Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e332e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e332e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          uzudvbU8rIMfU2S3k/IVXiqnbm3WDHCrwdIKmka+P5Y=
Subject key identifier:   3C:B3:B1:3B:69:98:F2:75:93:0E:45:82:D9:F8:FD:E0:FB:0F:3A:B8
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       2E50A08F4FAFA8AB9B0217777650E5638A7B4596
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e332e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 05 Mar 2026 18:33:01 +0000
ROA not before:           Thu 05 Mar 2026 18:28:01 +0000
ROA not after:            Thu 04 Mar 2027 18:33:01 +0000
asID:                     8100
IP address blocks:        190.114.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Mar 2026 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:a0:8f:4f:af:a8:ab:9b:02:17:77:76:50:e5:63:8a:7b:45:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:01 2026 GMT
            Not After : Mar  4 18:33:01 2027 GMT
        Subject: CN=3CB3B13B6998F275930E4582D9F8FDE0FB0F3AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:f8:41:b0:e8:2c:77:0b:68:fe:06:79:b0:
                    18:56:0d:72:47:77:14:d8:36:cb:42:e9:4a:d8:06:
                    ff:65:d7:25:0a:8a:86:b4:2b:d6:d7:61:1e:37:13:
                    e7:ec:54:2a:b1:3d:77:1f:e9:0d:fb:80:0a:42:2c:
                    0a:9c:d9:01:7f:bb:89:20:d7:59:fa:d8:a3:78:ca:
                    9d:c0:d3:66:2f:ff:47:27:13:b6:4e:dd:fc:40:dc:
                    00:d7:8b:d6:f2:9c:f5:57:e8:c4:5d:ce:73:16:c0:
                    7d:04:6b:8b:78:36:9e:18:78:53:a6:07:e0:67:45:
                    f9:ac:cd:96:0b:f4:6c:1d:67:d8:22:ca:e6:ce:b5:
                    b5:77:34:63:31:08:29:41:e5:2b:97:7b:7a:86:a7:
                    2e:2a:d7:2b:a8:05:f8:90:94:e7:df:71:47:e4:d5:
                    77:0b:1e:a8:a8:56:9a:58:d2:ba:53:47:ab:7b:4a:
                    2e:34:2f:10:b0:84:f7:68:95:2e:8b:22:8a:84:f1:
                    12:d5:91:2e:17:e9:c0:09:89:19:86:4d:0e:0b:08:
                    c9:d5:92:16:a4:6c:ad:74:f7:b2:4c:ec:ab:e2:84:
                    97:80:c9:f1:2f:74:78:8d:a9:57:c1:03:34:a5:87:
                    34:28:0f:72:ee:90:12:c5:5e:39:d2:4a:fb:b4:6d:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B3:B1:3B:69:98:F2:75:93:0E:45:82:D9:F8:FD:E0:FB:0F:3A:B8
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e332e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:55:35:dd:24:68:dc:16:6d:a0:4a:11:f4:29:7f:6f:1b:
         10:a2:12:b7:56:4a:4b:66:4a:be:01:30:44:ef:1c:57:0c:b0:
         05:7f:bc:11:f9:ab:a0:89:4f:77:c3:3f:3b:75:6d:7a:78:7a:
         c0:8b:ad:bf:35:1a:40:63:63:f2:66:cc:36:c4:48:48:60:a1:
         97:71:30:60:e9:9f:e1:92:c7:d5:16:4e:d3:da:0a:92:68:a3:
         a3:32:b3:13:7d:c9:ad:32:e4:06:68:32:2d:70:8b:6f:b3:d7:
         cb:b1:60:dc:23:d4:72:eb:24:27:24:47:ff:29:9d:0c:a7:2e:
         8b:29:dc:f3:17:12:2c:6f:ef:8c:8d:29:14:dd:cc:3d:a3:68:
         10:31:b8:5f:8a:e5:bd:1c:92:89:dc:50:ce:f8:b8:d4:4f:2a:
         b7:98:70:44:9c:a6:9a:fb:4f:5d:5f:d5:64:b7:1a:07:93:e7:
         65:0d:83:69:e5:22:5b:63:06:70:78:4e:df:2f:c8:a6:0d:ad:
         5d:39:45:43:45:9b:7b:8f:dd:62:9b:d3:a6:93:13:14:26:87:
         31:97:88:af:23:c0:ab:82:a2:15:c9:fc:48:9b:1e:55:8d:b4:
         71:9f:4f:91:1f:97:36:29:d0:8f:f5:a7:37:2f:ec:d4:de:ef:
         dc:2b:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:36:05 2026 by rpki-client