Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3234382e302f32342d3234203d3e203138383430.roa
File:                     3136352e39382e3234382e302f32342d3234203d3e203138383430.roa (raw, json)
Hash identifier:          8sPXINqZ6fSYYESXWutfEU8VbsitFSzPZ7Fa/ONGr1U=
Subject key identifier:   3B:1F:E5:D6:E7:DA:1A:07:A9:BF:8C:67:8C:01:51:C1:84:9B:43:2B
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       74381821787184FED0680E8DFE7CE7064D768C1A
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3234382e302f32342d3234203d3e203138383430.roa
Signing time:             Tue 31 Mar 2026 20:37:04 +0000
ROA not before:           Tue 31 Mar 2026 20:32:04 +0000
ROA not after:            Tue 30 Mar 2027 20:37:04 +0000
asID:                     18840
IP address blocks:        165.98.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:38:18:21:78:71:84:fe:d0:68:0e:8d:fe:7c:e7:06:4d:76:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 31 20:32:04 2026 GMT
            Not After : Mar 30 20:37:04 2027 GMT
        Subject: CN=3B1FE5D6E7DA1A07A9BF8C678C0151C1849B432B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:37:20:25:42:9e:58:e8:4b:d3:f2:fa:3e:
                    a8:e8:0d:35:3b:9d:12:44:d3:a3:d6:be:39:82:21:
                    88:c5:6b:d9:e5:6b:be:2d:a3:0a:44:b6:96:d2:36:
                    fa:40:51:ae:bd:cc:6d:7a:b7:a1:85:16:47:09:39:
                    97:50:69:55:a8:18:56:dd:db:1c:bf:ec:d3:4d:3b:
                    3f:4f:e3:49:8d:d7:b5:1b:42:f3:b5:76:55:93:4d:
                    be:13:af:39:79:05:36:8f:ca:20:9b:4b:5d:db:58:
                    c9:50:97:3e:12:73:75:40:e9:86:cc:f3:42:ca:ec:
                    a8:cd:f3:d4:40:75:6c:13:04:31:78:dd:f1:f2:97:
                    a7:71:22:1d:3d:eb:2f:2f:e6:35:91:a9:5f:f8:06:
                    c5:4c:10:d7:3c:cf:fc:c5:6b:05:e7:5d:a8:7d:a1:
                    3e:ee:fe:e0:2b:f2:c9:32:fd:44:90:8e:30:69:bf:
                    f2:6c:af:3a:87:39:17:96:44:5a:88:11:cd:c0:2e:
                    24:28:3e:59:4d:b7:8e:73:06:b1:20:d6:53:2d:95:
                    af:9a:79:ce:cd:a9:be:65:1e:24:42:96:cd:42:00:
                    28:ee:0d:a4:f1:52:75:e4:9b:0f:81:fb:6e:6e:08:
                    b9:f2:21:c1:6a:19:77:99:13:fa:46:84:ea:07:4a:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:E5:D6:E7:DA:1A:07:A9:BF:8C:67:8C:01:51:C1:84:9B:43:2B
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3234382e302f32342d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:ab:dd:fb:33:5a:18:3f:42:86:7f:07:33:1b:3f:5b:c0:2d:
         68:20:6b:8a:66:a2:fb:46:3b:2c:ed:3b:bd:ab:ec:59:42:3d:
         e9:bc:f4:a6:f9:37:35:33:79:c0:e4:d3:86:ed:1d:13:c1:7a:
         09:b1:11:2c:a5:67:0e:8e:3d:aa:bc:37:04:61:fe:f9:ac:0b:
         99:a3:a0:fe:10:a0:3c:cf:2d:7b:14:9f:69:2f:a5:8a:13:a1:
         79:b2:8d:b9:6e:13:50:38:9a:bf:38:f4:28:d3:b3:68:06:ac:
         1d:54:52:5c:c5:1d:c3:a0:02:a5:82:e1:70:d3:0a:33:0e:0d:
         db:f1:16:33:9c:c0:d0:7e:94:85:01:53:78:63:79:02:90:97:
         4c:47:65:29:2b:b0:8d:5e:ab:fc:4a:b5:e9:b4:48:a1:43:9d:
         de:27:4d:c8:58:5b:ea:de:39:2c:c6:36:fe:86:a2:cc:da:c6:
         3e:cb:ba:59:17:60:48:d6:18:ff:7e:0f:b6:6d:95:91:2c:ab:
         b0:67:a0:e6:5e:b6:a5:7b:f3:65:c8:74:50:25:12:33:1c:34:
         5c:2f:00:c1:d2:fa:19:c4:99:8e:26:dd:6e:58:55:98:c8:90:
         0a:e9:1d:ec:23:18:2c:d3:98:de:cb:8a:e4:bc:42:fb:42:61:
         2c:1d:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:08:37 2026 by rpki-client