23:
                    ed:d8:9d:8b:6f:13:cd:8f:58:f1:36:30:ed:fb:1f:
                    3e:07:e7:4f:32:6d:94:09:6d:0e:7c:e2:33:84:89:
                    dd:0b:5c:c7:80:3e:3f:28:82:63:dc:b2:e5:3a:c9:
                    4e:d0:94:ae:79:ae:42:01:91:89:4a:c5:35:65:66:
                    09:c8:12:f1:2a:59:9f:12:b2:6e:f1:e8:96:0b:f5:
                    cb:51:a5:e3:b1:ca:2c:4b:3e:13:0d:1a:55:d1:a2:
                    72:9d:e9:f5:be:2f:73:dd:13:49:7a:f5:97:4f:3f:
                    54:23:bc:13:63:14:c3:48:dd:2b:2b:4f:3f:3a:5c:
                    cb:64:47:cc:ba:15:69:fc:c1:87:e8:0c:28:cd:48:
                    43:c9:ce:0b:67:78:dd:be:d4:10:62:5b:8b:01:91:
                    f4:c3:da:49:2f:e8:07:ec:83:ea:4d:77:a5:dd:9f:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:11:1B:A2:72:C6:E3:1E:65:0E:A3:76:3F:7D:63:D0:A3:52:29:3E
            X509v3 Authority Key Identifier:
                keyid:6B:65:A1:F6:D9:8A:CE:84:3B:E9:B6:67:AC:22:F3:38:84:FD:92:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/6B65A1F6D98ACE843BE9B667AC22F33884FD9243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B65A1F6D98ACE843BE9B667AC22F33884FD9243.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3239203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:c4:83:28:f6:aa:98:60:f5:42:a0:be:01:bb:67:39:1e:
         9b:cd:79:17:54:35:33:6f:55:2d:07:e3:f0:35:ee:fc:95:3e:
         b1:4a:ee:e9:d1:75:64:ad:34:a9:a8:a0:3b:50:8c:7b:49:31:
         64:eb:5e:9a:60:55:8a:56:cb:39:de:f9:51:a4:fe:1d:6b:c0:
         8f:b9:f1:e1:58:c2:ee:ed:ba:4a:14:27:ca:54:fc:a0:92:12:
         7e:1c:88:a9:8b:21:23:ab:08:f7:d9:06:c0:9d:ce:22:96:4e:
         24:dc:57:1a:3a:9c:98:06:ac:be:43:0c:20:c0:dd:bc:a1:31:
         d9:db:cf:9d:9f:4c:a2:59:e9:94:d4:d8:f6:fb:e0:67:4a:8e:
         8a:e5:e8:91:08:e1:7c:f9:17:64:10:5e:d9:01:5d:62:10:76:
         7b:71:36:b4:ca:c7:48:f2:8e:a6:b6:60:ab:de:7c:74:12:fe:
         13:47:0b:31:2a:88:36:d6:f7:b8:fb:2b:aa:e4:a8:82:b6:0f:
         65:3a:e9:25:db:26:da:13:87:02:4a:9a:58:1a:d9:02:2e:ed:
         d2:28:ec:8a:65:10:e9:bc:7d:a1:55:96:40:03:81:c7:8c:5d:
         0b:42:36:98:e8:b4:a3:35:40:c5:fe:ac:6c:a1:b5:92:8b:66:
         a6:95:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:42:01 2026 by rpki-client