Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e352e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e352e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          4cNdoOGlYzZEj3BVbeEd6+5Iv1hkjHRXhEl0u/7lvm4=
Subject key identifier:   AE:FB:58:E0:F4:A4:C8:8B:3E:22:68:4E:85:60:E7:3C:E9:03:79:B8
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       71BA89A9C36C5A707BAA5931722547183F0FD6BD
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e352e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 05 Mar 2026 18:33:02 +0000
ROA not before:           Thu 05 Mar 2026 18:28:02 +0000
ROA not after:            Thu 04 Mar 2027 18:33:02 +0000
asID:                     8100
IP address blocks:        190.114.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Mar 2026 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ba:89:a9:c3:6c:5a:70:7b:aa:59:31:72:25:47:18:3f:0f:d6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:02 2026 GMT
            Not After : Mar  4 18:33:02 2027 GMT
        Subject: CN=AEFB58E0F4A4C88B3E22684E8560E73CE90379B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:ba:d0:9a:0a:69:c4:3c:de:7d:01:57:35:
                    91:d2:22:8e:3f:b7:c9:bd:f6:87:70:b7:ea:de:a1:
                    69:b4:92:62:fd:c8:b8:99:d9:79:0d:89:a5:f2:d5:
                    d1:25:34:02:22:e3:ca:a4:42:5a:00:36:f8:10:13:
                    95:6c:54:c0:f6:1f:b3:a0:81:bd:64:30:c1:ce:d6:
                    a8:8b:00:ed:39:65:be:bb:20:bc:be:53:da:b1:86:
                    01:b3:42:5d:44:5a:a2:7e:1d:31:34:ca:30:87:b4:
                    5c:fe:e8:5e:d9:dc:0f:94:d9:4b:5f:12:20:b0:8f:
                    52:dd:e3:2f:fa:d9:e5:51:83:26:b2:52:ff:72:e6:
                    36:ea:d6:a2:ff:29:3f:24:2c:5f:7e:d6:e4:31:ba:
                    ec:34:dd:9a:82:41:f2:c7:a7:12:23:c6:88:a1:80:
                    3f:76:43:e9:fc:35:ed:a7:91:05:4f:c6:6b:50:30:
                    3e:c1:18:68:bb:2f:01:c4:0b:1c:0c:b5:6a:56:a0:
                    0a:ff:8c:20:a5:e4:1f:c1:63:c5:21:b4:37:f2:05:
                    88:2c:b5:30:43:1e:92:ad:37:77:db:c2:91:48:7a:
                    d6:2a:33:05:3b:60:d6:65:96:e6:70:d8:82:7c:54:
                    7e:5f:3d:89:05:a4:9b:56:fe:c7:da:2e:c6:c9:4c:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:58:E0:F4:A4:C8:8B:3E:22:68:4E:85:60:E7:3C:E9:03:79:B8
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e352e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:ff:3d:da:d9:49:b7:8a:c3:45:8b:cf:6e:30:ba:f1:5b:
         b9:7b:53:a1:11:9d:f7:b6:91:b6:e3:d3:7a:90:9d:c1:03:22:
         5f:3a:e7:38:ad:f7:35:5a:b6:7b:e2:1f:e2:f7:cd:e4:b4:2e:
         06:c5:4b:f0:b8:14:f6:d0:28:46:d4:ce:a0:d0:1b:c7:88:e3:
         b0:85:12:a1:5d:01:cc:b7:75:1a:6f:4e:6e:c2:fc:ef:7d:ea:
         1f:0d:fa:52:f6:e8:54:4a:37:ed:e0:68:f9:00:99:bd:6e:fd:
         c7:6a:24:f3:57:26:de:ec:e7:7e:d6:ab:09:ae:45:d2:bc:f1:
         e4:fd:72:37:80:db:f9:4b:92:c8:ce:e7:a2:d8:63:a0:38:c9:
         8b:36:d6:5b:64:a0:b7:c7:db:36:3f:25:b4:60:d6:f5:30:50:
         ee:4f:97:55:36:81:ea:55:74:6d:24:64:3a:3a:89:b8:58:a1:
         1d:62:28:de:d2:c1:58:98:89:c5:80:e8:8c:76:1b:d2:21:84:
         c6:0d:70:53:bb:f0:1a:23:9e:67:0d:c8:38:cd:ca:1e:45:f6:
         e5:4e:fd:f1:13:86:ef:2d:3b:05:03:ba:fa:8b:a1:83:25:32:
         2b:bc:9a:97:6e:84:19:c8:dc:35:4f:e3:7e:6e:a8:5d:70:b9:
         8c:03:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:34:00 2026 by rpki-client