Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e36382e302f32342d3234203d3e203237383939.roa
File:                     3230302e362e36382e302f32342d3234203d3e203237383939.roa (raw, json)
Hash identifier:          7BBd7Hznhcmm8Ul3BLiiH8kwmxTxAhLTMk3YwPgWTtM=
Subject key identifier:   3B:07:3C:B4:03:E9:B8:9B:44:52:7F:5E:2A:AD:0C:89:71:EA:C0:23
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       439127EFF0875F0AABC964FFEF715F4EE3A12911
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e36382e302f32342d3234203d3e203237383939.roa
Signing time:             Thu 11 Jun 2026 19:10:00 +0000
ROA not before:           Thu 11 Jun 2026 19:05:00 +0000
ROA not after:            Thu 10 Jun 2027 19:10:00 +0000
asID:                     27899
IP address blocks:        200.6.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:27:ef:f0:87:5f:0a:ab:c9:64:ff:ef:71:5f:4e:e3:a1:29:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jun 11 19:05:00 2026 GMT
            Not After : Jun 10 19:10:00 2027 GMT
        Subject: CN=3B073CB403E9B89B44527F5E2AAD0C8971EAC023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:78:ed:95:4d:94:c4:fd:2f:68:87:d2:f8:
                    db:19:7c:2e:8d:be:17:05:73:2b:43:80:d7:64:eb:
                    8c:d7:ec:33:20:3f:75:a8:3f:09:ee:d0:ca:92:3e:
                    ee:46:4c:05:16:fa:4a:a8:94:91:e3:83:cb:df:22:
                    51:18:a1:23:8a:84:5b:9b:dc:fc:0e:56:d9:0b:fb:
                    9e:45:06:0e:fb:05:66:c3:c2:cb:69:d9:aa:e0:b0:
                    c7:79:60:f7:59:cc:80:44:04:a3:c2:1d:77:42:6a:
                    a1:21:85:6a:4a:3c:0a:f6:10:c0:ed:95:69:91:b2:
                    4a:07:88:8b:8d:8a:e6:f6:e3:b2:3e:4a:e8:c2:78:
                    da:41:83:90:d7:bc:76:43:23:83:7c:5b:97:0c:48:
                    34:a2:c3:76:67:21:63:85:fd:9c:78:30:70:00:c7:
                    ae:3d:92:92:af:de:e5:b2:8b:6c:22:45:11:fb:04:
                    bb:f4:3c:24:8e:57:b1:92:02:d0:2b:cb:69:59:6c:
                    41:75:7f:9e:f6:b0:fd:bb:25:cb:59:83:bb:88:45:
                    6d:09:71:ac:e3:a1:1a:66:23:a3:97:66:da:5b:99:
                    35:e6:88:94:95:a4:fd:12:75:65:77:70:2f:2e:7a:
                    2e:1e:83:83:b2:20:3f:bc:81:41:b7:7f:bc:7a:e3:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:07:3C:B4:03:E9:B8:9B:44:52:7F:5E:2A:AD:0C:89:71:EA:C0:23
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e36382e302f32342d3234203d3e203237383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:1c:af:74:6a:ef:9f:f5:41:47:f1:45:87:f3:ed:c8:22:
         b6:7a:1b:60:c5:8d:06:e4:29:22:55:2f:86:70:d3:64:8e:23:
         ed:2f:25:34:fb:9d:78:18:a2:92:3e:8e:ed:fa:a3:d2:10:26:
         95:99:4b:21:97:5f:d1:94:a1:f4:54:0e:68:ff:16:22:39:e9:
         b4:94:f3:e1:6d:09:9c:9e:2f:d6:0c:42:12:07:e3:6f:a1:6a:
         f9:35:cb:61:ba:5a:eb:b9:9a:39:37:ab:e3:19:7b:3d:6f:36:
         55:9f:f6:c4:20:b6:09:04:dd:4b:6b:c9:df:5f:7f:ec:c5:c7:
         38:08:11:ed:b2:a1:ee:a3:16:70:c1:92:f7:99:27:74:16:35:
         6d:9f:00:59:a1:84:7e:2f:eb:a9:94:da:db:10:94:1b:8f:8f:
         ea:82:15:0e:e6:31:6c:8e:ac:b5:53:20:9c:a7:93:07:b8:33:
         8d:60:77:2a:69:f1:ec:3b:57:b7:e8:15:29:41:0c:23:a7:44:
         8a:76:0b:51:47:ef:d4:4b:a7:43:bd:7c:66:35:db:75:de:bc:
         e1:08:1e:59:6e:42:7c:e2:74:a5:94:97:05:3a:22:53:52:a5:
         3d:52:41:be:66:fd:50:c2:91:a9:ae:09:e7:d6:6b:7e:4f:8b:
         bf:b7:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:12:47 2026 by rpki-client