Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132322e302f32342d3234203d3e203138383430.roa
File:                     3136352e39382e3132322e302f32342d3234203d3e203138383430.roa (raw, json)
Hash identifier:          XtPKHPADRDHzS0FnXN9nxkwS4a2ruTnNjPQiXo/IekI=
Subject key identifier:   48:4D:66:A0:3F:24:6C:04:BC:54:0A:84:84:92:38:3B:C8:F1:E5:3C
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       320B02D9980B437EC7874959295257B6EBD1A467
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132322e302f32342d3234203d3e203138383430.roa
Signing time:             Sat 03 Aug 2024 01:45:00 +0000
ROA not before:           Sat 03 Aug 2024 01:40:00 +0000
ROA not after:            Sat 02 Aug 2025 01:45:00 +0000
asID:                     18840
IP address blocks:        165.98.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0b:02:d9:98:0b:43:7e:c7:87:49:59:29:52:57:b6:eb:d1:a4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Aug  3 01:40:00 2024 GMT
            Not After : Aug  2 01:45:00 2025 GMT
        Subject: CN=484D66A03F246C04BC540A848492383BC8F1E53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:60:86:d0:93:af:18:de:50:6e:b1:1b:3a:
                    34:46:60:87:5e:0e:5a:08:d1:4d:10:0f:40:63:33:
                    d4:4e:fe:90:d2:64:1c:72:e9:20:a0:09:ed:1a:08:
                    1c:79:a3:67:26:bb:08:8e:35:6c:7c:28:2f:39:0d:
                    30:38:ad:64:39:46:84:20:12:ad:c1:c7:ea:87:a7:
                    6c:d3:e7:74:31:ce:ae:c5:67:87:17:1b:78:13:e6:
                    ae:7e:db:32:00:9e:33:df:d0:7b:21:3d:c5:b5:84:
                    5e:68:8e:c8:01:ee:d4:9a:dd:40:0a:a5:60:ce:05:
                    b5:71:e3:24:84:5c:76:52:c1:96:d4:bc:7e:c2:ff:
                    ef:78:94:1f:34:96:66:bb:27:3f:c5:fc:3c:bc:07:
                    41:ee:c4:3d:87:6f:b4:a8:63:0c:c1:e0:b8:c6:87:
                    61:df:6e:d9:0b:05:df:f0:2c:bc:1b:82:c8:2f:85:
                    73:c1:9e:d1:04:6e:03:0d:4a:07:09:7c:54:a8:b8:
                    cc:77:41:4d:96:66:6c:e2:d4:6c:e5:92:86:54:b5:
                    b4:a8:5c:f2:62:72:8e:c8:a6:65:5d:83:e8:cd:eb:
                    ef:80:b5:d4:ec:b0:ce:40:00:ef:ae:88:43:6f:df:
                    53:a8:8d:f1:f6:cc:39:10:d3:3a:0d:9b:af:39:8d:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:66:A0:3F:24:6C:04:BC:54:0A:84:84:92:38:3B:C8:F1:E5:3C
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132322e302f32342d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:93:c1:47:24:f6:d2:2a:62:93:70:44:a8:11:9a:68:56:3e:
         eb:64:34:81:c4:73:b5:64:ac:4e:09:82:e2:37:16:81:f9:f9:
         7d:73:46:7f:72:ae:4b:11:71:fd:d7:67:1a:c4:f4:ed:89:d9:
         ce:c4:56:b8:f9:15:6d:e4:0d:ac:58:3e:74:9b:21:e0:68:d6:
         aa:cc:0d:cc:cc:08:42:c4:22:06:bc:94:0e:a0:32:5e:8f:0e:
         ae:e2:a6:dc:f4:44:aa:3f:f5:47:4d:22:65:96:59:f1:7a:df:
         ad:78:20:a4:37:69:0d:a6:f2:cb:d0:7a:ff:8d:a0:37:fb:57:
         fc:27:7f:5a:cb:92:60:f0:eb:fd:1f:a6:fc:ec:71:20:a8:8b:
         6a:4b:4e:c2:23:af:99:41:b7:52:1a:3d:e9:62:23:a3:f0:97:
         cb:08:1d:8f:49:36:6a:61:66:21:99:b8:e9:3a:9a:3f:19:7e:
         ed:29:c7:5c:2a:e2:79:17:0d:1d:f5:68:82:b5:eb:55:e3:28:
         ca:b1:6c:60:b6:2d:d6:f4:1a:92:16:51:a9:9e:6d:b8:35:24:
         7e:b7:77:c7:0a:45:1c:e2:0a:cf:73:56:69:ca:d1:c5:e3:33:
         d0:94:e0:5c:cf:3b:74:4e:7a:fd:66:d1:fb:81:93:2a:64:45:
         b3:e1:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org