Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e322e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e322e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          y22Wt4eQMgLKMTNEjhVEiU8IzKLOi7LYOEzbKKnNHYg=
Subject key identifier:   B9:FB:DE:0D:8C:8F:33:63:51:B8:9A:4A:CF:92:73:AB:ED:28:60:C9
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       34C1AF9EDB3974C7E33CF56B913A8430BE8BF8FB
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e322e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 05 Mar 2026 18:33:01 +0000
ROA not before:           Thu 05 Mar 2026 18:28:01 +0000
ROA not after:            Thu 04 Mar 2027 18:33:01 +0000
asID:                     8100
IP address blocks:        190.114.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Mar 2026 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c1:af:9e:db:39:74:c7:e3:3c:f5:6b:91:3a:84:30:be:8b:f8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:01 2026 GMT
            Not After : Mar  4 18:33:01 2027 GMT
        Subject: CN=B9FBDE0D8C8F336351B89A4ACF9273ABED2860C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:d7:48:21:20:73:02:8c:f1:60:82:38:c8:
                    ad:be:4e:c0:3a:9f:b1:fe:17:98:7b:8a:a6:2e:cf:
                    b5:9c:36:ea:83:0b:1c:05:83:28:34:93:54:a3:e1:
                    6a:e8:70:17:ff:a6:82:86:ac:52:9b:f6:97:76:0a:
                    1d:fb:ff:4a:c1:81:bb:e7:85:62:8e:16:b4:e9:61:
                    5a:67:05:db:2b:c9:94:f1:2a:cf:c3:c2:60:43:9e:
                    35:09:4b:af:b2:33:90:6e:78:cf:f0:f0:36:49:c8:
                    a1:db:eb:29:3b:9b:22:3d:9b:0e:a2:61:66:7c:ef:
                    20:d4:6f:d5:a6:fc:3e:8d:ba:bf:33:b0:92:90:ee:
                    b0:74:0d:a2:01:17:49:72:4f:87:c4:e4:1d:5c:cd:
                    8d:cc:d0:d8:57:66:ab:78:2d:a6:99:b4:c7:58:aa:
                    46:05:e0:34:9d:d4:b8:8f:ee:bc:44:e0:da:39:fc:
                    30:da:b8:4a:f5:af:97:0d:ac:bf:45:40:b2:7c:0b:
                    63:66:b6:b3:ca:af:11:9c:de:82:9b:3b:bd:78:c9:
                    4b:92:12:f7:dd:f8:03:cf:06:d2:bf:c2:12:d1:f5:
                    1a:a6:67:1b:49:e5:35:6e:e6:ae:0e:65:60:87:ac:
                    ff:08:c6:d0:cc:19:b8:00:68:b5:d5:18:0c:2d:37:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:DE:0D:8C:8F:33:63:51:B8:9A:4A:CF:92:73:AB:ED:28:60:C9
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e322e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:02:66:11:1c:5e:7a:2e:c5:84:bc:b4:0b:93:43:b2:df:
         70:fa:9e:d4:64:3b:73:31:35:10:a7:29:21:35:55:a1:e9:33:
         5c:92:e2:dc:fc:e2:92:38:a5:d0:c0:26:f3:12:d4:47:6a:59:
         3a:a8:6e:d7:34:93:a6:7e:2c:5e:dd:3f:93:b9:27:84:41:76:
         42:d2:9c:92:59:a7:63:ae:0f:2f:31:e2:78:7d:12:9b:0b:c8:
         9f:19:70:f4:cd:9a:bb:66:6e:63:93:fd:cb:1a:29:5a:6c:7b:
         7f:16:29:08:da:55:f1:66:a9:f2:3b:df:93:3c:d1:5e:c3:b7:
         90:f8:36:14:f2:43:34:dd:cb:77:a8:3c:92:b7:bc:3d:9f:63:
         f5:d5:da:67:5c:be:37:30:5b:ab:ef:24:15:66:48:be:5b:fd:
         a2:f2:22:ed:82:03:01:ee:da:f4:b6:29:60:21:3b:68:47:20:
         34:48:3c:58:11:52:73:62:64:31:ef:03:70:c4:2a:a0:ba:85:
         2d:6d:02:0c:b9:66:05:5a:bf:17:4e:d4:71:9d:45:49:ad:83:
         51:03:4e:cf:cf:66:9b:a2:a6:c2:90:89:22:c2:a8:17:ee:5e:
         a6:06:b0:35:b6:30:42:d8:da:3a:ea:fc:83:cb:93:81:15:f3:
         1f:58:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:34:34 2026 by rpki-client