Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37382e302f32342d3234203d3e203532323938.roa
File:                     3136352e39382e37382e302f32342d3234203d3e203532323938.roa (raw, json)
Hash identifier:          FSFyn8nf7f9yQ+0Bg2v+6mU+oKqNj07zxglenNlo/6c=
Subject key identifier:   0B:2C:07:37:3D:71:15:AA:34:24:F3:9B:D0:EE:01:AF:A8:68:39:8B
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       63B0E6AF91B03E2CD69C1F0A52F2000986664EA8
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37382e302f32342d3234203d3e203532323938.roa
Signing time:             Fri 14 Mar 2025 17:10:00 +0000
ROA not before:           Fri 14 Mar 2025 17:05:00 +0000
ROA not after:            Fri 13 Mar 2026 17:10:00 +0000
asID:                     52298
IP address blocks:        165.98.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 08:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b0:e6:af:91:b0:3e:2c:d6:9c:1f:0a:52:f2:00:09:86:66:4e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Mar 14 17:05:00 2025 GMT
            Not After : Mar 13 17:10:00 2026 GMT
        Subject: CN=0B2C07373D7115AA3424F39BD0EE01AFA868398B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:23:6c:c2:46:ad:67:6a:23:3d:de:e5:d1:
                    9d:96:d5:ef:b3:3b:04:48:87:fe:69:78:f4:cb:9d:
                    33:92:e6:91:f8:29:25:75:8d:f2:b0:b4:41:81:82:
                    6a:e8:69:f8:08:38:c0:22:ee:0b:df:7a:18:55:3a:
                    83:67:a3:22:4f:47:c7:21:96:72:ff:ed:75:6b:34:
                    47:ff:ca:f3:4e:a4:d9:7a:cb:34:26:97:fe:03:d7:
                    0d:49:9c:a0:d5:52:8e:ba:fd:af:9a:71:c5:db:61:
                    30:bc:cb:d0:89:bd:14:13:02:77:d2:51:fd:7a:56:
                    ce:dc:c2:87:31:e6:c8:75:3f:6b:54:be:c8:ff:3a:
                    ee:28:ce:c0:b0:12:0b:02:2d:f3:eb:0d:aa:f6:b6:
                    d8:3f:41:e2:e5:bf:8c:1e:d0:df:84:b0:ce:ed:f8:
                    ed:ad:6c:d7:f5:f3:91:6e:e6:ea:11:07:44:7f:a4:
                    6e:46:39:13:5c:c4:4d:34:44:84:c4:68:1f:5f:48:
                    ac:99:5a:93:e8:04:e0:33:81:e8:16:7a:94:07:9b:
                    b4:6e:f0:95:b3:04:f9:ac:6f:f1:89:e5:a3:ad:34:
                    a0:a0:26:1e:8c:e9:85:c2:03:9d:d4:85:84:ed:86:
                    13:13:39:41:49:0c:46:fb:5c:4d:c6:88:cc:9b:1c:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2C:07:37:3D:71:15:AA:34:24:F3:9B:D0:EE:01:AF:A8:68:39:8B
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37382e302f32342d3234203d3e203532323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:2e:9d:ac:9d:6f:8b:25:ff:66:bf:f4:90:35:97:49:c0:
         f8:d3:2f:c3:ae:a2:d5:a1:cf:04:b6:3f:41:27:3d:b9:53:46:
         8d:64:ee:51:c2:9f:08:27:63:73:38:38:a6:3f:fd:0d:87:c9:
         fe:bb:17:f4:3b:dd:8c:be:85:88:6e:cf:7a:33:66:33:d2:2f:
         fe:e8:8f:2f:a3:92:a0:f8:73:49:83:3d:86:dc:e6:0e:01:9c:
         dd:41:5e:78:b3:c0:e3:14:e5:ce:fb:76:da:d3:50:2c:df:2a:
         b6:1e:47:87:11:0c:02:45:64:1d:6b:49:b7:de:cb:68:9f:41:
         43:34:56:8f:92:d1:16:ed:73:4c:a5:88:c3:24:af:15:fa:29:
         9f:b3:a1:ec:11:d7:be:6f:ff:f7:b7:75:eb:43:88:15:03:11:
         d3:b4:de:ab:a3:16:93:24:7e:52:55:c7:f8:28:bc:24:58:5e:
         63:c3:c9:af:4d:06:32:50:bc:ed:5b:83:1a:16:df:93:ff:30:
         93:ed:29:2f:9f:d6:1e:47:ad:29:9d:9d:e8:0e:09:a9:09:13:
         2c:09:d0:21:bb:e4:3f:42:45:79:1a:59:9f:8c:70:a2:85:2f:
         06:d9:a4:99:1e:26:74:1a:bd:68:f8:31:a3:52:29:46:f9:fa:
         55:2d:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:42:01 2025 by rpki-client