Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          qzTmamWUnNcyNUUdOW5jzdNs6Bv/s7yC+roUkg+yCK0=
Subject key identifier:   E4:AA:76:2D:80:BB:D2:5C:25:92:96:6F:86:3A:ED:CF:02:EC:07:35
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       253DD0570DF75FA7F2418EBEE0DF88A23F85261D
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa
Signing time:             Tue 11 Feb 2025 23:55:01 +0000
ROA not before:           Tue 11 Feb 2025 23:50:01 +0000
ROA not after:            Tue 10 Feb 2026 23:55:01 +0000
asID:                     267797
IP address blocks:        165.98.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3d:d0:57:0d:f7:5f:a7:f2:41:8e:be:e0:df:88:a2:3f:85:26:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Feb 11 23:50:01 2025 GMT
            Not After : Feb 10 23:55:01 2026 GMT
        Subject: CN=E4AA762D80BBD25C2592966F863AEDCF02EC0735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:a8:83:65:1f:71:fe:a8:0f:41:4b:e5:7a:
                    25:55:00:94:ff:39:ff:63:7f:61:d4:e1:59:17:1c:
                    73:95:4d:06:55:bc:a4:72:d2:46:ba:66:3f:54:c4:
                    a5:ae:bc:ce:f8:9c:12:1e:98:d2:c5:23:bb:f2:7d:
                    21:77:c1:0b:b3:94:f0:d8:54:06:7a:2a:1f:31:2a:
                    b9:ea:93:5a:0a:4c:6c:de:a8:72:b4:25:b0:c1:cd:
                    7c:c1:24:b0:fe:9f:5f:45:f8:b7:ce:f7:5d:0c:dc:
                    13:10:a5:bb:3f:4e:d0:c3:31:0b:71:23:7f:70:00:
                    d9:06:bc:3d:a1:ca:0c:95:59:87:02:4e:d6:71:5f:
                    d1:cc:ec:fa:38:0b:e6:37:c5:3c:f2:f8:b3:7e:eb:
                    a5:45:22:76:c2:72:8b:3f:80:ca:7e:72:b8:4a:59:
                    df:7a:1d:56:59:3a:f5:0b:fd:b4:0d:3a:c6:7a:03:
                    6d:62:5d:ea:42:d6:ac:4f:a5:70:2a:08:6e:7e:bb:
                    67:98:29:ec:75:b8:ca:cf:8c:c4:fb:ed:ab:61:db:
                    dc:9a:73:7e:ac:20:4c:7e:d9:3c:ef:07:ff:a4:d4:
                    e0:0d:89:d0:1d:7c:bd:ae:d0:d4:07:b8:96:4c:fd:
                    74:5d:7f:06:df:b5:53:f4:a7:a8:7f:af:00:89:88:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AA:76:2D:80:BB:D2:5C:25:92:96:6F:86:3A:ED:CF:02:EC:07:35
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d0:3c:6e:a1:a4:91:ab:38:b5:88:62:db:e9:b5:8f:10:a8:
         7f:98:02:c4:ec:46:fb:17:46:99:2d:8f:e6:47:45:31:9c:87:
         97:33:8f:90:72:aa:be:83:d2:6a:cb:1b:81:17:53:2b:3b:ac:
         ae:d1:c7:77:dc:5a:46:7f:4b:71:45:a2:e6:a2:20:27:83:16:
         30:7c:be:cb:b1:52:06:e5:32:f0:d5:6d:ba:22:37:a9:02:97:
         ba:8d:5a:1a:0f:e8:20:e9:17:16:06:1c:7d:e5:d8:2c:32:3a:
         f4:47:4c:4a:88:06:84:b8:32:fc:a7:7b:66:f9:02:7e:26:3a:
         8e:e4:82:89:83:73:ef:72:95:9d:17:68:06:68:8d:c6:ba:82:
         fe:78:1a:1f:e0:e6:39:b3:7f:9a:d5:1e:00:f1:58:e2:8c:d3:
         d3:d2:74:9e:8d:3a:00:b1:44:39:b7:07:c1:fd:f1:3f:80:e0:
         c0:68:2b:06:f6:27:6a:92:0a:0a:27:c1:8b:02:8c:6b:17:21:
         20:46:0a:d3:64:05:10:86:d0:94:e3:f5:c2:0c:96:6d:ad:19:
         3c:71:f6:a0:d8:ce:4c:c7:ba:3a:16:7e:4f:78:17:fa:ab:2e:
         62:21:67:f3:cc:c2:c1:46:d1:e6:4c:59:0d:69:88:d5:19:25:
         bf:7f:d6:76
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJT3QVw33X6fyQY6+4N+Ioj+FJh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTAyMTEyMzUwMDFaFw0yNjAyMTAyMzU1MDFaMDMxMTAvBgNV
BAMTKEU0QUE3NjJEODBCQkQyNUMyNTkyOTY2Rjg2M0FFRENGMDJFQzA3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfKiDZR9x/qgPQUvleiVVAJT/
Of9jf2HU4VkXHHOVTQZVvKRy0ka6Zj9UxKWuvM74nBIemNLFI7vyfSF3wQuzlPDY
VAZ6Kh8xKrnqk1oKTGzeqHK0JbDBzXzBJLD+n19F+LfO910M3BMQpbs/TtDDMQtx
I39wANkGvD2hygyVWYcCTtZxX9HM7Po4C+Y3xTzy+LN+66VFInbCcos/gMp+crhK
Wd96HVZZOvUL/bQNOsZ6A21iXepC1qxPpXAqCG5+u2eYKex1uMrPjMT77ath29ya
c36sIEx+2TzvB/+k1OANidAdfL2u0NQHuJZM/XRdfwbftVP0p6h/rwCJiMrtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5Kp2LYC70lwlkpZvhjrtzwLsBzUwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzEzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApWKP
MA0GCSqGSIb3DQEBCwUAA4IBAQDC0DxuoaSRqzi1iGLb6bWPEKh/mALE7Eb7F0aZ
LY/mR0UxnIeXM4+Qcqq+g9JqyxuBF1MrO6yu0cd33FpGf0txRaLmoiAngxYwfL7L
sVIG5TLw1W26IjepApe6jVoaD+gg6RcWBhx95dgsMjr0R0xKiAaEuDL8p3tm+QJ+
JjqO5IKJg3PvcpWdF2gGaI3GuoL+eBof4OY5s3+a1R4A8VjijNPT0nSejToAsUQ5
twfB/fE/gODAaCsG9idqkgoKJ8GLAoxrFyEgRgrTZAUQhtCU4/XCDJZtrRk8cfag
2M5Mx7o6Fn5PeBf6qy5iIWfzzMLBRtHmTFkNaYjVGSW/f9Z2
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:51 2025 by rpki-client