Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e312e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e312e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          rp24DQR13weAG7hqCGfAW4GTKKhTbWTfVyuP3ovnjaI=
Subject key identifier:   4E:6E:B2:D2:38:39:B1:20:D2:81:A8:44:D4:B8:73:FE:17:FF:84:61
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       14F1106579E0414292573587217C8FA0B157FF1B
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e312e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 05 Mar 2026 18:33:02 +0000
ROA not before:           Thu 05 Mar 2026 18:28:02 +0000
ROA not after:            Thu 04 Mar 2027 18:33:02 +0000
asID:                     8100
IP address blocks:        190.114.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Mar 2026 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f1:10:65:79:e0:41:42:92:57:35:87:21:7c:8f:a0:b1:57:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:02 2026 GMT
            Not After : Mar  4 18:33:02 2027 GMT
        Subject: CN=4E6EB2D23839B120D281A844D4B873FE17FF8461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:3b:68:c6:80:1f:27:4a:dc:02:51:34:f7:
                    29:ac:41:24:2d:39:d9:04:96:8d:7e:93:73:b8:0b:
                    bb:3a:2d:a7:54:ab:27:8a:21:6f:4e:51:67:00:ab:
                    5c:be:a0:00:64:d3:cc:b3:86:70:61:ac:8a:82:6d:
                    fd:54:91:f4:4c:1f:b1:27:e8:d4:9d:5c:04:f4:df:
                    ad:17:19:d7:70:d5:ca:0f:af:09:eb:0c:3c:39:c9:
                    a5:3b:a9:26:a9:06:33:5b:1a:9b:01:70:8b:77:69:
                    7d:ec:6c:b5:38:7d:b0:d8:09:f1:b2:0d:0d:a6:cb:
                    1c:48:96:38:fa:28:56:ce:51:16:5e:03:c1:94:75:
                    c6:fa:fe:a8:67:c8:7c:a6:5c:67:22:f0:ff:35:0d:
                    7c:4e:14:66:b3:f2:8d:79:bb:f0:66:af:24:f7:00:
                    1e:11:59:49:06:ad:9a:53:ea:5d:81:61:b3:41:1c:
                    71:35:55:a3:85:7f:1c:be:20:1d:84:90:c0:84:09:
                    9d:0c:fa:3d:b6:33:76:1f:c1:0d:f4:5e:a5:f4:e4:
                    3b:cf:cb:0b:f1:d9:b8:3c:9d:8d:47:a1:89:22:48:
                    70:7b:a2:cf:4a:9c:e4:73:16:0c:1f:9a:87:59:44:
                    5d:42:e8:b5:61:49:e0:eb:9b:c0:55:54:00:22:dc:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6E:B2:D2:38:39:B1:20:D2:81:A8:44:D4:B8:73:FE:17:FF:84:61
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e312e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c7:51:a7:e3:68:96:8c:18:9c:c3:2a:45:1f:83:be:b3:67:
         00:60:09:7b:fd:33:53:86:60:a9:ea:f6:b8:4d:d8:8b:89:ce:
         24:81:f4:23:00:dd:22:22:34:64:28:e7:cf:d4:28:00:ae:a7:
         60:ad:b4:51:36:83:c3:2d:a1:f4:34:9f:f6:63:27:fc:65:91:
         a4:9f:d6:d3:dc:26:01:62:7d:c3:f3:29:63:dc:51:1f:27:37:
         46:6a:40:94:10:6a:9e:02:58:4c:4e:3d:b9:c2:c0:00:a7:d7:
         7c:f0:8b:33:07:1a:9f:83:1e:43:82:2d:a2:9d:e9:34:c3:d7:
         5b:51:fb:63:99:f4:55:7f:ad:29:d4:e7:48:e6:6e:27:80:a1:
         c3:96:2e:f9:ab:19:98:bb:1e:eb:b3:a0:a8:02:2e:38:e8:f0:
         71:4b:a5:51:78:05:8d:3a:15:57:97:6e:8d:68:68:ea:92:67:
         ee:49:55:27:44:1a:ce:96:6a:aa:ec:f8:78:55:5b:67:cb:5b:
         c3:aa:9e:b2:da:dc:f8:74:dc:12:96:9d:08:3f:15:c1:3a:eb:
         26:4e:17:45:26:b5:f6:a4:58:25:08:87:52:35:73:24:8d:3c:
         97:d5:35:cb:83:d9:03:7a:44:4e:9e:6f:4d:8d:c6:e9:c9:5e:
         38:de:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:37:21 2026 by rpki-client