Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e312e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e312e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          /23mNmOJsyEf3rykO1wIPf0M+sSEDGcY1+X8VDapFeU=
Subject key identifier:   C1:04:AF:5B:F1:61:E9:22:7D:DE:C8:73:A5:4B:90:9B:64:2D:EB:89
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       4B34C8E611EF04E3A5E398E1D565BC469B1A377C
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e312e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 03 Apr 2025 17:40:00 +0000
ROA not before:           Thu 03 Apr 2025 17:35:00 +0000
ROA not after:            Thu 02 Apr 2026 17:40:00 +0000
asID:                     8100
IP address blocks:        190.114.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:34:c8:e6:11:ef:04:e3:a5:e3:98:e1:d5:65:bc:46:9b:1a:37:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Apr  3 17:35:00 2025 GMT
            Not After : Apr  2 17:40:00 2026 GMT
        Subject: CN=C104AF5BF161E9227DDEC873A54B909B642DEB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:92:7d:b1:d0:e0:7c:1f:d9:e4:cd:db:7c:
                    d7:cb:ca:c3:d7:4d:70:da:4d:8d:ad:cd:cf:ee:f2:
                    60:b7:ed:3a:fa:56:98:8e:32:63:35:bd:6b:4d:1c:
                    2c:76:78:a1:49:35:de:d3:bd:f6:3a:ff:8f:2c:ac:
                    20:02:dc:16:30:33:f7:1d:97:ee:df:dc:d7:9b:11:
                    49:ae:7d:74:3a:55:25:dc:97:cf:75:05:d4:f8:f3:
                    cc:1b:43:a7:bc:d1:a9:6f:3e:5e:d5:7a:95:7c:9d:
                    3f:77:22:4d:08:be:d5:51:ab:1e:4b:fc:67:3a:50:
                    0b:b7:d4:44:01:3c:25:06:15:f9:04:2f:13:7f:99:
                    bc:35:ea:39:ee:11:8d:54:cf:69:35:aa:bf:f0:ce:
                    84:0c:71:ba:e5:67:d6:9f:de:c9:c0:c3:de:3a:73:
                    71:4c:34:17:fd:d3:ae:2d:28:de:d6:06:06:66:2e:
                    1e:54:4c:0f:e7:ee:03:ca:0a:28:7e:6c:49:11:37:
                    b4:53:54:87:0f:d7:f0:f7:32:33:a3:d9:b7:d7:93:
                    4d:7e:2a:a3:3b:ee:43:b4:d4:76:1a:c4:8e:4c:b0:
                    4e:98:0a:01:49:5f:f5:ba:8b:47:80:b1:93:1d:63:
                    b1:83:bc:0b:6f:8c:c9:54:b4:94:4e:0b:bf:a4:68:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:AF:5B:F1:61:E9:22:7D:DE:C8:73:A5:4B:90:9B:64:2D:EB:89
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e312e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:75:dd:94:89:db:da:35:53:46:81:58:ee:82:43:cb:ec:94:
         02:51:76:e8:eb:06:ea:55:2f:3c:c7:43:45:3c:7b:ac:2b:22:
         a5:18:e0:c5:d4:38:bc:89:94:f1:57:60:b0:cf:53:d4:e5:62:
         42:ec:08:f6:5d:bc:9b:7f:10:d8:0e:74:5d:95:6f:ee:8b:79:
         18:06:70:73:27:90:cb:57:ff:83:24:cd:f1:d8:18:fe:2a:30:
         45:ed:84:4a:b3:23:2c:be:a4:fc:ca:86:3b:6e:70:06:4b:2c:
         e1:40:2a:e0:80:22:03:ba:63:3a:7d:26:4e:c5:03:a9:a2:57:
         c9:cc:fa:2a:d9:bb:8a:9f:f8:c1:e1:23:1b:40:01:49:60:7b:
         e6:1d:26:dc:bb:86:1d:dc:c8:d3:f1:48:95:0a:06:c7:50:1b:
         4b:dc:30:ca:b4:bb:5b:57:ce:4e:71:e4:b9:0f:3f:a2:34:25:
         e7:5f:c6:20:dc:46:52:80:71:29:df:25:0c:98:5c:60:19:60:
         f7:d8:6b:8a:06:8d:9c:89:94:d9:72:2c:6a:29:2f:cc:d2:b0:
         10:de:94:e5:fe:b1:b5:74:ee:79:16:df:f8:01:da:a8:fc:42:
         e5:60:c3:09:3c:f7:cd:61:48:64:5b:09:2e:0f:65:ce:24:e4:
         30:74:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:12:13 2025 by rpki-client