Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133322e302f32342d3234203d3e203237373432.roa
File:                     3136352e39382e3133322e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          N0YqxBgA71xm/GYbqXvjFo8vj5SGvLjm7uTeqdlJlUE=
Subject key identifier:   BA:3A:30:FF:F6:9C:CB:25:B2:7C:1B:B2:B7:68:AF:49:94:1F:12:73
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       1B020AC0D485AA9182526ABC077E23AD9BFC4432
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133322e302f32342d3234203d3e203237373432.roa
Signing time:             Wed 31 Jul 2024 21:00:00 +0000
ROA not before:           Wed 31 Jul 2024 20:55:00 +0000
ROA not after:            Wed 30 Jul 2025 21:00:00 +0000
asID:                     27742
IP address blocks:        165.98.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:02:0a:c0:d4:85:aa:91:82:52:6a:bc:07:7e:23:ad:9b:fc:44:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jul 31 20:55:00 2024 GMT
            Not After : Jul 30 21:00:00 2025 GMT
        Subject: CN=BA3A30FFF69CCB25B27C1BB2B768AF49941F1273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:1a:e2:fe:c8:1b:7e:03:b0:e7:6c:81:be:
                    6d:c3:65:c7:26:88:8f:a1:2e:7f:99:ca:24:f1:bd:
                    73:bc:be:c4:52:f6:de:21:4c:a8:1e:2c:14:06:e0:
                    2e:21:28:3f:d5:bd:95:a3:c1:68:fa:ea:28:50:23:
                    26:14:d1:08:fb:f9:1f:71:89:00:41:37:ce:c8:85:
                    b9:db:57:71:b1:a6:8d:83:01:66:44:2f:70:85:a7:
                    e0:b0:54:f2:ea:58:88:1e:91:0d:b7:dc:08:86:e3:
                    f6:ed:11:7c:d0:9a:50:f1:e0:cc:ab:a0:31:fe:2e:
                    62:52:dd:99:2c:ad:a8:24:e4:66:9e:56:d9:e5:c8:
                    ca:4d:ed:f8:2e:f3:41:c9:25:1f:af:52:ea:4d:6f:
                    b8:3a:ab:d7:f6:77:4d:85:26:b3:df:c3:3c:43:c2:
                    f0:cd:2e:3d:1d:34:8d:12:ed:cb:62:3d:7f:69:3e:
                    c0:09:fe:39:7b:14:f3:c4:5e:98:78:67:f0:0e:8a:
                    e3:9e:d8:df:b2:7b:e7:c0:e5:43:92:a5:88:9c:8a:
                    96:d3:96:ed:20:04:c7:b8:d0:2f:35:98:20:19:27:
                    10:94:6f:6f:23:54:40:10:ea:1e:14:37:8e:ef:d1:
                    27:ba:80:08:1c:f4:34:c5:33:3a:6c:ac:f0:1c:b7:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:30:FF:F6:9C:CB:25:B2:7C:1B:B2:B7:68:AF:49:94:1F:12:73
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133322e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:76:9b:a7:ad:6a:bf:74:34:85:21:eb:c9:6c:8e:f9:f4:0e:
         68:c6:bd:ad:6a:be:3b:01:d9:10:b9:3f:3e:e3:45:52:88:74:
         49:f8:0c:58:5e:36:d1:18:0e:d1:b8:1a:31:d9:6a:a8:fd:c1:
         5c:6e:5c:f9:3b:61:fd:15:d1:37:8c:37:2c:98:dc:cd:75:83:
         5d:f7:7c:8d:fc:23:b3:b9:aa:93:87:16:4e:06:f4:4d:cb:8e:
         7e:52:59:b0:3e:73:89:56:36:78:e0:2a:fe:f7:f4:60:85:cd:
         d6:15:cd:82:4e:b4:a0:d2:dd:56:cb:e2:e2:b7:99:58:83:da:
         6d:12:d2:5a:90:9f:85:c8:54:6c:00:e9:eb:ac:77:c8:09:af:
         e7:a4:b3:fd:10:b5:c4:93:6a:a4:8c:4c:88:c8:f4:5b:d2:b4:
         f6:c2:b9:ad:b4:90:5c:72:3f:44:e0:41:ab:d4:49:f6:32:8a:
         97:db:a4:c2:58:f6:2d:07:36:9c:95:a5:14:f9:66:7b:c1:2e:
         d9:1f:98:84:a9:0e:7f:cc:1c:a1:5e:a1:c5:1f:7e:a0:cc:87:
         ce:43:50:2b:42:0a:39:db:47:f1:77:a6:a5:9b:21:53:09:9c:
         00:76:84:6b:d8:60:7c:61:1c:9b:91:c5:a5:48:7c:e8:22:39:
         7d:f0:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:03 2025 by rpki-client