Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131302e302f32342d3234203d3e20323735303135.roa
File:                     3139302e3130392e3131302e302f32342d3234203d3e20323735303135.roa (raw, json)
Hash identifier:          ZkMuVIf2/ZjnWcK7t+FB8sNkXECRV8l4ZL5+qxRPoXE=
Subject key identifier:   5B:AE:7C:42:98:C7:97:5B:AA:09:89:F2:37:14:95:1A:28:84:32:87
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       096AE7690BCFE90172BA72E17819B235DD67F71C
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131302e302f32342d3234203d3e20323735303135.roa
Signing time:             Thu 27 Aug 2026 00:00:00 +0000
ROA not before:           Wed 26 Aug 2026 23:55:00 +0000
ROA not after:            Thu 26 Aug 2027 00:00:00 +0000
asID:                     275015
IP address blocks:        190.109.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6a:e7:69:0b:cf:e9:01:72:ba:72:e1:78:19:b2:35:dd:67:f7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Aug 26 23:55:00 2026 GMT
            Not After : Aug 26 00:00:00 2027 GMT
        Subject: CN=5BAE7C4298C7975BAA0989F23714951A28843287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:ec:18:ac:59:e8:a9:0f:7d:e9:bc:6b:61:
                    73:eb:30:a7:4d:ff:9f:44:d0:d4:ba:01:0a:11:c1:
                    65:4f:ad:d3:16:41:e7:ca:28:22:89:b6:54:85:f7:
                    12:cc:84:39:bd:a5:b6:f5:c7:0a:db:f2:42:ab:2f:
                    eb:96:86:2a:a8:d8:fd:a3:6a:bf:9e:cf:e5:56:0a:
                    a7:60:1c:54:a6:16:fc:ff:b9:71:48:18:e5:58:6c:
                    46:b7:4c:9f:f8:82:a1:dc:bf:99:16:6c:92:fb:66:
                    38:b9:2b:79:01:ff:1e:07:86:64:a7:6f:b7:40:4f:
                    5e:10:46:6a:b2:2c:41:85:42:01:96:b1:c8:68:9b:
                    d3:54:6e:d8:e8:c3:5c:a2:b3:7a:88:32:e6:7a:c8:
                    b2:32:b2:18:9e:5a:c4:67:ac:d1:ee:5b:45:a6:ef:
                    fd:1f:8c:36:ac:fe:a1:fe:f0:f6:ca:6e:94:fe:49:
                    fe:62:85:86:1b:27:38:a5:6b:3c:34:49:18:87:72:
                    7f:ac:f3:f5:a5:6d:bf:5b:c1:24:a7:72:4d:d8:52:
                    65:4c:a4:f7:15:50:8b:c1:a2:6e:ad:be:e8:31:56:
                    9e:a9:84:f3:c1:d3:cb:69:e0:2e:91:a2:d4:cb:51:
                    6f:5c:7a:d2:78:94:31:41:65:4f:fa:9d:26:65:4f:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AE:7C:42:98:C7:97:5B:AA:09:89:F2:37:14:95:1A:28:84:32:87
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3131302e302f32342d3234203d3e20323735303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:df:1b:37:32:9e:e8:3e:d0:5b:0e:84:fd:b1:fd:e8:06:48:
         8d:b6:58:f9:cd:0f:28:88:21:13:a8:4d:64:25:96:31:53:2c:
         7b:9c:39:61:eb:71:0f:4a:a3:71:8e:c4:22:d2:d9:61:d2:ca:
         3e:a1:97:38:0d:da:11:d6:17:9e:3c:bc:e6:be:fa:42:37:99:
         87:2b:d6:07:c1:20:9d:ca:73:23:5b:e2:a2:c5:54:10:52:35:
         01:4f:c8:80:c8:48:80:f4:8b:a0:f6:46:d0:38:be:08:70:b3:
         60:ac:1b:e3:ad:99:32:70:53:e6:80:63:c2:c3:0e:f5:1f:87:
         4a:0e:20:98:0c:28:b5:aa:a0:00:85:27:39:f6:36:ee:66:93:
         18:a8:70:5d:9d:ae:61:1c:4b:0d:56:5b:a0:86:de:7c:6b:eb:
         84:62:19:94:4c:ef:cc:5d:5d:0f:b2:23:1d:af:41:3e:14:bf:
         da:ce:eb:1f:49:72:66:9c:de:54:10:af:de:f7:e4:a1:b2:b4:
         78:e8:1e:bd:30:1a:96:c8:70:f1:44:38:a7:e6:14:3f:8b:69:
         d3:c2:d1:35:0c:9d:b8:3d:e4:a5:40:82:1e:ba:a0:7d:a7:e5:
         2c:3e:1f:47:b7:db:8e:2e:6b:ad:1f:ac:b4:0a:7b:72:70:2e:
         24:44:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:05:48 2026 by rpki-client