Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32332d3233203d3e203439393135.roa
File:                     3139302e3131342e382e302f32332d3233203d3e203439393135.roa (raw, json)
Hash identifier:          1sQaFBeDP4JcYeDseYfhile+YK1l5zNt4GrEyRF/n8A=
Subject key identifier:   8A:38:69:74:DE:1E:6A:94:4C:52:85:E7:D0:4C:F1:7B:29:9A:31:F7
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       1B77615D2B923724C4422ECE76C82326CE58E6EF
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32332d3233203d3e203439393135.roa
Signing time:             Fri 22 May 2026 20:40:00 +0000
ROA not before:           Fri 22 May 2026 20:35:00 +0000
ROA not after:            Fri 21 May 2027 20:40:00 +0000
asID:                     49915
IP address blocks:        190.114.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 17:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:61:5d:2b:92:37:24:c4:42:2e:ce:76:c8:23:26:ce:58:e6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: May 22 20:35:00 2026 GMT
            Not After : May 21 20:40:00 2027 GMT
        Subject: CN=8A386974DE1E6A944C5285E7D04CF17B299A31F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:1d:30:7a:29:79:34:23:4a:10:52:6a:7d:
                    73:93:90:c8:02:55:52:8a:14:61:bf:bc:c9:e7:90:
                    89:2d:04:80:44:22:d8:bc:2d:17:03:ed:70:ba:26:
                    28:b2:9c:37:17:8d:d6:bd:ff:f6:0b:aa:be:91:9d:
                    c1:87:8f:67:43:9c:34:37:cd:9d:f4:b1:41:11:62:
                    6e:2e:4d:fd:48:d5:b2:42:82:16:74:15:8c:de:b0:
                    2d:1a:b4:6b:4e:c6:33:1a:5b:9b:36:9c:8e:03:5e:
                    fc:4e:0c:ca:59:1d:5a:9b:76:99:03:82:89:d4:7e:
                    61:f3:d6:7a:59:b0:58:f5:a3:e0:f6:f3:80:bd:45:
                    c6:36:77:ea:02:13:a3:f8:10:72:cc:b6:4a:d3:ba:
                    80:3f:78:46:45:8c:a1:47:15:26:9c:dc:d9:28:cc:
                    2b:86:aa:36:9f:d3:d0:6e:99:22:64:3d:65:4f:75:
                    af:3f:2c:e5:8c:b7:93:23:ff:3c:3b:c3:e5:bb:7b:
                    7b:a0:2f:7b:67:f1:42:04:45:8c:0d:9f:38:53:97:
                    94:75:40:72:0f:74:0e:e3:3d:e5:b9:10:29:24:04:
                    4a:80:cc:11:7f:f3:f2:eb:d5:dd:fe:aa:46:af:f3:
                    ac:1b:5e:1b:b7:8b:16:99:c7:95:a7:bd:12:33:0b:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:69:74:DE:1E:6A:94:4C:52:85:E7:D0:4C:F1:7B:29:9A:31:F7
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32332d3233203d3e203439393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:38:27:62:40:7a:61:94:e0:33:c1:53:16:13:f7:29:7a:33:
         85:fc:52:18:d2:53:17:92:24:f8:f5:15:03:02:bb:38:49:ac:
         99:f5:d3:6b:c7:92:0c:b1:91:fa:97:95:ef:74:e5:90:d1:31:
         60:04:59:a7:50:24:1a:6e:9a:c1:0e:df:39:61:31:52:76:ad:
         fb:49:15:1c:0e:f8:35:43:59:10:5e:db:12:8f:fc:ea:f3:2e:
         d0:b4:8e:ae:ea:a1:b6:47:0d:97:59:1d:57:30:d6:02:1d:04:
         da:37:21:7e:b6:96:e1:0e:49:a4:63:b3:fa:cb:c7:7d:c9:26:
         3a:da:9a:32:5e:97:40:f4:a7:28:e9:6a:93:d2:bd:2c:58:17:
         99:fb:b9:94:d0:a4:3b:14:b2:28:c7:44:d6:77:e4:c5:bf:7d:
         53:3d:c7:b5:d6:b5:46:a2:6c:a9:83:cc:17:47:f1:23:aa:13:
         fd:8d:b5:e7:77:aa:1d:11:d1:a2:e8:b6:0a:88:09:a5:8b:2f:
         94:95:ef:ec:8a:b9:a0:bf:3a:ee:95:92:86:73:36:ba:b7:14:
         86:fd:b7:ce:f8:c8:b0:0e:d6:8d:90:6f:4f:c0:42:6e:6e:40:
         a8:c2:00:00:bc:05:78:2a:80:47:31:89:98:e1:b7:0a:bc:88:
         b6:cc:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:35:04 2026 by rpki-client