Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e302e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          itKBqqHs/ftLYqNkYjCz4D4sgMTgNDCKunsnxkCS/6Q=
Subject key identifier:   CD:DB:7E:6B:B4:F7:D1:F7:B2:FD:2A:7C:DE:81:65:C1:BB:96:7D:79
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       0A3585461CB815203F0CC396632A6009C7018E57
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 05 Mar 2026 18:33:02 +0000
ROA not before:           Thu 05 Mar 2026 18:28:02 +0000
ROA not after:            Thu 04 Mar 2027 18:33:02 +0000
asID:                     8100
IP address blocks:        190.114.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Mar 2026 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:85:46:1c:b8:15:20:3f:0c:c3:96:63:2a:60:09:c7:01:8e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:02 2026 GMT
            Not After : Mar  4 18:33:02 2027 GMT
        Subject: CN=CDDB7E6BB4F7D1F7B2FD2A7CDE8165C1BB967D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:fb:84:dd:12:6e:93:43:9e:7b:1d:2b:31:
                    2f:51:f3:5f:6d:1f:42:b8:b1:d8:ab:eb:be:77:2a:
                    dd:72:fd:c9:4a:bd:9c:18:7c:80:3c:49:4d:af:51:
                    a3:81:cf:d5:c0:40:81:51:a3:c8:ba:fd:89:d3:35:
                    fc:2a:b5:ef:78:35:61:49:6e:43:a4:e4:10:bc:41:
                    15:e2:80:b4:23:1f:42:aa:0f:df:c7:42:2a:46:5c:
                    10:da:20:e0:3b:e8:72:f0:be:1a:cf:38:38:98:45:
                    01:31:78:9c:43:35:55:a6:28:89:dc:fe:b4:9e:0a:
                    dc:95:a1:5a:e8:53:3a:94:17:8c:cf:40:18:36:c5:
                    a2:59:a2:a2:c5:11:27:4e:e6:e4:2f:4c:d4:e6:ba:
                    d5:73:80:bd:c9:94:d0:2a:26:43:3c:06:a9:a2:df:
                    07:e9:7c:34:73:03:f8:98:74:3e:3b:c6:3a:fd:54:
                    06:79:2f:e4:16:39:57:af:ef:c0:22:71:1e:13:85:
                    a2:f7:00:14:f2:9e:ed:c4:f1:5a:78:f9:33:cc:c5:
                    dc:33:b2:df:b2:2b:a7:cf:1b:73:a6:4b:55:8f:5d:
                    b4:3c:a7:31:4a:35:45:31:9c:f3:71:7a:d9:9e:20:
                    8a:21:03:fd:c4:d4:c4:bb:7d:b0:7b:09:8c:ad:7d:
                    9e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DB:7E:6B:B4:F7:D1:F7:B2:FD:2A:7C:DE:81:65:C1:BB:96:7D:79
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:fd:6c:9e:11:b2:8a:10:dd:79:01:8f:b3:bb:2f:67:d2:88:
         13:fc:89:9f:22:37:0f:7e:53:2f:14:91:83:88:47:53:29:da:
         c8:c2:f8:b1:31:23:13:73:56:b6:7e:c7:bc:33:98:08:5f:1b:
         19:3a:1a:2a:26:03:cc:50:37:9a:ae:4f:c4:f9:2c:78:9f:8f:
         f9:32:8c:50:02:94:b9:75:8c:a4:71:a0:7f:ea:17:99:bd:5e:
         80:76:63:bf:e6:b7:80:1c:6e:43:f2:00:3c:1a:cd:42:6a:99:
         26:01:07:7f:d1:f5:61:f6:c9:11:62:da:50:16:b9:cc:bf:67:
         a2:44:73:95:a9:b7:d4:5b:b6:fd:ad:22:9b:16:44:be:2b:97:
         1c:3e:c7:3d:89:d6:a3:d9:ba:22:fb:4f:cc:1e:89:a6:73:b6:
         77:42:71:9b:a3:d5:ae:1b:23:c4:0f:5a:92:0d:a4:6e:00:fc:
         24:d1:40:3c:f6:b2:d1:bc:e7:11:31:84:ad:fc:1d:c6:a0:37:
         07:4a:1f:e1:5f:00:02:67:0b:8f:8a:32:8c:3b:6a:5c:ce:3f:
         7a:f9:fd:02:ec:09:55:e7:5f:71:e6:09:50:d5:29:c6:64:d1:
         07:4a:34:59:57:09:d9:9d:c6:0e:c2:f5:83:83:8c:ad:a7:df:
         52:8e:da:50
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUCjWFRhy4FSA/DMOWYypgCccBjlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI5OEZDQ0RGQzg3NTQzQTYyOUY4NzU0NDkzQTAyNjUy
N0VCRjUyODAeFw0yNjAzMDUxODI4MDJaFw0yNzAzMDQxODMzMDJaMDMxMTAvBgNV
BAMTKENEREI3RTZCQjRGN0QxRjdCMkZEMkE3Q0RFODE2NUMxQkI5NjdENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKsvuE3RJuk0Oeex0rMS9R819t
H0K4sdir6753Kt1y/clKvZwYfIA8SU2vUaOBz9XAQIFRo8i6/YnTNfwqte94NWFJ
bkOk5BC8QRXigLQjH0KqD9/HQipGXBDaIOA76HLwvhrPODiYRQExeJxDNVWmKInc
/rSeCtyVoVroUzqUF4zPQBg2xaJZoqLFESdO5uQvTNTmutVzgL3JlNAqJkM8Bqmi
3wfpfDRzA/iYdD47xjr9VAZ5L+QWOVev78AicR4ThaL3ABTynu3E8Vp4+TPMxdwz
st+yK6fPG3OmS1WPXbQ8pzFKNUUxnPNxetmeIIohA/3E1MS7fbB7CYytfZ5ZAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUzdt+a7T30fey/Sp83oFlwbuWfXkwHwYDVR0j
BBgwFoAUm5j8zfyHVDpin4dUSToCZSfr9SgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjY0QkRDRTdGRThERjZGRDZCMTM3Rjg2NjA3RTlCNDkx
MDk5QkM2MjVFRDkwQkMzN0JCOUZDODAwMEFGQ0FGLzAvOUI5OEZDQ0RGQzg3NTQz
QTYyOUY4NzU0NDkzQTAyNjUyN0VCRjUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Qjk4RkNDREZDODc1NDNBNjI5
Rjg3NTQ0OTNBMDI2NTI3RUJGNTI4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDY2NEJEQ0U3RkU4REY2RkQ2QjEzN0Y4NjYwN0U5QjQ5MTA5OUJDNjI1
RUQ5MEJDMzdCQjlGQzgwMDBBRkNBRi8wLzMxMzkzMDJlMzEzMTM0MmUzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzEzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnIAMA0GCSqG
SIb3DQEBCwUAA4IBAQAN/WyeEbKKEN15AY+zuy9n0ogT/ImfIjcPflMvFJGDiEdT
KdrIwvixMSMTc1a2fse8M5gIXxsZOhoqJgPMUDeark/E+Sx4n4/5MoxQApS5dYyk
caB/6heZvV6AdmO/5reAHG5D8gA8Gs1CapkmAQd/0fVh9skRYtpQFrnMv2eiRHOV
qbfUW7b9rSKbFkS+K5ccPsc9idaj2boi+0/MHommc7Z3QnGbo9WuGyPED1qSDaRu
APwk0UA89rLRvOcRMYSt/B3GoDcHSh/hXwACZwuPijKMO2pczj96+f0C7AlV519x
5glQ1SnGZNEHSjRZVwnZncYOwvWDg4ytp99SjtpQ
-----END CERTIFICATE-----
Generated at Wed Mar 18 10:34:32 2026 by rpki-client