Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131302e302f32342d3234203d3e20323730303931.roa
File:                     3139302e3130392e3131302e302f32342d3234203d3e20323730303931.roa (raw, json)
Hash identifier:          wsldTz8Lz89NFeFIyehNSbFicmO04draPTjmWIJwGIg=
Subject key identifier:   17:1E:33:93:EC:E5:51:74:62:5C:7F:AC:8B:D8:44:45:20:6D:AD:B9
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       3B0DEA9BD2B99010D0304ED1B81FD156DD67196C
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131302e302f32342d3234203d3e20323730303931.roa
Signing time:             Tue 22 Jul 2025 23:26:22 +0000
ROA not before:           Tue 22 Jul 2025 23:21:22 +0000
ROA not after:            Tue 21 Jul 2026 23:26:22 +0000
asID:                     270091
IP address blocks:        190.109.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0d:ea:9b:d2:b9:90:10:d0:30:4e:d1:b8:1f:d1:56:dd:67:19:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Jul 22 23:21:22 2025 GMT
            Not After : Jul 21 23:26:22 2026 GMT
        Subject: CN=171E3393ECE55174625C7FAC8BD84445206DADB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:00:df:42:30:1f:48:37:13:28:63:2e:45:
                    64:9a:12:e9:18:b0:fe:6b:34:a5:d0:d2:5a:df:85:
                    63:2b:d2:60:65:10:43:4b:9a:b0:21:a3:2d:19:75:
                    6d:9d:5b:b0:90:20:86:e8:50:c7:b5:d1:19:92:c2:
                    ae:06:0c:b0:87:66:1e:f9:7c:8d:24:76:b4:19:de:
                    1c:65:cd:3b:5d:f9:51:07:84:80:b8:fe:5e:18:fe:
                    6c:cd:21:fd:07:b6:84:8a:6b:2a:de:dc:e6:dd:cc:
                    73:1c:64:c5:07:e0:30:1a:d8:50:6d:34:55:f3:2d:
                    9d:34:0a:9d:1a:d4:ab:a9:de:75:b2:70:a3:f3:1c:
                    e3:34:4e:4c:01:0f:6d:6d:af:a0:4a:e5:d9:90:d5:
                    a0:ae:6b:f4:1c:be:bc:27:47:ea:1b:80:ec:40:04:
                    30:66:34:5b:06:34:ac:fe:f8:82:bf:11:40:00:60:
                    8a:9c:f9:b3:b0:1e:1e:f8:35:a3:8d:08:a0:6f:87:
                    70:54:50:a5:7b:59:c4:bd:1b:67:df:c7:9e:64:fd:
                    f7:d4:a1:39:8d:0f:93:bd:ee:51:33:8e:72:58:18:
                    34:20:58:0e:60:cf:da:7f:c2:ce:87:dd:01:29:09:
                    6b:f0:10:6e:67:10:e2:a4:7f:50:ab:13:99:29:f3:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1E:33:93:EC:E5:51:74:62:5C:7F:AC:8B:D8:44:45:20:6D:AD:B9
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131302e302f32342d3234203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:1a:fe:00:0c:09:c6:bc:18:21:ce:ac:81:f8:71:b0:97:
         dc:a7:6a:d3:eb:b0:c0:c5:03:c1:eb:80:e5:24:8d:59:e1:7a:
         d7:ce:3b:94:77:25:91:b4:97:1a:30:91:c5:be:fc:33:ac:93:
         a4:52:91:12:11:e9:32:67:f4:64:21:c8:89:27:3e:9a:bc:d3:
         de:5f:3b:41:c4:27:81:e5:9f:0e:65:94:ba:7b:5a:fd:f7:82:
         e9:cf:11:0e:c9:9a:8d:92:30:fc:13:34:26:ee:4d:30:d8:41:
         81:09:0b:e1:82:4b:0c:8e:0a:04:04:93:af:00:52:62:85:f9:
         18:2e:9c:b2:49:b3:6f:7e:a6:f8:18:83:01:e5:57:4d:b0:1c:
         90:a6:31:60:ea:04:88:b2:20:27:c5:2b:88:2b:fa:97:6d:8d:
         fc:46:80:ae:9e:9e:1a:fe:b9:30:93:35:53:16:3f:13:40:48:
         e7:2a:c1:d7:77:e9:8f:f2:0b:b9:2b:0c:d6:84:31:e4:a2:b3:
         6a:c8:d3:32:e8:5c:06:78:20:63:9d:88:0e:04:2f:f5:51:a2:
         6e:29:6f:c9:3c:c3:e3:a9:94:07:c4:a6:14:88:dc:7c:b3:a1:
         bc:b5:b8:4d:2d:73:ae:33:bf:4b:b3:3b:1c:34:12:ea:f5:46:
         63:b6:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:35 2025 by rpki-client