Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa
File:                     3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa (raw, json)
Hash identifier:          lBWtIhgCmvXRm/Q5IqnjdM48J8m1uFeHj2M4+WlePXk=
Subject key identifier:   24:F5:48:59:A4:B8:8A:59:40:21:FF:9B:E5:D4:02:8A:AE:8E:0E:7D
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       73D14587475CABBA971359EFAC7081CC687E6D3F
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa
Signing time:             Tue 23 Jun 2026 23:49:20 +0000
ROA not before:           Tue 23 Jun 2026 23:44:20 +0000
ROA not after:            Tue 22 Jun 2027 23:49:20 +0000
asID:                     270091
IP address blocks:        190.109.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d1:45:87:47:5c:ab:ba:97:13:59:ef:ac:70:81:cc:68:7e:6d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Jun 23 23:44:20 2026 GMT
            Not After : Jun 22 23:49:20 2027 GMT
        Subject: CN=24F54859A4B88A594021FF9BE5D4028AAE8E0E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:00:6e:00:55:56:cb:f2:97:73:d9:50:82:
                    85:28:9d:ac:4c:ed:24:72:b3:6b:3b:b9:4e:24:b3:
                    2a:47:61:b6:0b:3f:45:bd:4a:5c:91:e3:57:97:b2:
                    80:76:4b:fe:14:50:d7:3b:52:43:ba:27:70:3e:49:
                    cc:78:6e:81:18:ca:f3:2b:bb:79:94:e1:d8:37:cf:
                    b8:70:4e:ac:66:f4:f6:cf:68:10:19:1c:08:b8:55:
                    2d:5e:65:be:2c:76:1f:b2:9d:67:48:83:c8:68:a9:
                    d6:c2:e2:c7:65:57:c3:11:c7:a6:c8:71:85:51:4b:
                    f4:10:eb:1c:82:e3:60:46:3f:19:a5:2f:5b:4e:07:
                    56:39:fa:48:ea:2a:93:10:3b:99:8b:5b:39:f9:23:
                    0a:be:19:03:c4:2e:9e:03:50:bd:53:56:e0:50:59:
                    45:f5:6a:c2:23:e5:e1:d3:4c:ba:56:a9:85:b5:32:
                    9b:b8:3c:a3:ac:0a:b3:34:fb:d2:28:ee:5b:04:a5:
                    61:8f:b4:f1:0c:5b:41:88:54:d3:56:03:3f:6c:bf:
                    df:24:d8:d5:98:30:56:ec:6f:80:4e:8e:23:18:27:
                    3e:13:f1:ad:b5:41:b7:52:ff:93:f3:ce:46:d9:6a:
                    b9:a3:5c:86:31:38:37:98:f0:f4:d6:8e:fb:f2:76:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:48:59:A4:B8:8A:59:40:21:FF:9B:E5:D4:02:8A:AE:8E:0E:7D
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:bd:0c:ed:39:5b:ae:9f:a2:34:7d:8a:31:de:00:aa:aa:3a:
         62:0d:32:d3:e0:61:80:56:b8:65:2b:76:da:bc:8d:5d:6a:f0:
         0c:69:eb:74:ec:72:72:10:6d:e6:50:2c:46:28:dd:72:cd:2e:
         a0:f0:40:9a:f5:27:e3:c4:6f:d7:77:c7:83:a6:a1:38:65:11:
         34:a7:2d:8d:69:78:30:ef:3d:cf:e0:05:d7:a8:70:a6:97:e2:
         2c:89:28:88:c5:ba:85:42:10:04:87:46:c3:23:85:55:6a:25:
         d0:40:0b:fe:7b:2c:3f:a1:d8:5d:c0:c3:76:a9:38:fb:54:c6:
         df:01:32:18:e9:f7:da:db:d6:30:03:86:b7:8d:c4:ca:52:54:
         a1:46:44:65:10:51:b5:b2:1f:30:f2:63:07:70:6a:f5:70:28:
         e7:b8:f8:76:ad:29:6f:9a:7e:fb:a7:f6:5c:1f:8d:0c:12:85:
         cd:0c:3e:01:dc:b0:87:21:0c:d7:74:d5:39:de:9a:31:9b:cb:
         2d:17:f7:f0:ca:46:c2:3b:60:8c:68:de:5c:18:27:7a:ab:4d:
         52:8f:50:92:bb:45:89:97:84:0a:2f:9e:b3:cc:4e:fd:7f:b5:
         90:36:e6:18:02:4d:db:75:f8:9d:9a:13:17:4b:ab:e3:59:f1:
         21:c3:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:40:48 2026 by rpki-client