Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e36312e302f32342d3234203d3e20323733393734.roa
File:                     3139302e3130392e36312e302f32342d3234203d3e20323733393734.roa (raw, json)
Hash identifier:          B1iEIWiic6O778Ne2/gV7Ob+y5y/6dBJSug5IvkGFgA=
Subject key identifier:   CB:4D:55:45:46:F5:77:AA:83:31:1F:A8:81:42:82:E7:8D:DD:8F:C2
Certificate issuer:       /CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
Certificate serial:       0C87BDF604C54F54C7EBA08D63D3855E722305D1
Authority key identifier: 72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e36312e302f32342d3234203d3e20323733393734.roa
Signing time:             Thu 18 Sep 2025 22:50:00 +0000
ROA not before:           Thu 18 Sep 2025 22:45:00 +0000
ROA not after:            Thu 17 Sep 2026 22:50:00 +0000
asID:                     273974
IP address blocks:        190.109.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:87:bd:f6:04:c5:4f:54:c7:eb:a0:8d:63:d3:85:5e:72:23:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
        Validity
            Not Before: Sep 18 22:45:00 2025 GMT
            Not After : Sep 17 22:50:00 2026 GMT
        Subject: CN=CB4D554546F577AA83311FA8814282E78DDD8FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:84:08:6b:06:47:93:ce:06:ae:62:c1:02:
                    ab:12:0f:6b:c0:c3:38:d8:ff:97:51:7c:39:a8:f6:
                    01:70:97:d0:b6:af:e1:b1:9c:ba:60:2a:2f:3f:ec:
                    5f:50:31:33:ad:e0:fc:63:7a:73:62:29:00:18:9c:
                    bb:f7:9d:b6:8d:ae:4c:a4:14:cb:0d:f9:9e:2e:6f:
                    ed:48:40:ad:c8:3d:4d:4a:c0:5d:65:d2:64:34:d3:
                    a4:8a:32:28:89:9d:c1:ed:af:95:d4:ee:72:c3:b7:
                    42:2b:52:aa:3a:12:bc:2e:de:7f:c8:97:27:1e:86:
                    5d:6c:5f:16:73:79:6a:ee:72:ce:d9:ac:a3:be:16:
                    33:95:8a:46:74:d1:50:b5:b8:94:c0:3e:9e:d3:0d:
                    bf:7e:72:92:fb:9d:c9:e6:13:bf:4c:53:35:92:1f:
                    a8:85:67:c3:51:e5:bb:76:c1:39:40:4c:c4:69:75:
                    e7:45:5a:37:d1:dc:23:68:be:ed:18:81:6a:e3:82:
                    15:a4:d9:37:ad:7d:ea:48:7c:52:6e:8f:71:a1:12:
                    7e:d9:5a:30:5a:5a:9b:f9:6d:b5:c5:2f:8a:29:97:
                    77:45:ca:a5:b2:3b:b0:7a:0f:1f:24:6c:0a:7d:72:
                    fd:ef:b6:4a:22:7a:06:51:ee:24:15:53:a4:7a:50:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:55:45:46:F5:77:AA:83:31:1F:A8:81:42:82:E7:8D:DD:8F:C2
            X509v3 Authority Key Identifier:
                keyid:72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e36312e302f32342d3234203d3e20323733393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:f8:41:7f:98:68:92:3b:b2:85:62:bb:cd:1c:fb:4e:09:
         5e:ef:6f:47:f4:bf:e5:91:e9:5c:80:5e:7d:5e:13:e9:62:ae:
         93:fa:2d:dc:7d:90:54:c0:93:13:11:a0:69:cb:be:ff:61:d2:
         72:3a:20:63:0a:dc:de:86:a7:5c:f4:8b:84:b0:a8:e4:26:6f:
         94:c6:00:7d:0b:6a:8e:ad:3b:9c:91:06:84:ff:a9:54:67:0d:
         f7:ea:67:b8:dd:e0:88:79:cb:0f:fd:9a:26:22:a8:43:88:bf:
         b5:a8:f5:27:31:d9:55:6c:64:49:69:8d:fb:74:38:61:0f:25:
         df:6d:c6:a5:c4:4a:8c:9e:02:6f:6a:2b:96:06:29:97:68:6d:
         94:0c:f1:9d:3b:31:5e:bb:bf:cf:e6:5e:e3:b1:70:d8:91:cb:
         f6:3c:34:49:39:a7:94:1e:02:76:89:45:e0:f0:90:05:c7:70:
         53:f3:2c:b4:49:3b:3c:0d:4b:4b:30:ae:e7:66:74:88:9a:60:
         e1:02:07:50:83:83:89:4f:c2:ee:b4:26:65:41:bc:6b:58:64:
         a0:2b:a8:01:5f:45:71:d2:b8:d2:eb:9c:bb:15:e6:f8:6a:61:
         b1:43:cc:ed:ed:86:18:ef:d6:a8:07:e3:9c:67:f4:03:e6:77:
         47:5f:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:37:53 2025 by rpki-client