Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134342e302f32342d3234203d3e203134373534.roa
File:                     3136352e39382e3134342e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          5wtbfdej3k5/P9EEWhvUdkM+wCAOS91AoufSOz7Py7c=
Subject key identifier:   19:B5:01:1A:3E:F6:DD:B3:DE:A6:A0:03:98:3B:1C:6D:5C:B7:8D:E6
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       2C234E841A992CC69B336AFA5FDB164E42790AFD
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134342e302f32342d3234203d3e203134373534.roa
Signing time:             Thu 27 Jun 2024 18:00:00 +0000
ROA not before:           Thu 27 Jun 2024 17:55:00 +0000
ROA not after:            Thu 26 Jun 2025 18:00:00 +0000
asID:                     14754
IP address blocks:        165.98.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:23:4e:84:1a:99:2c:c6:9b:33:6a:fa:5f:db:16:4e:42:79:0a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jun 27 17:55:00 2024 GMT
            Not After : Jun 26 18:00:00 2025 GMT
        Subject: CN=19B5011A3EF6DDB3DEA6A003983B1C6D5CB78DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:87:e8:a0:bb:e3:5d:74:3a:fd:ea:6f:94:
                    06:03:ff:61:87:99:1d:e0:fe:e0:46:88:5a:21:69:
                    a2:1b:ee:7b:ad:f5:f3:22:b7:af:b8:70:b7:f3:23:
                    1f:59:ba:8f:b1:ff:d3:7a:92:87:c5:e3:0b:ff:28:
                    28:6e:8d:64:30:e6:02:22:a4:73:2b:e7:10:f5:bf:
                    c7:d8:55:ab:30:8d:84:0c:c8:2f:57:69:49:fb:fb:
                    30:b2:9b:c7:ac:e7:dd:aa:a7:5d:61:d1:be:a9:4d:
                    cd:31:de:7c:ad:c5:69:36:8a:49:a7:a2:99:61:24:
                    00:15:5d:7b:e8:4c:e3:86:d5:df:01:da:7f:3e:91:
                    16:44:7f:02:ea:a0:f4:a3:63:f5:fd:1a:40:c7:4d:
                    5b:f7:db:29:93:ce:f1:10:7f:a1:98:f9:40:83:c6:
                    5c:fc:c7:74:66:6a:d5:8f:83:de:51:d6:26:ce:90:
                    3e:05:13:4a:7b:25:8a:d3:f9:6e:37:c9:cf:04:a5:
                    7c:fa:3b:6d:dd:f3:61:79:3d:8d:07:0a:16:3a:25:
                    86:11:42:91:dd:b6:94:1e:65:19:66:95:5a:e1:a7:
                    52:9f:f8:ec:64:27:8c:ef:e6:eb:70:eb:a4:6f:a6:
                    ee:7b:2a:2d:38:b7:88:cc:3d:bd:07:5a:ec:55:a0:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B5:01:1A:3E:F6:DD:B3:DE:A6:A0:03:98:3B:1C:6D:5C:B7:8D:E6
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134342e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:c7:e5:74:80:36:2b:78:72:a1:81:02:c1:72:da:ca:d4:
         f2:24:d9:65:d0:e3:4a:54:b1:51:08:ba:3e:c0:71:88:75:9c:
         2e:54:32:46:7e:33:30:fa:ba:a4:8a:e6:15:d1:85:d7:aa:80:
         1b:e4:5d:c0:77:9a:2d:54:b6:28:3e:90:60:c5:e0:5a:30:0f:
         51:a7:e0:06:31:fd:d9:67:7c:18:b2:1d:3a:24:3b:e4:b0:f4:
         65:26:a4:d5:ce:82:24:42:d7:34:57:90:36:77:21:62:02:51:
         65:3a:ae:82:7a:5f:99:e1:7c:07:56:53:b9:09:42:09:0b:74:
         6c:e8:06:b7:52:c1:cf:3a:40:80:d6:cf:bb:11:43:9d:bb:c3:
         5e:df:c6:67:b1:fa:e5:e1:93:85:66:7f:73:ef:4f:d4:ea:5e:
         6b:1a:46:d7:93:79:8e:cf:22:65:1e:4c:bf:a2:75:4b:a9:f9:
         e2:b8:e9:cc:94:39:75:de:e5:f3:9c:b5:1e:56:14:01:f9:16:
         ef:41:6f:b7:08:44:21:95:6b:ac:2d:bd:3a:67:a8:62:09:bc:
         d2:ca:74:cf:d2:b8:5c:22:eb:77:72:53:2f:ee:d1:30:e9:7b:
         ef:08:58:ad:2a:b6:25:a5:9b:21:65:26:e3:3c:b1:41:97:cb:
         a0:5d:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org