Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31352e302f32342d3234203d3e203239383032.roa
File:                     3139302e3131342e31352e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          m+F0Pkkm4Dr1tshjrKJW5sHB/tduSz/m6sxGRGXqjVQ=
Subject key identifier:   E2:EF:05:F6:D3:9C:84:9F:4A:21:56:61:D0:32:12:59:E1:86:D6:7F
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       31C6DC6D1FA9444D701A56EFD8BF7D5AC65F629C
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31352e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 05 Mar 2026 18:33:00 +0000
ROA not before:           Thu 05 Mar 2026 18:28:00 +0000
ROA not after:            Thu 04 Mar 2027 18:33:00 +0000
asID:                     29802
IP address blocks:        190.114.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Mar 2026 11:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c6:dc:6d:1f:a9:44:4d:70:1a:56:ef:d8:bf:7d:5a:c6:5f:62:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:00 2026 GMT
            Not After : Mar  4 18:33:00 2027 GMT
        Subject: CN=E2EF05F6D39C849F4A215661D0321259E186D67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:80:86:92:98:ce:23:3e:35:48:1c:c9:94:
                    54:f0:c7:6d:55:96:1f:ad:81:91:ad:20:3a:a0:81:
                    40:0e:03:d7:23:7d:c1:8c:1e:73:ed:2f:1f:46:d5:
                    74:30:69:a1:00:03:2c:7b:54:90:b8:ef:79:0a:ef:
                    7c:83:94:27:77:c7:1a:cf:06:1b:dd:99:9b:80:9a:
                    e7:6d:79:f1:9e:cd:c5:c3:62:2e:b9:4b:80:7f:2c:
                    d7:31:46:9f:5d:a1:c0:d3:3e:b3:62:d0:64:5f:b1:
                    3c:ed:de:18:63:0c:24:1f:96:24:30:c6:92:fa:95:
                    a0:56:19:a5:93:49:a4:d2:e3:f3:e8:be:58:80:a4:
                    ba:55:80:a6:80:17:fe:00:0d:32:ee:c5:84:22:b1:
                    df:21:5b:9a:b4:8d:51:4c:8e:d3:e4:f7:34:c3:cd:
                    ca:9c:43:ed:31:4b:88:33:94:80:42:33:2b:5b:9a:
                    82:17:db:bc:00:70:75:e7:6a:3d:19:e2:30:d7:b7:
                    80:d2:26:c7:9b:c5:91:5b:a7:c0:29:e1:54:7f:a1:
                    3e:43:5c:58:c9:1e:38:4a:88:9e:c7:96:1b:d0:71:
                    00:55:8f:11:60:d1:30:1b:fa:a8:b1:c7:45:9d:d5:
                    d6:d8:b2:49:55:74:fa:9e:49:5d:c2:39:1a:1a:72:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EF:05:F6:D3:9C:84:9F:4A:21:56:61:D0:32:12:59:E1:86:D6:7F
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31352e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:42:3a:7c:ea:c8:87:c8:68:2d:85:4e:db:23:aa:90:8f:
         29:03:1a:bc:2c:01:a3:05:ed:60:cb:ec:5f:2d:d5:bf:03:73:
         89:3f:0b:66:53:c8:9d:73:b7:36:eb:50:89:4d:67:75:f3:0a:
         b3:e2:b9:dc:33:58:e9:30:58:b7:f7:14:78:19:21:e2:8c:2d:
         ce:ca:f0:0d:0a:e2:72:d2:92:73:d6:10:f0:40:b0:63:97:75:
         9a:a6:aa:a6:84:2a:19:7b:a0:96:b0:85:ee:55:b9:db:8b:46:
         a9:d2:17:e4:9b:99:0e:3f:7a:88:92:ef:1e:fb:3c:94:51:75:
         bd:09:2c:8a:57:4f:25:14:8b:9a:b1:bc:e1:a0:c8:fc:f4:5a:
         0d:fe:34:66:3b:b7:0b:3f:ee:6a:6f:56:66:fd:74:d6:07:0a:
         25:29:47:80:47:82:98:65:a5:23:7c:1a:81:8f:79:bc:94:e9:
         ae:7e:15:ee:70:db:da:ef:6d:0c:7c:bb:fa:31:01:a8:4b:4c:
         7c:ac:13:87:4b:e5:ac:3c:77:7b:3d:a6:37:84:d1:72:f2:bb:
         2f:f9:26:10:fb:3c:a4:54:17:2a:1b:85:02:60:7c:fb:b5:3f:
         52:fc:ea:71:c9:75:f4:b0:25:c9:23:35:da:92:d4:f2:55:17:
         b3:7c:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:21:10 2026 by rpki-client