Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133302e302f32342d3234203d3e203134373534.roa
File:                     3136352e39382e3133302e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          jDsaEU5bslinb6PK6rGXRfdCCqQQYCjvm/3BT4lBGXI=
Subject key identifier:   C1:71:3E:2C:F1:77:5E:66:B4:54:A3:09:6A:3A:F1:A1:81:48:A3:37
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       478B29A9ED791831C6FF52FAF2AD13DF0DE5B89A
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133302e302f32342d3234203d3e203134373534.roa
Signing time:             Wed 31 Jul 2024 23:10:00 +0000
ROA not before:           Wed 31 Jul 2024 23:05:00 +0000
ROA not after:            Wed 30 Jul 2025 23:10:00 +0000
asID:                     14754
IP address blocks:        165.98.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8b:29:a9:ed:79:18:31:c6:ff:52:fa:f2:ad:13:df:0d:e5:b8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jul 31 23:05:00 2024 GMT
            Not After : Jul 30 23:10:00 2025 GMT
        Subject: CN=C1713E2CF1775E66B454A3096A3AF1A18148A337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:dd:b4:75:f8:b1:43:e4:52:96:c6:a0:52:
                    9d:fb:9f:66:f2:7e:3c:6f:56:e6:68:96:03:6b:f0:
                    e6:7f:28:42:e9:1a:8b:51:32:08:e9:ff:8a:45:05:
                    aa:c0:01:22:61:f4:05:7a:f6:b7:f4:bc:ec:77:a8:
                    dd:54:b7:54:a2:36:c7:cb:aa:02:9a:5e:dd:02:f4:
                    75:72:95:72:11:c8:4c:1f:bc:0d:01:6b:c9:67:b0:
                    a5:84:71:b4:36:f1:08:eb:23:25:93:ad:91:64:0f:
                    f0:65:50:93:f9:45:bc:32:68:56:e7:d7:a3:77:ee:
                    51:fb:41:4b:12:10:37:bc:30:ac:c7:e9:4c:78:a3:
                    9e:76:5d:56:cc:03:b2:f8:ea:9c:64:af:ad:44:fd:
                    c9:bf:bd:14:70:a8:d2:74:30:28:51:3b:12:5c:87:
                    27:48:ba:cf:6d:78:33:76:75:f8:a5:78:e7:eb:46:
                    c3:ea:26:ff:6d:fd:54:a7:cc:ab:3c:7e:63:20:98:
                    5f:ee:f0:d9:b3:be:8d:c7:f0:b7:f1:bd:aa:f3:06:
                    76:cc:37:b9:ba:ce:34:13:7e:c6:06:35:45:a7:2f:
                    3b:cb:15:00:23:32:68:88:d6:34:d1:45:f4:6b:f6:
                    5d:c0:5c:da:78:46:c1:b2:c7:fb:60:84:4a:22:46:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:71:3E:2C:F1:77:5E:66:B4:54:A3:09:6A:3A:F1:A1:81:48:A3:37
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133302e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:65:8b:64:75:dd:45:9e:5e:66:a4:cd:2d:36:b6:fd:7f:db:
         91:c3:eb:be:f5:29:b7:02:84:0d:b3:48:c7:85:59:99:e4:1a:
         75:79:28:6c:3f:2c:9f:24:cc:b5:89:43:ee:56:96:21:e5:be:
         64:ee:dd:76:97:bf:f0:3c:26:0e:a0:9f:13:82:5a:a0:72:c8:
         5f:59:83:b9:25:f8:bd:97:8c:16:c6:7f:60:22:0e:53:c1:9e:
         0a:4b:cd:42:06:05:0d:0a:99:1d:30:54:9d:dd:9b:63:4f:98:
         81:4e:16:a4:b1:a2:75:5f:2d:d4:72:bf:cd:50:ff:58:bc:59:
         be:b2:a3:3f:77:4e:48:09:c6:f3:d9:36:be:53:75:9e:ec:e6:
         82:66:8a:d2:3c:48:2a:1d:76:51:c1:f6:95:b5:90:b7:0b:1f:
         86:81:26:be:21:6f:c2:22:89:bc:99:ff:44:93:c8:cd:9a:78:
         6b:21:aa:2c:af:b2:1b:28:c5:3e:1c:dd:14:93:b5:c6:43:c4:
         05:d0:01:39:cc:bf:27:a0:25:c2:7b:af:76:2e:4a:be:47:fc:
         ec:cf:47:10:1f:7b:ac:fa:f3:fb:3a:bd:35:e5:8e:e7:3f:ff:
         02:78:7f:4c:5d:b4:6c:74:35:f8:b5:ae:1d:66:3e:20:66:02:
         60:f9:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org