Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e312e302f32342d3234203d3e203134373534.roa
File:                     3136352e39382e312e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          GzcSl+sH7IlMO/GurhtaPFZ8o/ZMtOq7yTCHmGinbng=
Subject key identifier:   6C:F6:72:FF:86:28:BF:C2:A1:E3:00:F6:26:45:DA:5F:18:15:DB:33
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       4925F41CAC710B98438337F0B83166F76CAC3D38
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e312e302f32342d3234203d3e203134373534.roa
Signing time:             Thu 27 Jun 2024 17:30:00 +0000
ROA not before:           Thu 27 Jun 2024 17:25:00 +0000
ROA not after:            Thu 26 Jun 2025 17:30:00 +0000
asID:                     14754
IP address blocks:        165.98.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:25:f4:1c:ac:71:0b:98:43:83:37:f0:b8:31:66:f7:6c:ac:3d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jun 27 17:25:00 2024 GMT
            Not After : Jun 26 17:30:00 2025 GMT
        Subject: CN=6CF672FF8628BFC2A1E300F62645DA5F1815DB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:9b:4d:5a:34:b6:de:4f:aa:30:84:c7:ee:
                    38:52:95:14:e8:ce:30:ab:af:1a:81:05:70:24:d2:
                    26:8e:6c:86:b5:c1:92:8e:a3:3a:83:82:f8:6a:f4:
                    c8:a8:79:80:02:47:1b:f4:02:84:7a:c8:03:4a:34:
                    40:7b:1d:a3:55:95:19:1b:66:0e:a0:11:52:a1:82:
                    a7:1b:c6:b8:e5:b4:32:3f:76:37:06:81:30:89:12:
                    70:0c:ca:97:d1:1f:73:16:20:dc:d5:7b:e5:06:a4:
                    34:f5:5c:0e:fc:37:95:11:d6:18:8a:14:ed:62:32:
                    16:36:4f:38:31:82:f1:e0:b2:a5:9c:5a:bb:bd:0c:
                    f0:b3:3a:0f:23:35:de:ed:f4:6e:15:15:31:1f:b5:
                    07:d3:91:ed:6b:aa:ee:c1:f9:90:f4:96:48:b1:fb:
                    69:9d:ba:81:6b:6d:30:75:ea:ed:14:22:8e:10:13:
                    39:43:fc:b3:09:4e:0c:1c:49:57:b1:30:7d:ca:01:
                    2e:bc:61:c8:59:08:39:d8:8e:f0:4a:e2:de:a8:f9:
                    9c:97:0d:d7:9a:5b:17:9b:0b:ed:5a:ce:83:d2:04:
                    fc:5a:4d:22:8e:32:2d:cf:4c:d1:5a:2f:31:60:c2:
                    21:8e:f4:df:c7:3e:55:0b:c8:8a:5a:36:f0:fc:e1:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F6:72:FF:86:28:BF:C2:A1:E3:00:F6:26:45:DA:5F:18:15:DB:33
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e312e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:15:d7:6f:f8:89:83:5a:06:d6:46:b5:bb:79:66:d1:d9:
         35:44:ac:f0:b8:de:f4:45:d0:2e:e4:9d:ce:ca:a9:b6:7f:e2:
         f8:b9:01:b8:33:c3:67:78:03:59:9e:c9:0d:7d:80:50:46:58:
         81:f1:e0:f9:7a:44:3e:f8:8c:35:23:85:c5:24:08:9f:27:8f:
         d2:7c:00:cc:c8:ae:75:35:54:6e:fe:1b:79:9e:ad:bf:77:58:
         93:91:f9:76:57:e2:8f:1c:18:64:fd:71:0d:96:d5:a6:4e:81:
         36:1c:10:13:54:f3:40:97:92:0c:74:1d:cc:42:44:36:83:d1:
         a7:41:22:46:29:08:a5:aa:b6:f9:0a:cf:6e:04:da:b7:b7:8d:
         77:5b:5b:14:02:4f:7c:8f:64:78:a6:0f:c2:df:11:4b:18:4c:
         6c:b6:4d:04:35:2d:10:46:15:74:22:17:c0:a4:6b:8d:4d:9c:
         d2:a8:e7:36:cd:da:7f:0b:e7:82:67:86:e0:12:5f:18:9e:23:
         2f:e4:42:9a:68:82:8f:ba:93:a6:07:09:e4:21:1c:e7:05:12:
         89:48:29:4c:f7:b9:c4:b0:e8:90:f3:2b:1b:76:69:fe:d4:ef:
         99:24:15:cf:97:42:ce:5d:02:0f:ef:52:85:17:02:c0:4d:19:
         27:73:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org