Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33382e302f32342d3234203d3e203138383430.roa
File:                     3136352e39382e33382e302f32342d3234203d3e203138383430.roa (raw, json)
Hash identifier:          a8BdtirRRjNGLQZ94C51NAp20tnxfT+n0SiVKC61KD8=
Subject key identifier:   46:79:3E:38:F2:29:26:22:EE:CD:40:0D:AE:D7:7A:03:82:02:11:66
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       608758D93AC2D4BF28E17F9EB24A180B5AE296A3
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33382e302f32342d3234203d3e203138383430.roa
Signing time:             Tue 31 Mar 2026 20:37:01 +0000
ROA not before:           Tue 31 Mar 2026 20:32:01 +0000
ROA not after:            Tue 30 Mar 2027 20:37:01 +0000
asID:                     18840
IP address blocks:        165.98.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:87:58:d9:3a:c2:d4:bf:28:e1:7f:9e:b2:4a:18:0b:5a:e2:96:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 31 20:32:01 2026 GMT
            Not After : Mar 30 20:37:01 2027 GMT
        Subject: CN=46793E38F2292622EECD400DAED77A0382021166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:39:75:94:1b:4f:5b:8b:40:62:f9:84:26:
                    06:c4:17:2c:de:2e:14:4f:02:eb:c6:64:5d:41:b2:
                    17:3d:9f:21:de:2d:3b:82:23:72:c5:4a:6d:92:06:
                    ad:29:34:93:5d:6c:6f:c1:f9:9b:cc:b4:ee:e1:96:
                    2b:5e:52:ef:f3:89:00:a6:db:6b:49:59:38:33:8e:
                    ee:79:13:96:c8:1e:db:a0:af:da:e0:ac:e3:6e:17:
                    a2:8e:cf:db:de:ba:a0:19:48:fc:b2:8a:be:29:ba:
                    da:3c:25:a9:46:f1:b4:b1:29:dd:19:97:9a:5d:59:
                    cb:cd:04:3a:6f:28:1f:59:66:01:fb:5c:47:50:75:
                    69:7d:b0:3d:41:53:64:63:75:00:cc:ad:05:11:d3:
                    f8:de:3c:94:c4:4f:92:9d:18:96:bf:cb:49:78:8c:
                    5a:74:88:d1:9a:f9:30:4a:33:24:76:e3:37:65:7c:
                    16:5b:31:f0:0e:7b:dc:25:bd:29:68:f8:94:f5:f6:
                    87:8f:da:c0:b0:3c:63:30:bb:73:05:3f:cf:d4:6a:
                    58:16:91:ac:22:10:d0:24:40:5b:a2:4e:58:f5:b9:
                    f9:2e:46:b4:f5:27:3c:3e:a1:29:17:1e:ca:31:96:
                    b9:20:19:96:4e:c6:43:ac:21:8b:f8:05:5b:46:d7:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:3E:38:F2:29:26:22:EE:CD:40:0D:AE:D7:7A:03:82:02:11:66
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33382e302f32342d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:db:13:4a:3f:1d:57:5b:b5:d1:cd:b8:56:cb:2c:5b:be:1e:
         8a:1a:ce:05:df:63:ca:ff:13:af:a2:f2:fd:4e:2d:33:35:b4:
         f6:9d:bd:93:02:84:91:d2:c7:1d:72:9e:34:b2:f1:7f:c4:f0:
         a9:26:e5:97:50:73:63:64:bf:5b:7b:9d:1a:30:21:b4:28:0b:
         b6:81:d0:dd:d2:fb:e9:53:43:48:ad:7b:5f:21:2c:47:7e:b9:
         ac:d1:3b:34:d4:e7:bf:7a:72:03:27:55:93:dd:ef:e9:1c:f3:
         8d:9f:49:2b:57:83:cd:4e:99:77:67:a4:f2:dd:38:5b:f4:6b:
         f6:5d:07:71:f9:86:f0:58:d9:78:0d:33:8d:ad:7e:da:8d:be:
         c2:87:18:92:12:38:cd:64:4e:6e:6b:b1:20:bf:f7:ce:55:03:
         d6:63:56:dc:75:33:8f:da:19:ef:79:43:37:a8:e0:05:4f:4d:
         1e:05:54:9e:e3:1d:96:b3:26:30:42:c5:b8:f8:a0:47:3e:34:
         42:ac:32:ed:73:55:af:d8:2d:43:24:92:eb:52:83:9f:ae:f7:
         23:e6:bd:fb:b1:02:e6:91:2d:4f:e8:ac:1e:82:90:2d:83:5d:
         91:d5:43:39:48:ba:0c:95:e0:30:ef:2d:98:ce:a9:3c:5d:86:
         c2:6a:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:07:37 2026 by rpki-client