Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          vEwAYTvLPfJJ2R3Sh4bc93aNjFJA6IvpDnGvDEyulRE=
Subject key identifier:   DC:B4:3D:09:7C:3A:65:CC:88:AE:87:43:8B:76:61:9D:A5:28:D6:1D
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       4C65192755348CADD52F9E759C9EBA3F02EF292F
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa
Signing time:             Fri 17 Jan 2025 17:00:00 +0000
ROA not before:           Fri 17 Jan 2025 16:55:00 +0000
ROA not after:            Fri 16 Jan 2026 17:00:00 +0000
asID:                     267797
IP address blocks:        165.98.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:19:27:55:34:8c:ad:d5:2f:9e:75:9c:9e:ba:3f:02:ef:29:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jan 17 16:55:00 2025 GMT
            Not After : Jan 16 17:00:00 2026 GMT
        Subject: CN=DCB43D097C3A65CC88AE87438B76619DA528D61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:04:34:98:38:5a:2b:a3:1c:70:28:30:07:
                    e3:4b:13:89:87:32:07:43:28:2e:93:ac:a6:d4:2f:
                    81:47:ae:00:fa:bf:8c:ea:a5:c3:de:20:24:ba:60:
                    f6:6d:74:9e:b3:52:ae:52:d2:3d:3e:c1:a1:7d:9c:
                    d7:d7:5a:15:a0:58:04:9d:42:54:d0:75:25:4d:df:
                    05:36:3d:ed:1c:c7:ba:f1:c9:d2:8a:1a:fb:36:61:
                    ec:5a:c9:7c:0b:c1:53:f5:98:18:a7:84:7e:ec:49:
                    e4:9f:81:ce:84:dd:42:2b:ae:66:bc:83:20:fd:ed:
                    2e:99:e9:75:84:50:7b:b2:44:e2:b9:47:fa:2c:96:
                    26:2d:e0:de:02:09:06:81:0a:f9:82:10:1d:62:25:
                    58:bf:8c:8d:c8:cc:ff:a7:60:dc:d9:f9:4c:35:a4:
                    71:88:9d:71:88:97:4e:37:b9:4e:33:11:1d:87:a0:
                    9b:9c:35:dc:03:e5:fa:8a:02:2e:e7:03:1e:ed:82:
                    0c:7e:68:18:79:fb:93:03:f3:66:94:ab:ce:4c:ba:
                    cd:e9:49:b2:35:6d:4f:96:c3:96:43:a7:08:6e:93:
                    b0:59:41:16:dc:20:9d:bc:f3:14:87:f4:7b:8a:90:
                    3f:ec:79:05:2b:c5:36:7c:eb:00:d5:d2:a3:54:bb:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:3D:09:7C:3A:65:CC:88:AE:87:43:8B:76:61:9D:A5:28:D6:1D
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:eb:48:a7:cc:ec:a7:51:81:71:57:d7:df:47:f7:b4:0d:fc:
         10:19:34:bf:a5:75:23:a2:31:f8:d9:4b:ba:1c:4a:8b:a4:c9:
         b8:40:a5:b6:1f:74:f4:5c:97:5b:28:24:b7:d3:74:a4:57:3d:
         59:45:59:8b:67:d6:c8:22:f1:32:dd:38:b1:5d:22:08:3f:89:
         11:8d:8a:f4:a9:66:75:0f:ad:7c:02:fa:58:b4:89:ff:9f:d2:
         61:bc:4c:cd:b2:c7:4e:62:54:7c:94:ee:f3:93:90:a8:07:d3:
         e3:a9:68:a3:1f:bf:89:f3:23:54:0d:21:92:4c:45:ea:bc:76:
         f5:3a:bd:15:ed:dc:a6:a5:f3:91:e7:c2:39:6d:bf:04:4a:47:
         03:1a:a1:76:83:bd:5f:f0:e8:3a:5c:4a:72:72:d6:3a:f8:03:
         1c:d9:38:29:d7:af:53:ee:f5:99:4d:cd:cd:ef:ea:79:32:b0:
         73:50:66:c2:6f:cd:36:6e:52:4d:ad:21:22:23:3e:08:37:26:
         60:8a:e9:bb:e7:9a:0c:37:84:5c:d2:17:91:5c:af:fc:45:6d:
         a1:8c:83:33:c8:23:7c:6d:b4:63:11:9f:87:f6:2e:47:75:3d:
         70:9c:d0:c0:ca:ff:6f:b0:b2:57:9f:73:0e:d8:02:c7:df:3f:
         f1:6a:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:50 2025 by rpki-client