Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e332e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e332e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          HxnBe3m1e8ci/TmPbFey+avZgkuktgX0ZsEecOD+2xU=
Subject key identifier:   52:E7:69:89:17:78:5F:FE:CD:D5:40:DB:84:1F:B0:46:14:53:49:EA
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       58D86D2DBE7075C0208AD1771DF330E8F8770B76
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e332e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 03 Apr 2025 17:40:02 +0000
ROA not before:           Thu 03 Apr 2025 17:35:02 +0000
ROA not after:            Thu 02 Apr 2026 17:40:02 +0000
asID:                     8100
IP address blocks:        190.114.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d8:6d:2d:be:70:75:c0:20:8a:d1:77:1d:f3:30:e8:f8:77:0b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Apr  3 17:35:02 2025 GMT
            Not After : Apr  2 17:40:02 2026 GMT
        Subject: CN=52E7698917785FFECDD540DB841FB046145349EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:b9:28:77:bc:8a:9c:f3:59:de:f5:9e:4d:
                    e5:28:16:74:27:df:f9:56:52:9b:11:5a:bd:b6:7d:
                    bb:f3:d3:e0:b7:35:7b:99:4f:84:0b:bf:0c:ae:58:
                    a2:c9:10:5f:3a:4c:be:b7:d2:ee:69:1e:0b:90:59:
                    e9:d2:fd:a2:a0:ba:b0:1a:63:f8:8a:ea:db:d1:fb:
                    a5:8c:d9:fb:f7:7c:46:aa:7d:6d:e3:49:f9:54:c5:
                    ac:ac:87:0b:df:31:7a:b2:13:15:52:f8:36:15:83:
                    6c:9a:d8:b8:57:f9:72:18:7a:72:70:af:34:d9:20:
                    3c:82:c8:6f:16:bd:bf:b6:ea:60:68:81:97:22:34:
                    d5:6c:4f:95:0d:fd:1b:df:ed:26:19:ed:a7:44:af:
                    aa:5e:43:a2:53:bc:71:ae:9e:30:a0:fd:cd:30:b1:
                    4f:6b:e6:f9:02:5d:67:84:83:77:4d:69:09:7e:41:
                    7d:7a:1b:3c:e9:97:64:99:ed:4f:30:7d:a1:eb:a6:
                    c0:b5:16:e5:c6:2a:36:ff:04:04:2c:01:c9:91:4a:
                    68:13:d5:e5:ab:ed:69:bc:75:08:67:06:e0:87:15:
                    e2:e3:a5:0b:0f:68:61:b9:f2:d2:4e:f5:22:4c:1a:
                    76:84:66:de:bd:87:fa:fa:6c:14:f1:7f:fa:aa:79:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:69:89:17:78:5F:FE:CD:D5:40:DB:84:1F:B0:46:14:53:49:EA
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e332e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:da:e9:e8:bf:f9:c9:ed:fc:70:a1:76:c0:a7:6a:85:ba:ef:
         cc:f2:91:94:5d:b3:16:c2:7c:bd:3c:d7:23:8e:2e:29:26:7d:
         92:20:b0:c1:87:86:02:20:96:d5:75:25:95:af:ce:72:94:5e:
         dd:d8:43:c6:98:aa:65:9b:91:30:90:d8:5c:cc:d8:d3:13:ef:
         d7:48:08:78:12:ae:6c:b3:81:61:94:38:c9:40:30:b4:52:6b:
         b6:92:1a:5a:ab:45:ed:5f:4b:c3:8b:49:a9:2b:0f:9d:00:21:
         74:f8:f1:28:0b:e4:34:fd:0a:03:3d:c5:9c:88:c6:4f:d3:02:
         a8:29:79:38:fb:0e:27:bf:bf:81:0f:5d:f1:a2:5b:f9:b4:5b:
         92:e3:e2:b8:a5:0c:ae:17:83:76:e9:da:a2:d4:8b:bc:56:70:
         67:cc:d5:c3:f9:9a:79:b6:7b:99:bf:43:c7:64:ad:b3:bb:12:
         82:4c:a6:ce:aa:a8:c9:5e:cd:7f:d6:d9:fc:ba:00:dc:1a:6d:
         aa:b1:77:9b:30:e7:fb:a3:67:fb:a3:ab:72:c0:0b:71:2e:89:
         6b:d8:68:17:84:32:64:a5:00:ac:f8:e4:4a:71:3e:68:94:56:
         f5:e0:f0:40:7f:e9:0b:05:c1:06:50:16:7a:dc:17:f0:98:9a:
         d9:73:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:03 2025 by rpki-client on console.sobornost.net