Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e203239383032.roa
File:                     3139302e3131342e31342e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          37uJSC8PgOkwh1AnhAjwMZkBjkdFDP2lWhGNEZn09OM=
Subject key identifier:   DC:D9:71:4E:55:AF:D5:A9:9F:A4:42:5C:ED:8A:1F:46:69:3A:87:B8
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       6F1A6F187C39EA8E64E361F14516B2E94FD0E79C
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 05 Mar 2026 18:33:01 +0000
ROA not before:           Thu 05 Mar 2026 18:28:01 +0000
ROA not after:            Thu 04 Mar 2027 18:33:01 +0000
asID:                     29802
IP address blocks:        190.114.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Mar 2026 11:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1a:6f:18:7c:39:ea:8e:64:e3:61:f1:45:16:b2:e9:4f:d0:e7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:01 2026 GMT
            Not After : Mar  4 18:33:01 2027 GMT
        Subject: CN=DCD9714E55AFD5A99FA4425CED8A1F46693A87B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:bb:a1:aa:fd:04:01:2b:44:b8:96:21:d7:
                    86:c1:44:80:3f:ac:9c:6a:76:ca:83:ac:f2:5f:9e:
                    43:57:4c:bf:a2:a4:d3:f6:ab:92:ef:53:f6:3c:19:
                    00:b2:fa:6a:34:48:ab:d8:4c:2c:57:bd:83:ea:c4:
                    15:7f:81:11:12:e6:01:c1:82:e5:20:1b:69:bd:e2:
                    ee:49:a3:65:8c:d1:7d:76:de:24:e0:65:5f:fe:af:
                    a2:4f:2b:8a:3c:69:73:ff:0d:9b:10:f6:5e:f6:61:
                    55:e6:da:a8:4c:ed:a6:b1:39:a6:fe:f9:f0:11:77:
                    54:1a:7d:5b:d6:43:f1:4d:90:2e:12:07:80:41:f3:
                    37:68:19:1d:10:73:21:b0:18:70:d2:60:e8:3a:fa:
                    51:35:68:26:cc:27:8c:24:9e:51:7e:c8:e3:a8:a9:
                    bf:b6:3e:b4:70:e4:c8:f3:34:54:57:6a:ff:ec:b0:
                    25:57:d1:68:5d:a0:85:c4:76:70:ae:df:36:44:de:
                    f1:c1:49:77:2f:e7:46:39:a2:15:ed:f7:84:1b:e8:
                    3a:d2:6a:15:8c:15:17:72:08:31:94:ef:f1:d0:18:
                    ba:11:bb:1f:57:6b:a6:e4:83:d5:85:62:f7:02:97:
                    23:95:fc:13:4b:66:dc:f8:2f:6e:a9:79:8d:c6:c1:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D9:71:4E:55:AF:D5:A9:9F:A4:42:5C:ED:8A:1F:46:69:3A:87:B8
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:8a:3a:76:09:98:b7:16:8c:ca:5b:e5:be:23:60:d8:13:c0:
         c5:f6:a9:83:d1:72:fd:7b:20:2a:c6:03:a7:eb:63:1b:9d:56:
         65:86:b0:2f:96:43:51:ff:b0:90:27:e3:ca:3c:10:6b:d7:a3:
         79:70:05:6b:b1:fc:e1:99:9c:86:17:30:ba:2f:30:dc:fb:e7:
         3d:51:50:d1:10:6b:f7:8f:78:7e:b0:dd:37:61:70:24:b8:e9:
         48:e8:fc:cf:cd:45:0b:77:59:81:96:d2:dd:8e:dd:e3:d5:cc:
         12:98:0c:e0:92:05:e2:df:a0:b5:75:07:73:3e:7e:99:31:6c:
         aa:a0:16:ed:32:c2:dc:aa:1f:7b:e8:f3:16:69:d0:d5:a5:15:
         d7:f2:bd:68:7a:44:6d:6d:ef:59:78:ba:12:3e:b5:9c:a4:8c:
         43:7b:31:d7:25:fa:7f:79:5e:24:6c:45:7a:ef:53:29:41:ba:
         fe:5f:2e:1c:83:63:e5:36:1e:f1:cf:5c:02:90:ed:62:71:79:
         21:a8:19:06:5f:63:2f:3e:40:49:8e:e2:bf:79:d3:6f:da:8e:
         fc:46:21:af:b0:39:40:8a:9b:0e:31:40:8e:eb:f5:5f:0b:22:
         b7:ab:3d:15:23:07:9e:8d:28:5e:ec:b8:31:66:29:c3:6d:24:
         b7:44:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:21:15 2026 by rpki-client