Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e382e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          oa5Gjt4f/Sec1v0TrpeyUAe2xINbcjgfhQu1sgdW6OM=
Subject key identifier:   09:79:CC:92:56:A6:84:1E:BD:11:AE:41:F9:59:3B:81:46:EC:79:A9
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       75DD199CF5CC04A1B558E81C9206F1027CC692F4
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 05 Mar 2026 18:33:01 +0000
ROA not before:           Thu 05 Mar 2026 18:28:01 +0000
ROA not after:            Thu 04 Mar 2027 18:33:01 +0000
asID:                     8100
IP address blocks:        190.114.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Mar 2026 22:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dd:19:9c:f5:cc:04:a1:b5:58:e8:1c:92:06:f1:02:7c:c6:92:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:28:01 2026 GMT
            Not After : Mar  4 18:33:01 2027 GMT
        Subject: CN=0979CC9256A6841EBD11AE41F9593B8146EC79A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:37:8c:8e:57:86:ff:5d:b5:bf:61:be:a9:
                    0e:34:d9:26:3c:9e:b2:12:2a:a9:cc:1f:f0:9f:9c:
                    07:3e:08:7a:98:64:d6:d4:f2:75:f6:d5:fc:6f:b9:
                    d9:0f:53:18:f8:ff:30:b1:12:f5:58:63:02:0a:43:
                    3f:c5:c6:f5:87:4b:bf:fb:a4:e2:33:80:e5:71:49:
                    40:12:f9:e8:96:2f:4c:37:df:fe:1f:9a:7b:f5:f3:
                    ee:6e:16:9b:9c:9c:08:1b:c6:b0:fc:38:30:dd:96:
                    e3:e7:db:b8:6f:f6:f2:0e:14:4e:d2:ac:42:82:38:
                    1e:91:25:34:a6:d9:c8:2f:b6:84:5d:bb:ff:9e:48:
                    34:fc:e8:27:cc:1d:38:7e:aa:6d:52:5b:e1:72:f1:
                    77:c4:78:45:cc:dc:ef:f7:fc:50:32:a7:aa:19:4e:
                    b4:6d:2c:e7:eb:f7:57:57:4d:95:fa:4e:8e:af:26:
                    be:f8:0f:8c:40:24:0f:23:46:8a:09:79:e6:a9:53:
                    2c:47:c0:62:59:c3:c2:72:02:63:81:b1:0d:79:60:
                    a8:74:9d:6b:a5:f7:52:4e:4f:9d:cc:f2:f1:f3:3c:
                    3a:6e:5b:f6:b1:16:3c:a2:51:0b:7c:e1:67:ed:af:
                    9d:92:90:6a:36:fb:d8:6f:de:ff:84:b4:5d:08:27:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:79:CC:92:56:A6:84:1E:BD:11:AE:41:F9:59:3B:81:46:EC:79:A9
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:74:4d:f9:38:bb:e5:36:0a:af:3e:da:73:c3:6f:f1:1a:
         e4:79:70:c4:d6:5b:40:af:f7:50:c3:f1:82:8c:a7:d9:cb:3b:
         84:0a:58:31:57:c8:d1:c2:52:45:17:e5:e2:93:d8:ea:9f:4a:
         2f:8c:af:f0:6a:17:ed:65:8a:0c:b0:d4:23:13:37:ff:70:70:
         11:e2:2b:56:91:f8:34:5d:46:26:8a:ef:14:fb:7d:1e:d1:94:
         a4:1d:8c:09:0f:9e:5b:b3:35:f1:67:53:0e:6f:ae:5c:d7:fb:
         c7:c6:11:87:ec:48:80:60:7a:66:e6:e8:e1:44:ad:99:74:d0:
         df:a9:1f:b7:2e:47:67:92:13:a8:31:2e:66:52:8e:a8:18:d8:
         fe:a0:61:de:78:a9:83:c8:ed:19:98:d0:ca:ba:76:ec:49:61:
         06:d5:25:13:fe:a5:84:c6:56:30:45:59:38:a4:d4:da:32:d1:
         18:0c:64:6c:e3:04:f1:9a:dc:50:75:be:01:44:70:07:54:77:
         44:a3:4a:56:95:97:68:84:43:f9:7d:6b:30:77:16:b9:f1:c5:
         94:ac:4c:4a:b6:b5:7a:57:e1:10:99:38:30:8a:ab:ee:44:81:
         4d:f7:5c:de:0b:57:77:7a:e0:34:ea:b8:bd:a7:dd:e6:0f:a3:
         dd:0f:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:05:57 2026 by rpki-client