Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130392e302f32342d3234203d3e20323730303931.roa
File:                     3139302e3130392e3130392e302f32342d3234203d3e20323730303931.roa (raw, json)
Hash identifier:          epQsJKyaBMM0X8A03/Z6PjyxYgps9oZeG+vRsCgikEE=
Subject key identifier:   5A:1B:BC:E6:5A:2F:14:3B:D9:68:93:AA:7E:6A:BE:AC:D5:73:FC:69
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       6F9CF6D291D44583165EC29BF840D7A7A822ECB7
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130392e302f32342d3234203d3e20323730303931.roa
Signing time:             Tue 22 Jul 2025 23:26:21 +0000
ROA not before:           Tue 22 Jul 2025 23:21:21 +0000
ROA not after:            Tue 21 Jul 2026 23:26:21 +0000
asID:                     270091
IP address blocks:        190.109.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9c:f6:d2:91:d4:45:83:16:5e:c2:9b:f8:40:d7:a7:a8:22:ec:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Jul 22 23:21:21 2025 GMT
            Not After : Jul 21 23:26:21 2026 GMT
        Subject: CN=5A1BBCE65A2F143BD96893AA7E6ABEACD573FC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:a0:7c:31:5f:40:96:53:eb:36:b8:9c:60:
                    f4:a6:c7:02:d1:d5:f6:04:66:fe:43:c5:3c:1c:77:
                    6a:7c:e5:e7:6f:7c:4b:17:9f:43:f0:cc:37:a9:73:
                    9f:de:f5:61:ae:09:91:4d:d7:ad:11:df:89:11:6d:
                    56:83:99:6b:3a:84:41:2d:3e:7e:39:d1:75:0a:31:
                    7c:b6:c8:77:9b:89:0c:f0:e0:c6:92:93:88:ba:dd:
                    25:68:a7:01:63:02:61:ac:95:94:b0:ab:02:a2:92:
                    0f:cc:11:15:8b:09:b9:f8:e1:c3:84:3e:79:0b:8c:
                    90:b6:df:b2:66:3d:af:c2:2e:b0:7f:dc:a9:61:a3:
                    33:97:df:96:42:0b:fd:cb:7a:e5:47:d5:26:78:f6:
                    43:aa:86:5c:bc:67:89:e8:27:7c:cf:a9:66:64:e4:
                    f3:8e:88:51:1b:00:da:04:30:ec:49:e1:a6:01:45:
                    c8:9a:d4:b5:ad:c7:b1:d7:e7:fd:8b:16:71:1b:ad:
                    67:a1:07:f7:5d:83:03:4d:d9:9a:1c:e2:7f:3b:5b:
                    38:30:41:42:78:97:63:82:9b:79:3f:b0:d9:6f:d0:
                    14:a2:6d:84:b1:3d:44:cc:e9:7a:42:5d:34:5e:2e:
                    34:2c:55:a6:75:ae:11:f0:de:4b:38:cc:a2:d8:6a:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:BC:E6:5A:2F:14:3B:D9:68:93:AA:7E:6A:BE:AC:D5:73:FC:69
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130392e302f32342d3234203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:0f:ba:0f:34:a5:b0:82:9f:73:a2:8b:df:74:e3:16:59:fe:
         a7:7d:e9:b0:50:c9:a3:79:d7:1a:84:8c:7e:0d:c8:ee:00:2b:
         e8:d4:e4:e9:70:db:ee:83:de:05:02:1f:2c:20:3b:30:1b:6a:
         4d:d6:92:56:af:14:ba:cd:af:36:25:23:51:4e:9c:e5:d2:5b:
         b0:50:14:f9:ab:6d:7c:4a:cb:26:03:2d:2f:62:f4:98:a1:a5:
         27:6c:7a:ae:fc:b6:f1:c4:7e:28:c8:2d:24:e3:f5:6a:f5:c3:
         79:65:1f:f8:a3:b7:e2:86:da:3b:8f:b5:cc:c8:f7:2c:be:ab:
         4f:2e:c4:de:4f:7a:0e:a8:b3:83:2a:dd:5b:cb:9f:93:90:1b:
         2f:d7:0f:a6:b7:c8:8d:d2:fd:88:2c:86:9a:20:71:12:67:7d:
         b3:d8:c4:04:16:80:51:e9:47:8c:35:55:dd:be:1a:2c:28:24:
         13:1e:0d:83:6a:a2:78:4b:e9:e8:44:e9:3a:55:fa:f6:37:71:
         a7:97:c7:29:e2:2a:64:96:f0:b3:ab:e6:b2:de:ee:ca:5c:a7:
         eb:13:95:58:5f:e9:30:3b:27:08:4d:62:af:d9:1e:23:14:3c:
         77:3b:b0:8a:20:6e:4b:ed:b8:59:29:66:25:19:7b:43:6a:ba:
         0d:04:9f:0a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUb5z20pHURYMWXsKb+EDXp6gi7LcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJBNjhFNjk1NEY2NzREODA5RDU1NDI0OUQxMTdCNThB
NEY2NEVDMDAeFw0yNTA3MjIyMzIxMjFaFw0yNjA3MjEyMzI2MjFaMDMxMTAvBgNV
BAMTKDVBMUJCQ0U2NUEyRjE0M0JEOTY4OTNBQTdFNkFCRUFDRDU3M0ZDNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexqB8MV9AllPrNricYPSmxwLR
1fYEZv5DxTwcd2p85edvfEsXn0PwzDepc5/e9WGuCZFN160R34kRbVaDmWs6hEEt
Pn450XUKMXy2yHebiQzw4MaSk4i63SVopwFjAmGslZSwqwKikg/MERWLCbn44cOE
PnkLjJC237JmPa/CLrB/3KlhozOX35ZCC/3LeuVH1SZ49kOqhly8Z4noJ3zPqWZk
5POOiFEbANoEMOxJ4aYBRcia1LWtx7HX5/2LFnEbrWehB/ddgwNN2Zoc4n87Wzgw
QUJ4l2OCm3k/sNlv0BSibYSxPUTM6XpCXTReLjQsVaZ1rhHw3ks4zKLYatt9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWhu85lovFDvZaJOqfmq+rNVz/GkwHwYDVR0j
BBgwFoAUa6aOaVT2dNgJ1VQknRF7WKT2TsAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjBFMzdEMzI3MEM2OTY5MzIzMTFGN0NENTlDOUVGNUQ5
QTEwMUFBOTkyQkJGMjM1OThCNjJBNzNFMzA2MEE2LzAvNkJBNjhFNjk1NEY2NzRE
ODA5RDU1NDI0OUQxMTdCNThBNEY2NEVDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QkE2OEU2OTU0RjY3NEQ4MDlE
NTU0MjQ5RDExN0I1OEE0RjY0RUMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzYwRTM3RDMyNzBDNjk2OTMyMzExRjdDRDU5QzlFRjVEOUExMDFBQTk5
MkJCRjIzNTk4QjYyQTczRTMwNjBBNi8wLzMxMzkzMDJlMzEzMDM5MmUzMTMwMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
bW0wDQYJKoZIhvcNAQELBQADggEBANUPug80pbCCn3Oii9904xZZ/qd96bBQyaN5
1xqEjH4NyO4AK+jU5Olw2+6D3gUCHywgOzAbak3WklavFLrNrzYlI1FOnOXSW7BQ
FPmrbXxKyyYDLS9i9JihpSdseq78tvHEfijILSTj9Wr1w3llH/ijt+KG2juPtczI
9yy+q08uxN5Peg6os4Mq3VvLn5OQGy/XD6a3yI3S/YgshpogcRJnfbPYxAQWgFHp
R4w1Vd2+GiwoJBMeDYNqonhL6ehE6TpV+vY3caeXxyniKmSW8LOr5rLe7spcp+sT
lVhf6TA7JwhNYq/ZHiMUPHc7sIogbkvtuFkpZiUZe0Nqug0Enwo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:32 2025 by rpki-client