Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31312e302f32342d3234203d3e203134373534.roa
File:                     3136352e39382e31312e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          O+8orobOUEG0xx6G60FnQGoJnSY/e1yCBkHVNPZOAVI=
Subject key identifier:   49:3C:37:67:BC:1B:05:99:39:7A:AB:78:D3:15:07:2F:35:B3:32:DA
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       13DE2854213AF5FE2FBA9FA57C60AAE2446F6C05
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31312e302f32342d3234203d3e203134373534.roa
Signing time:             Wed 16 Jul 2025 20:50:00 +0000
ROA not before:           Wed 16 Jul 2025 20:45:00 +0000
ROA not after:            Wed 15 Jul 2026 20:50:00 +0000
asID:                     14754
IP address blocks:        165.98.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 17:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:de:28:54:21:3a:f5:fe:2f:ba:9f:a5:7c:60:aa:e2:44:6f:6c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jul 16 20:45:00 2025 GMT
            Not After : Jul 15 20:50:00 2026 GMT
        Subject: CN=493C3767BC1B0599397AAB78D315072F35B332DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:f0:50:08:57:71:88:2e:d5:9a:06:1d:da:
                    80:45:aa:d3:4e:c0:f4:3d:4b:98:a4:3e:3f:0e:67:
                    29:3e:10:1f:94:04:26:cd:c6:76:59:25:27:0c:16:
                    48:fd:a8:63:92:81:21:63:e5:68:9d:fc:f9:a4:e8:
                    64:46:35:da:1b:cd:b0:c8:ff:15:43:4d:28:7e:c3:
                    21:84:20:df:c0:3a:c0:28:0f:68:f2:7a:92:d3:3b:
                    97:6b:2a:81:71:00:b1:c5:c9:3d:55:bc:82:b6:5e:
                    e3:3b:d7:f4:19:87:e4:c1:6f:f6:fe:39:0b:7f:47:
                    55:a2:4e:87:e2:db:42:92:e9:dd:36:11:5e:ab:74:
                    0d:c3:e8:a4:91:51:37:16:92:80:9c:f3:e6:c3:c8:
                    42:eb:19:fb:08:f7:8a:4d:15:80:90:30:86:bc:c4:
                    27:6c:f1:ce:b3:9c:32:d0:71:74:1d:fa:08:81:bb:
                    2a:80:05:93:ef:7a:8f:cd:03:1f:8f:bc:de:7d:57:
                    43:bc:9b:a4:b6:1f:79:e0:66:53:78:e5:9f:16:24:
                    2e:27:89:e0:a7:be:08:f4:ee:b5:84:a9:7c:f2:1b:
                    53:23:23:6e:74:13:e8:22:34:06:53:52:28:c4:e0:
                    fe:88:fa:48:fe:c2:2e:f1:6b:ea:c9:d4:82:54:36:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3C:37:67:BC:1B:05:99:39:7A:AB:78:D3:15:07:2F:35:B3:32:DA
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e31312e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b6:e7:12:3b:39:95:0e:95:a9:44:6e:0f:8e:4c:f4:37:ed:
         2a:95:4e:67:2a:7b:6f:8b:60:94:ff:80:86:d1:a6:4a:75:15:
         e8:d7:ce:f2:62:3c:c8:b9:9c:a7:8d:75:ae:a2:d6:ab:b7:9f:
         4f:3c:06:62:04:38:94:68:aa:78:23:dc:cd:b1:9f:eb:9c:1c:
         df:69:d1:cc:ba:c5:6f:40:52:4b:7a:1a:13:1f:46:84:14:a9:
         47:5c:cd:99:3b:79:fe:84:2e:c6:4a:fe:bb:6b:11:5a:55:e3:
         1a:9c:52:8b:06:f2:8a:42:a2:18:29:0f:2b:51:f5:3c:a5:cc:
         c9:fd:2b:45:f2:93:53:32:24:fd:f8:ea:ca:b7:c5:24:c0:50:
         fb:f2:25:f9:b4:26:cc:7c:00:9d:cc:3e:51:ec:67:a2:3b:04:
         0f:d3:8d:5d:13:a1:8e:0f:51:d9:b7:87:2a:1e:db:13:03:81:
         3c:d7:59:5b:e8:4e:de:74:a6:2e:74:72:74:0b:54:9e:ae:6d:
         d9:4d:cd:8b:4b:08:09:74:af:5e:a7:56:59:95:66:1a:5f:b9:
         59:80:4c:3f:5a:00:c3:3d:ce:fd:9b:9f:37:e6:72:35:b2:d3:
         66:15:05:ea:de:18:78:02:a4:a2:97:90:11:63:df:5b:5b:e7:
         6f:c5:be:13
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUE94oVCE69f4vup+lfGCq4kRvbAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTA3MTYyMDQ1MDBaFw0yNjA3MTUyMDUwMDBaMDMxMTAvBgNV
BAMTKDQ5M0MzNzY3QkMxQjA1OTkzOTdBQUI3OEQzMTUwNzJGMzVCMzMyREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTPBQCFdxiC7VmgYd2oBFqtNO
wPQ9S5ikPj8OZyk+EB+UBCbNxnZZJScMFkj9qGOSgSFj5Wid/Pmk6GRGNdobzbDI
/xVDTSh+wyGEIN/AOsAoD2jyepLTO5drKoFxALHFyT1VvIK2XuM71/QZh+TBb/b+
OQt/R1WiTofi20KS6d02EV6rdA3D6KSRUTcWkoCc8+bDyELrGfsI94pNFYCQMIa8
xCds8c6znDLQcXQd+giBuyqABZPveo/NAx+PvN59V0O8m6S2H3ngZlN45Z8WJC4n
ieCnvgj07rWEqXzyG1MjI250E+giNAZTUijE4P6I+kj+wi7xa+rJ1IJUNtbnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSTw3Z7wbBZk5eqt40xUHLzWzMtowHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzEzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClYgswDQYJ
KoZIhvcNAQELBQADggEBAAq25xI7OZUOlalEbg+OTPQ37SqVTmcqe2+LYJT/gIbR
pkp1FejXzvJiPMi5nKeNda6i1qu3n088BmIEOJRoqngj3M2xn+ucHN9p0cy6xW9A
Ukt6GhMfRoQUqUdczZk7ef6ELsZK/rtrEVpV4xqcUosG8opCohgpDytR9TylzMn9
K0Xyk1MyJP346sq3xSTAUPvyJfm0Jsx8AJ3MPlHsZ6I7BA/TjV0ToY4PUdm3hyoe
2xMDgTzXWVvoTt50pi50cnQLVJ6ubdlNzYtLCAl0r16nVlmVZhpfuVmATD9aAMM9
zv2bnzfmcjWy02YVBereGHgCpKKXkBFj31tb52/FvhM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 16:01:26 2025 by rpki-client