Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3332203d3e203237383933.roa
File:                     3139302e3137302e36342e302f31382d3332203d3e203237383933.roa (raw, json)
Hash identifier:          6uwvP08s8IETzXv0cwDPN4PVHEds3hQ0R4z+VlYZwKM=
Subject key identifier:   D4:7E:CC:AB:5A:B7:4B:43:13:7E:E9:B9:6D:A3:35:67:E1:EE:8A:25
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       689E25D513C3D9B6D30BA53D5F02838B309405C9
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3332203d3e203237383933.roa
Signing time:             Thu 23 Jul 2026 14:50:00 +0000
ROA not before:           Thu 23 Jul 2026 14:45:00 +0000
ROA not after:            Thu 22 Jul 2027 14:50:00 +0000
asID:                     27893
IP address blocks:        190.170.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9e:25:d5:13:c3:d9:b6:d3:0b:a5:3d:5f:02:83:8b:30:94:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Jul 23 14:45:00 2026 GMT
            Not After : Jul 22 14:50:00 2027 GMT
        Subject: CN=D47ECCAB5AB74B43137EE9B96DA33567E1EE8A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:26:d4:d0:e5:77:6d:29:68:7c:23:3a:c4:
                    87:b6:46:07:c1:68:d3:23:42:26:70:02:74:1f:e7:
                    6a:b5:40:c5:44:95:b6:4b:4c:8c:57:f3:54:d8:d8:
                    d5:65:2e:1d:78:a2:e6:f4:f9:e1:c4:1f:fc:b5:5d:
                    00:35:26:f7:f1:74:60:c0:f8:8a:75:ad:24:42:54:
                    11:ab:09:4d:82:86:64:6a:87:70:d7:d1:ba:44:4a:
                    68:c2:fe:8c:e0:33:1c:52:ac:0e:b7:8e:26:5b:8b:
                    73:54:b2:70:50:d6:26:02:9f:8f:c9:69:ee:05:f9:
                    d3:c2:14:8d:48:05:55:73:f4:26:fb:20:bc:09:6d:
                    c3:75:1f:57:99:75:9b:3b:65:72:86:07:9a:93:0a:
                    59:36:14:9c:37:08:fa:89:c3:de:dc:5e:df:e6:7e:
                    42:cd:c4:5c:6f:1d:39:91:7a:ba:ee:c5:8e:10:35:
                    9a:96:06:51:c0:a0:f0:b0:61:76:11:68:be:b8:15:
                    1c:2d:3b:3c:39:70:fe:6e:b5:a2:e0:6c:d3:5c:18:
                    4a:fa:bd:34:86:5f:37:40:37:70:9b:41:27:4c:1f:
                    b9:9d:42:37:9d:34:b5:65:b5:4c:60:99:23:47:be:
                    57:ae:db:63:d1:08:fe:aa:17:4b:da:af:ae:34:8c:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:CC:AB:5A:B7:4B:43:13:7E:E9:B9:6D:A3:35:67:E1:EE:8A:25
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3332203d3e203237383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b6:65:3f:f4:9c:16:91:3c:be:65:d6:6f:35:3a:09:99:f7:5f:
         bd:86:05:28:2d:c1:09:d2:f6:f7:f6:59:ef:e9:3e:fb:d7:a0:
         b2:76:1e:53:0d:cf:ff:bd:e4:6c:ab:fe:b4:6d:dd:ff:c6:6d:
         58:81:c1:23:e4:67:af:67:8f:b3:5e:50:de:a8:95:6c:c7:b3:
         8e:57:ef:1b:95:90:d0:b6:9e:50:16:51:9f:a5:9b:b2:1d:70:
         be:a9:71:de:d9:79:94:9b:2b:c6:ea:a9:f1:1e:c8:2e:8d:ee:
         bd:f5:c8:6b:56:f6:25:c4:2b:8f:55:d8:5d:60:1d:47:a1:96:
         dd:04:64:a3:ea:ea:0b:3c:1b:7c:65:66:82:79:c7:98:15:65:
         66:d7:48:5b:24:54:3d:46:d1:4a:d9:31:69:2a:24:bc:9b:91:
         5d:97:02:0a:26:34:bb:87:47:78:ed:92:50:fa:07:d9:eb:6f:
         ef:54:f0:ed:57:4a:1f:46:2a:12:d1:a1:ee:43:bd:bf:94:d1:
         37:07:1a:1a:8c:8d:6b:93:d9:5f:d4:66:64:8d:4a:27:c0:63:
         b0:eb:af:5a:71:80:99:f1:05:85:5f:9f:29:67:7a:4d:22:4d:
         8a:09:ce:2c:ab:07:86:3e:ab:48:ec:b8:dd:97:b9:c6:70:e8:
         5b:7e:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:49 2026 by rpki-client