Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32312d3231203d3e203439393135.roa
File:                     3139302e3131342e302e302f32312d3231203d3e203439393135.roa (raw, json)
Hash identifier:          QZiMlsVVY6E7GcYW4pBTq8uCsYO0H7bUQU2I3b9k0wc=
Subject key identifier:   1C:CC:28:F2:58:14:21:DE:E4:8F:87:7D:E8:53:99:CC:DA:84:6D:7C
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       32B4653E03AB4AC717201FE92106EAFEAD70050E
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32312d3231203d3e203439393135.roa
Signing time:             Mon 01 Jun 2026 13:05:00 +0000
ROA not before:           Mon 01 Jun 2026 13:00:00 +0000
ROA not after:            Mon 31 May 2027 13:05:00 +0000
asID:                     49915
IP address blocks:        190.114.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 17:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b4:65:3e:03:ab:4a:c7:17:20:1f:e9:21:06:ea:fe:ad:70:05:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Jun  1 13:00:00 2026 GMT
            Not After : May 31 13:05:00 2027 GMT
        Subject: CN=1CCC28F2581421DEE48F877DE85399CCDA846D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:46:d4:81:c0:ea:df:6c:3d:8c:77:6b:71:
                    91:c1:a4:bf:2f:c0:7e:da:6a:fe:03:ca:65:13:d8:
                    61:b9:1a:cf:71:ae:a7:48:3a:b8:81:7b:a3:18:5d:
                    15:30:b6:c4:9b:15:2b:a5:ad:e5:b0:6a:fa:f3:c1:
                    00:1f:8d:29:2a:9e:7a:38:c6:ee:94:59:65:29:98:
                    3b:bf:68:8c:c5:15:3f:f0:17:89:ea:11:c2:e8:69:
                    09:a5:8a:de:83:d4:b7:e2:59:50:1d:ae:c7:80:26:
                    f9:52:15:73:ca:9c:b3:eb:de:b9:29:34:44:6b:fe:
                    0b:3c:68:0f:40:78:ff:5a:1d:65:2f:32:49:5d:ae:
                    fd:55:25:04:cf:a3:d6:55:67:b1:22:f6:8b:94:b9:
                    45:c3:3f:20:ce:fc:15:13:6e:ec:ae:2e:7d:28:05:
                    63:c4:c6:91:37:e0:51:83:2c:a9:c6:74:d7:a8:89:
                    24:7d:b9:4e:8d:97:0d:3c:3d:bf:9d:3d:a3:40:ec:
                    1d:f3:57:68:34:b0:34:81:51:6e:23:98:ed:73:0c:
                    22:28:ca:0c:41:c3:ea:ec:54:23:c0:b2:06:ac:41:
                    15:60:e2:55:65:d5:74:59:8c:a4:46:3f:2d:fa:9a:
                    fb:8e:7c:b9:c6:a0:f4:d1:b9:33:c7:e7:1d:70:1b:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CC:28:F2:58:14:21:DE:E4:8F:87:7D:E8:53:99:CC:DA:84:6D:7C
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32312d3231203d3e203439393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:95:8c:c3:69:d1:dc:28:75:98:ee:d5:c5:39:8e:1e:c9:fa:
         7c:e4:c5:fe:c0:05:a7:07:f4:1b:74:61:a8:c6:8e:08:85:7b:
         0d:bf:bd:b2:91:bd:7b:6a:b4:3a:a4:79:c7:24:14:98:47:dd:
         fa:44:79:09:2c:bd:2b:e4:a6:a5:24:13:8b:c5:ee:d5:d9:27:
         08:37:b0:a2:58:a7:e7:a2:7d:d4:cc:e0:96:fb:68:6e:38:9d:
         e2:08:fd:21:92:7a:6b:3b:10:2b:8c:5f:4a:6e:60:28:16:28:
         80:c4:a6:64:e7:33:26:16:5c:6e:fa:cc:72:2b:1a:24:04:0e:
         11:ed:cd:c3:c7:c6:1e:6f:f3:a0:34:6c:7a:53:bc:a2:65:e5:
         b1:91:c1:17:54:bd:81:1a:6c:63:73:ba:e2:64:89:d3:bc:d8:
         6b:db:31:bf:3d:69:22:b8:c3:75:ff:ae:ba:b0:80:c9:1a:46:
         58:5f:21:a1:f1:d1:c4:9e:24:39:59:12:75:a4:22:c3:5b:2c:
         21:98:2f:b5:3f:38:6a:b4:49:ad:4e:5e:a0:23:70:a4:d9:b9:
         f0:09:cd:64:74:d7:c3:f0:76:7c:81:bb:6c:97:f3:ee:a4:cc:
         49:23:b3:49:c1:7f:fb:70:c6:ee:b0:17:7d:64:e6:29:37:f9:
         f4:22:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:35:15 2026 by rpki-client