Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e342e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          Wp7dqKW9gtXcFY9x+7srbDKignzRb/oQigtFiqIhBxo=
Subject key identifier:   9A:19:08:6E:4C:95:85:0D:9F:EF:62:69:81:0E:9D:CD:00:3A:D0:9B
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       77D3B5AF77E22154DA4AB0903BFEAEE8A6A80B9D
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e342e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 05 Mar 2026 18:33:02 +0000
ROA not before:           Thu 05 Mar 2026 18:28:02 +0000
ROA not after:            Thu 04 Mar 2027 18:33:02 +0000
asID:                     8100
IP address blocks:        190.114.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Mar 2026 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d3:b5:af:77:e2:21:54:da:4a:b0:90:3b:fe:ae:e8:a6:a8:0b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:02 2026 GMT
            Not After : Mar  4 18:33:02 2027 GMT
        Subject: CN=9A19086E4C95850D9FEF6269810E9DCD003AD09B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:db:82:f2:92:b7:ee:0e:04:c9:cc:2f:f2:
                    83:d0:84:05:ae:1a:ac:14:3a:06:60:08:6d:e3:ed:
                    46:fc:bf:c1:d9:19:2c:e5:95:bb:b6:00:79:41:93:
                    20:d6:0e:a4:70:73:fc:08:31:25:86:c4:2a:90:d3:
                    33:37:f1:1f:0a:c4:97:4b:3a:2b:61:79:c6:af:3b:
                    fc:32:ec:27:2c:d6:02:36:2b:4c:fa:4b:c1:41:14:
                    f8:4c:f8:4d:3c:30:7a:5a:ba:a4:c5:09:73:82:30:
                    1f:dc:68:a1:a7:a6:9c:17:d2:19:53:e3:ea:dd:e4:
                    8c:01:a0:3c:6c:6b:d1:6e:5d:be:71:04:95:6e:1e:
                    30:ed:3f:6e:55:4a:fe:b6:a3:40:46:ac:8a:08:db:
                    e9:f7:3e:e6:65:b4:ef:14:88:42:73:14:b3:24:97:
                    f3:4f:ab:40:97:24:24:cb:02:21:42:ec:a6:e8:1d:
                    f6:51:f6:9d:ca:9d:00:ea:76:16:59:d1:e6:ff:5b:
                    91:28:be:87:7f:ab:0c:4a:ee:12:14:4b:47:23:41:
                    8a:18:16:19:31:14:94:64:65:2d:64:b0:d4:85:60:
                    f1:ff:8d:b5:c1:c7:7c:39:f2:e9:94:02:cf:b1:e1:
                    0c:7a:0f:af:85:70:76:2a:c1:ba:b9:de:7f:d1:52:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:19:08:6E:4C:95:85:0D:9F:EF:62:69:81:0E:9D:CD:00:3A:D0:9B
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:f5:0b:b7:ae:83:68:0f:f1:8a:71:87:65:67:0d:99:07:
         be:b7:02:df:95:ed:22:25:2b:f6:db:2b:67:65:26:f5:64:aa:
         51:a2:be:c6:63:cd:d3:a0:6c:66:15:fb:fe:6e:9e:a4:2b:10:
         ea:bd:dd:1b:3f:0e:8a:02:6f:99:77:36:e0:39:b8:5b:57:6c:
         f6:5b:6e:37:a8:e4:9b:ca:b2:e2:71:ad:a5:a4:ad:2d:dc:fd:
         ac:09:4a:fa:19:9a:40:e2:be:61:b2:72:67:69:bb:b7:57:49:
         50:a9:c4:0e:7f:f9:e4:d7:59:4d:1f:44:dc:c9:71:d8:ac:95:
         76:37:b1:04:f3:18:f4:5f:32:d6:f8:94:8c:fa:bd:d7:d5:bf:
         04:e5:32:3f:bc:19:3b:5a:14:0e:f6:7e:1c:44:b8:86:93:19:
         b3:b2:79:b4:7f:0b:6d:76:4e:ff:71:c6:00:8f:a5:cf:b0:38:
         ac:49:12:43:ae:f2:e6:07:cc:b8:58:ce:8e:a2:bd:e9:4a:30:
         7e:47:8b:00:5c:6d:01:0b:79:20:b3:ea:a0:dd:4a:7c:0e:8d:
         6e:c4:31:0e:1f:e8:dc:16:cb:34:6c:b3:46:bb:79:e8:b9:8a:
         79:f0:f2:a7:6b:6a:5b:67:1a:b6:52:be:b0:ba:e5:de:66:78:
         6a:77:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:34:32 2026 by rpki-client