Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232302e302f32342d3234203d3e203532343638.roa
File:                     3136352e39382e3232302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          8oGVP+S+Wk2DwssVOQiVVaHcRT0XKIEsnSHt7JgGm3s=
Subject key identifier:   1A:20:9B:AC:82:7C:FA:20:19:01:7C:77:37:B7:5B:96:36:77:91:83
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       06062AE50A24559D5B34EDBAAA0876635C6D3870
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232302e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 08 Jan 2025 18:05:00 +0000
ROA not before:           Wed 08 Jan 2025 18:00:00 +0000
ROA not after:            Wed 07 Jan 2026 18:05:00 +0000
asID:                     52468
IP address blocks:        165.98.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Feb 2025 22:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:06:2a:e5:0a:24:55:9d:5b:34:ed:ba:aa:08:76:63:5c:6d:38:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jan  8 18:00:00 2025 GMT
            Not After : Jan  7 18:05:00 2026 GMT
        Subject: CN=1A209BAC827CFA2019017C7737B75B9636779183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:c6:c6:e1:0e:9e:c1:e1:50:4f:ae:90:90:
                    5e:63:f5:a1:6a:d0:3e:c8:ae:80:b1:ad:77:ba:d9:
                    5a:ac:65:01:03:7c:8a:b7:2b:4b:9e:7b:dd:fc:2b:
                    73:92:76:7d:27:b0:eb:7f:3b:1a:bf:e5:87:4e:34:
                    62:e2:cd:8f:77:8b:8d:a9:c9:6d:f6:81:bd:00:55:
                    26:d5:32:0b:ea:a8:a0:1c:67:6d:7e:78:22:8e:9a:
                    c9:59:59:02:41:e5:95:95:0d:97:94:41:d0:5d:05:
                    70:a7:48:ac:16:05:98:72:4f:4f:3b:47:ba:d1:d2:
                    3d:43:0f:1b:3f:3d:e5:1c:a9:0f:8a:a3:18:85:7c:
                    df:23:25:42:ba:01:dd:9f:79:49:a6:fc:ce:1d:2e:
                    5e:86:f2:c0:3f:63:2b:1d:36:6e:a6:c9:10:0f:18:
                    90:28:6b:86:16:1d:1f:a5:9c:93:3d:b9:e8:0b:3f:
                    bb:e2:90:d6:0e:c7:d8:10:cb:79:eb:00:ed:06:2d:
                    60:87:6a:4a:dc:78:ce:c5:f7:9a:00:57:71:27:b4:
                    19:95:3c:91:09:41:d1:06:3c:39:71:d0:87:2c:1c:
                    9e:66:dd:78:40:79:3a:99:29:ad:70:53:36:99:a1:
                    9a:c2:41:cc:b2:9b:94:78:31:c6:9d:4e:a0:f8:ab:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:20:9B:AC:82:7C:FA:20:19:01:7C:77:37:B7:5B:96:36:77:91:83
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:93:a9:c4:02:f9:b8:e1:fe:58:fe:02:53:4c:f0:8c:6e:
         80:d9:d6:b4:7c:4d:d4:b1:17:9d:72:04:25:60:c4:6e:b9:e2:
         5c:7c:dd:5d:63:fa:f5:6d:f4:91:60:6f:ec:41:a2:6a:99:b7:
         e7:3c:d5:6c:3a:86:bc:87:5f:10:b0:57:4c:86:79:79:bd:e9:
         53:d2:8f:f3:71:4b:42:f1:a2:94:f4:51:d2:b2:3c:59:08:81:
         53:af:99:8a:03:d0:41:aa:6f:65:27:96:3d:ff:d6:d9:92:da:
         d4:4b:a5:79:bc:14:3f:c2:e4:09:0b:e1:db:58:6c:88:06:1a:
         0f:ec:7f:12:e1:1b:c1:8c:25:e5:40:d2:a6:e2:3e:98:fd:fb:
         a2:d8:5d:6c:10:27:0e:52:2a:21:2a:0d:be:14:93:4a:9b:d2:
         73:8d:37:2b:53:52:72:1a:31:db:49:70:ca:99:5f:43:e4:6a:
         3f:8b:3b:5c:ac:41:af:42:2f:b7:cd:52:75:ad:be:34:19:75:
         55:f5:fb:7d:f1:32:d8:83:82:ea:16:57:fa:61:24:34:84:58:
         50:88:4d:c3:42:4d:9d:58:3f:a6:11:c6:01:c5:58:b7:c1:c5:
         66:bd:06:88:d3:75:d6:d6:b2:df:d3:f4:a0:7b:3f:a2:66:92:
         a3:14:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:47:57 2025 by rpki-client