Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232382e302f32342d3234203d3e203235363037.roa
File:                     3136352e39382e3232382e302f32342d3234203d3e203235363037.roa (raw, json)
Hash identifier:          znPZ4yNL2TNEXVDaIGMXR3+I/FqbcHkAzwIbEG0g4a0=
Subject key identifier:   D9:43:F3:FA:A5:04:61:26:60:8B:46:B7:01:F3:F4:7F:15:D6:10:CB
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       2E9E1BF620CD08AE71E83F52C377EB263A78F472
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232382e302f32342d3234203d3e203235363037.roa
Signing time:             Sat 12 Jul 2025 14:35:00 +0000
ROA not before:           Sat 12 Jul 2025 14:30:00 +0000
ROA not after:            Sat 11 Jul 2026 14:35:00 +0000
asID:                     25607
IP address blocks:        165.98.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 17:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9e:1b:f6:20:cd:08:ae:71:e8:3f:52:c3:77:eb:26:3a:78:f4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jul 12 14:30:00 2025 GMT
            Not After : Jul 11 14:35:00 2026 GMT
        Subject: CN=D943F3FAA5046126608B46B701F3F47F15D610CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:ee:1f:13:fa:1f:47:6f:db:bd:2a:e3:de:
                    7d:c8:48:dc:af:75:d7:64:e0:0a:fa:b5:1b:d3:ee:
                    ab:18:d7:f7:f7:c6:30:a7:88:e0:29:7f:29:70:c4:
                    8a:6c:95:0c:dd:7e:ba:7f:5d:82:e5:2b:95:09:52:
                    6c:9f:32:eb:5a:a0:db:7b:7b:bc:1e:83:f8:7c:e4:
                    d8:be:12:a5:c8:7c:2e:c1:f7:4e:29:a7:99:9e:4d:
                    54:ba:5c:12:ea:30:14:f3:3f:0e:a2:55:33:02:24:
                    6b:47:68:43:6d:01:a1:c9:0f:5f:e9:c7:8c:40:0f:
                    0a:e0:1b:e0:f2:6b:1e:49:04:ab:03:33:b4:f7:44:
                    4a:47:e7:aa:e3:84:0b:e2:ac:28:af:b7:40:44:c5:
                    1d:e6:d6:99:13:30:5b:22:32:02:ba:f7:15:95:60:
                    94:7c:a7:d2:11:5f:6b:7f:01:eb:60:d5:ea:0a:fb:
                    cc:db:8b:7e:0b:c6:70:9b:2b:6d:89:22:45:fc:f2:
                    6d:87:67:f4:b3:5d:b1:d4:ba:b8:bf:73:61:43:53:
                    f5:e3:79:2a:ba:7b:79:56:86:b9:80:ac:d9:08:fa:
                    02:de:eb:53:d4:7b:9b:c0:8d:a2:36:f2:7d:cd:c0:
                    eb:0d:a8:e9:70:0f:6a:20:8b:9e:58:1b:3b:0e:6f:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:F3:FA:A5:04:61:26:60:8B:46:B7:01:F3:F4:7F:15:D6:10:CB
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3232382e302f32342d3234203d3e203235363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:15:ec:89:fa:6b:9a:4d:39:60:ca:15:3f:c5:dc:27:43:
         f5:1b:e1:00:59:33:b7:a0:23:12:51:3a:0a:fc:45:da:07:80:
         d6:a4:ba:da:69:fe:25:1f:cf:5f:f9:94:c7:e2:c9:39:36:2b:
         ce:b9:e2:5c:6d:4b:b4:0f:4f:d3:fa:99:67:0a:ca:0f:e0:43:
         c5:23:ef:60:f9:b6:a6:3f:f8:c0:92:a1:d5:f3:ed:aa:a0:8b:
         38:bf:4e:92:08:eb:bc:4c:a9:53:04:3c:8e:ec:43:f0:f1:eb:
         2a:64:d1:24:21:34:b0:05:6b:6e:31:08:77:5b:56:2d:c1:4f:
         45:f4:dd:a3:af:19:12:f7:e0:6a:d9:c4:82:92:0a:02:4a:e8:
         46:9d:61:07:f6:bf:d5:27:05:39:88:8c:c0:0d:81:af:a2:e5:
         d1:d1:38:30:cc:6a:70:42:67:cb:57:10:87:d6:83:0a:a7:84:
         1a:32:96:4d:a8:26:0e:ec:10:1f:ce:79:36:09:ba:74:41:95:
         de:39:c3:fe:da:63:79:38:0d:86:aa:02:80:94:43:1a:a6:9a:
         0c:5f:6c:02:f7:c0:4f:2b:e8:90:f4:d3:d4:d3:eb:7a:07:1d:
         0f:8e:1e:7b:40:ac:ae:3a:04:c2:d1:61:aa:bf:d4:ba:09:71:
         81:3f:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:01:26 2025 by rpki-client