Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e342e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          TUAj5PNqStc44Qx7jI2uDasXNYnVvk8dcK7hnd0+XfM=
Subject key identifier:   17:33:EF:6B:AC:3A:07:1A:61:87:4E:97:28:AC:A8:DE:47:C2:DF:DA
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       4BABED7CB72A6FC8888113A3372BA730FA110590
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e342e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 03 Apr 2025 17:40:03 +0000
ROA not before:           Thu 03 Apr 2025 17:35:03 +0000
ROA not after:            Thu 02 Apr 2026 17:40:03 +0000
asID:                     8100
IP address blocks:        190.114.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ab:ed:7c:b7:2a:6f:c8:88:81:13:a3:37:2b:a7:30:fa:11:05:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Apr  3 17:35:03 2025 GMT
            Not After : Apr  2 17:40:03 2026 GMT
        Subject: CN=1733EF6BAC3A071A61874E9728ACA8DE47C2DFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:6c:e2:59:01:16:db:87:95:69:dd:cf:12:
                    cf:ba:05:68:1b:5e:b9:b1:4c:5a:09:37:cb:54:08:
                    c0:29:b2:4c:03:a2:bd:2b:ea:74:d2:e5:58:4c:b1:
                    c3:3a:5f:c7:bd:62:0c:92:4d:4d:41:20:77:de:9a:
                    ea:3e:c0:e1:81:7c:e9:cf:4c:56:ca:49:1e:80:55:
                    f4:c6:a2:07:f0:cf:7e:c7:fa:17:7e:2b:0a:c3:34:
                    d0:ea:fe:76:9f:b6:5a:eb:c3:c1:f6:22:e1:40:55:
                    61:3a:32:44:42:14:e5:20:06:e3:3e:a3:96:21:19:
                    02:b0:a2:8a:7d:95:e7:c4:39:be:a5:60:fb:d8:dc:
                    de:ee:e7:21:d9:cc:a4:8a:bb:9a:2a:6a:a5:ea:20:
                    d6:95:62:b0:96:ce:d7:55:99:da:63:eb:01:3c:01:
                    23:d5:30:4a:2c:44:9c:77:93:97:7e:93:f1:10:b3:
                    8f:49:f1:fe:ca:16:ca:3d:dc:6c:7d:ae:1e:64:c8:
                    f4:fa:39:36:37:da:5e:0f:ce:13:dc:46:05:c0:4c:
                    c5:ca:26:18:40:9f:2b:8a:2b:06:c9:55:06:c0:69:
                    51:39:d6:46:2f:71:52:fe:f0:e0:19:75:59:2a:41:
                    26:52:d1:4f:a3:0d:34:1b:7e:32:d4:67:34:92:f5:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:EF:6B:AC:3A:07:1A:61:87:4E:97:28:AC:A8:DE:47:C2:DF:DA
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:3c:4d:7c:5b:83:b8:66:05:57:13:8c:07:a9:77:7e:2d:
         3a:96:b8:6c:b5:15:ab:f3:fa:73:3c:66:8a:d4:a1:20:23:5c:
         6c:73:f8:c9:69:ac:95:00:23:2c:14:57:fd:d9:30:44:24:00:
         8f:69:09:95:1a:5b:e6:eb:46:47:ea:5b:95:43:a9:74:fa:56:
         f4:af:12:dd:45:67:8e:a2:21:be:ed:0a:46:8a:2d:de:21:16:
         01:ba:f4:33:4c:d5:56:58:00:6f:63:0d:b4:b0:92:32:c8:07:
         27:a4:d5:d5:88:49:d5:b8:d2:88:91:27:6b:22:3d:af:19:35:
         01:ad:e8:4f:2b:c8:0e:8c:27:b3:4d:3a:c8:16:41:1c:8d:8f:
         cd:5b:a9:f6:e4:54:ff:4c:64:e2:a6:81:a7:ca:93:c6:a5:a8:
         7a:af:a2:c0:ef:5b:1e:59:45:10:cf:b2:22:d1:fa:29:86:21:
         31:4b:ad:86:97:15:ca:5c:7a:05:57:b3:98:a2:e9:2c:8d:fd:
         26:c5:85:0a:37:04:c5:ef:ba:d7:e5:bb:47:22:07:0f:b8:42:
         14:c5:51:c3:4e:ec:82:0b:b9:5b:c4:73:2a:b5:55:41:03:69:
         8d:d4:94:9c:53:44:bc:45:3b:83:bc:1b:b9:93:c4:47:cc:78:
         b3:fb:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:47:23 2025 by rpki-client