Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131312e302f32342d3234203d3e20323730303931.roa
File:                     3139302e3130392e3131312e302f32342d3234203d3e20323730303931.roa (raw, json)
Hash identifier:          OWTnwOkFqKztDdEj8mBSRJngxigB+eNxCPebJyF4xq0=
Subject key identifier:   51:9F:DD:55:F4:12:AC:FB:BF:8C:B3:F4:0E:D8:86:45:AA:ED:98:33
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       3AD79CE10CE1698ED0132A28D38CEEC4286AB2AF
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131312e302f32342d3234203d3e20323730303931.roa
Signing time:             Tue 22 Jul 2025 23:26:20 +0000
ROA not before:           Tue 22 Jul 2025 23:21:20 +0000
ROA not after:            Tue 21 Jul 2026 23:26:20 +0000
asID:                     270091
IP address blocks:        190.109.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d7:9c:e1:0c:e1:69:8e:d0:13:2a:28:d3:8c:ee:c4:28:6a:b2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Jul 22 23:21:20 2025 GMT
            Not After : Jul 21 23:26:20 2026 GMT
        Subject: CN=519FDD55F412ACFBBF8CB3F40ED88645AAED9833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:b9:9c:36:c4:7e:01:24:88:9f:c9:6d:96:
                    31:04:6d:58:fb:58:08:bc:ec:0c:18:18:c7:ed:35:
                    d1:c3:94:e7:17:ef:f2:95:7c:af:4e:58:ae:70:80:
                    64:3e:a1:31:6a:ef:7b:73:be:b4:7f:ef:0d:36:ba:
                    b9:01:eb:70:f5:88:25:d4:cd:63:ca:35:a7:64:05:
                    08:61:c3:13:ef:4c:56:54:1f:0a:11:bd:fd:1d:53:
                    cd:e1:45:c4:d8:19:9e:ea:5a:a8:30:7b:7e:cd:ea:
                    18:0c:77:59:8e:3a:33:91:d1:07:aa:61:ca:95:ac:
                    87:80:c4:ba:57:ac:cb:c6:dc:01:7d:cb:63:60:d2:
                    25:38:76:bc:ff:dc:f2:76:c4:8b:b4:ec:9a:87:f1:
                    8c:0c:e3:0a:1e:f0:ff:38:b8:6c:c1:b4:b8:71:7b:
                    8f:a8:d4:14:e6:80:fb:e0:7a:3b:9b:11:4b:6d:26:
                    6c:59:10:fc:7a:34:60:40:7b:b3:3c:86:d9:b4:c9:
                    83:73:23:b5:b3:1c:2c:ac:78:62:4e:06:19:1e:3c:
                    55:4c:41:09:66:e9:0f:c1:f7:c4:5c:ff:96:31:ee:
                    8b:1a:a6:67:56:7b:5f:35:c0:7a:f0:de:75:d0:dc:
                    3f:5f:b5:5e:5e:4c:c1:19:b5:17:3d:a0:d7:55:cb:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:DD:55:F4:12:AC:FB:BF:8C:B3:F4:0E:D8:86:45:AA:ED:98:33
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131312e302f32342d3234203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:fb:c0:13:40:97:ba:41:c9:32:db:af:d1:1d:44:fa:75:7a:
         14:76:0e:4e:66:27:67:06:db:ca:db:01:a7:b7:94:9b:54:f5:
         94:3c:fe:bd:79:12:e3:6d:8f:c8:93:da:1a:6b:3a:1e:62:05:
         f4:45:f3:54:72:8c:a7:38:56:fa:00:7a:cd:59:9a:c8:0e:8f:
         74:2a:d8:10:12:1c:1b:5d:2b:65:da:85:0b:ff:19:d9:76:4e:
         c1:cd:42:92:2f:58:e8:32:e4:34:f6:58:08:bc:c8:4a:db:ca:
         01:33:4e:8d:98:dd:4a:e8:ae:b7:54:b5:1c:e0:90:00:b9:94:
         c1:6a:75:86:d8:2e:4b:f9:bd:27:05:f8:23:5e:c5:07:7a:96:
         ae:64:12:bf:b0:6e:13:d2:59:eb:16:5e:76:3c:23:2a:58:95:
         52:f5:01:d1:77:c2:d1:bf:63:0c:27:c3:42:cd:77:4a:70:97:
         b6:1e:20:f5:5f:f2:e8:78:b5:89:86:07:e4:10:cd:2c:68:8d:
         85:a8:48:6e:15:aa:48:08:74:b8:3d:ff:27:3a:d0:09:05:bc:
         12:81:d1:63:d8:a5:ed:ad:70:04:78:bd:ce:e0:00:88:cf:5f:
         9a:f2:84:f7:5b:f3:0a:4c:90:6e:e1:04:fa:a0:9f:68:5d:21:
         68:c6:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:50 2025 by rpki-client