Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa
File:                     3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa (raw, json)
Hash identifier:          xe6yZMA0te/vyxXZ1n5YYuYM2V03yo++DG2DVuORJCA=
Subject key identifier:   2F:8A:2C:17:92:A3:DF:F7:BF:FF:F6:71:90:47:B1:E3:6A:FA:D8:DD
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       786673B7BA74B8F7078105B1496A5E04F61E10AA
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa
Signing time:             Tue 22 Jul 2025 23:26:22 +0000
ROA not before:           Tue 22 Jul 2025 23:21:22 +0000
ROA not after:            Tue 21 Jul 2026 23:26:22 +0000
asID:                     270091
IP address blocks:        190.109.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:66:73:b7:ba:74:b8:f7:07:81:05:b1:49:6a:5e:04:f6:1e:10:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Jul 22 23:21:22 2025 GMT
            Not After : Jul 21 23:26:22 2026 GMT
        Subject: CN=2F8A2C1792A3DFF7BFFFF6719047B1E36AFAD8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:c4:ac:7f:75:f0:eb:cb:10:ff:86:b5:08:
                    f6:8f:60:1d:5c:f9:18:08:f4:e1:7c:27:1e:c1:e5:
                    b9:fd:14:37:18:5e:cd:83:c4:cf:e9:0b:0f:bc:a2:
                    f3:ad:ad:e3:57:ce:9d:d4:f1:03:21:9d:3f:93:f5:
                    56:1a:11:14:28:66:d7:97:cd:9d:a3:61:3b:92:47:
                    ba:15:90:22:8e:d5:6c:2e:15:19:b0:c2:b7:cd:d7:
                    23:31:16:d3:5b:8d:73:86:6b:42:61:4d:db:5c:d2:
                    56:24:3e:16:26:3c:ba:e7:ac:c2:f8:c9:f8:0d:2d:
                    e5:1f:9c:10:99:2b:3e:12:72:f2:42:f0:2c:ab:74:
                    c4:a4:b4:e5:52:94:f9:d5:66:37:3c:16:c7:da:43:
                    e4:3b:1d:9d:fc:90:16:08:6f:87:00:2b:b2:f0:29:
                    b7:af:81:37:11:ac:10:01:d0:c8:e6:01:19:e5:24:
                    17:70:86:1e:3f:66:6b:db:69:04:44:e9:17:35:21:
                    3a:fc:f4:1d:47:1b:cf:16:21:26:12:39:02:f9:4b:
                    e8:6e:81:88:39:ab:8b:25:f7:1c:06:53:75:05:9a:
                    cf:70:58:85:b1:7c:91:29:bd:b0:7f:29:42:95:01:
                    c7:e0:0c:4e:33:3c:78:eb:7b:3e:84:5e:f4:e1:98:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:2C:17:92:A3:DF:F7:BF:FF:F6:71:90:47:B1:E3:6A:FA:D8:DD
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:ea:02:e6:cb:3d:4d:1b:1a:6f:5a:b2:e3:0e:30:18:e9:
         8a:75:f2:44:3c:aa:a0:03:2b:3a:8f:33:75:86:8a:a9:ec:e9:
         54:98:f6:67:f9:c5:0d:ed:06:e0:60:dd:90:98:06:e8:bb:fc:
         51:cf:4a:38:4d:6d:fb:ac:6c:56:4b:3c:ab:fc:ba:1e:60:b0:
         8e:11:85:92:98:85:38:54:74:be:99:d8:bd:2b:93:d6:be:b7:
         21:48:80:32:f8:9c:fe:75:f2:2f:3a:b9:0e:7f:2f:73:12:01:
         78:fa:65:ea:01:f2:42:32:0b:28:f0:6d:f9:89:9c:05:c2:5b:
         2f:7c:1d:05:c5:2d:53:5e:92:9f:3c:ca:d1:23:25:3b:09:6e:
         9f:68:23:31:b0:19:7e:eb:55:6c:a5:d3:ae:b2:6c:ee:c4:43:
         0a:d9:c5:73:7a:36:8e:10:61:7b:d3:42:a0:86:2b:1a:58:6c:
         98:69:02:e5:e8:41:a5:aa:a1:e3:00:5d:48:48:ff:8b:4f:69:
         ca:97:fd:32:b3:cc:fc:d4:c0:36:52:7b:ad:8b:c4:e7:e9:73:
         a8:33:c2:ae:8d:e9:ee:8f:50:a1:eb:bd:b5:c2:7d:12:8b:5c:
         ec:83:37:9e:d3:39:d8:88:69:04:58:b2:8f:cc:e2:74:ef:eb:
         d9:cf:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:50:18 2025 by rpki-client