Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          9X6P6tdjxGjlNZ2g9IyZ1Nv28UyqCC/uANAixyoQUKg=
Subject key identifier:   C2:35:F8:B5:75:97:6E:B7:B1:BD:C1:3D:39:49:2F:84:8B:9F:DF:CD
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       757607B7B485780DD35BA0B63C97BA94F42E9A51
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa
Signing time:             Sat 06 Jun 2026 00:46:47 +0000
ROA not before:           Sat 06 Jun 2026 00:41:47 +0000
ROA not after:            Sat 05 Jun 2027 00:46:47 +0000
asID:                     267797
IP address blocks:        165.98.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:76:07:b7:b4:85:78:0d:d3:5b:a0:b6:3c:97:ba:94:f4:2e:9a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jun  6 00:41:47 2026 GMT
            Not After : Jun  5 00:46:47 2027 GMT
        Subject: CN=C235F8B575976EB7B1BDC13D39492F848B9FDFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:79:43:21:a3:48:74:79:4f:8f:ba:c3:4f:be:
                    10:b9:a5:a8:90:45:8d:3d:50:3f:4f:8b:be:27:f6:
                    8d:54:2c:99:13:3d:e7:5b:bc:04:02:cb:14:b9:c7:
                    25:6d:f2:1e:96:a2:7d:3f:f3:d5:d6:7b:a8:91:ec:
                    3e:63:7e:22:07:e6:8d:b3:90:6c:23:de:c9:79:2f:
                    08:6b:6c:64:b8:e8:6b:6d:2b:2b:36:39:de:92:f6:
                    db:c2:ba:b4:7e:a3:da:1e:68:b7:16:d2:5b:a6:19:
                    c0:8f:03:bb:28:47:05:d1:4d:68:5e:58:a5:c8:af:
                    25:7c:2f:36:7d:08:54:82:13:b8:14:d5:19:23:81:
                    ba:8b:44:4a:52:e6:4b:57:d4:85:f3:44:df:ff:98:
                    2e:4f:40:79:b0:ea:88:2a:57:dc:0b:58:7f:ba:fc:
                    b1:ee:ed:b0:0f:d3:a6:4c:c7:33:55:b7:0f:a3:aa:
                    16:6d:b7:4e:e3:6b:9a:d0:eb:89:2e:29:16:33:f9:
                    a4:64:a2:88:a3:7c:10:a8:97:fb:95:0b:d8:71:59:
                    a1:66:cb:8c:98:1e:5d:b6:d6:b6:98:89:9e:ca:35:
                    dc:64:8f:3f:3d:6f:92:03:ae:23:c4:b4:48:9e:96:
                    5e:50:22:d6:68:77:8c:20:ed:e4:04:80:6b:f0:a4:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:35:F8:B5:75:97:6E:B7:B1:BD:C1:3D:39:49:2F:84:8B:9F:DF:CD
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3130302e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:87:cf:4c:3a:e3:9d:c7:35:9f:df:bf:ee:f2:94:5b:a5:88:
         a0:37:b3:dc:98:f5:c2:43:b1:ff:95:37:56:e9:d9:6d:77:0f:
         ef:6a:3d:2c:15:97:1c:21:db:1b:2a:5e:9b:61:b6:01:4d:6d:
         eb:6e:ae:05:0b:2c:bc:e1:68:b3:73:bc:a1:2d:90:99:43:b2:
         f1:28:fc:ab:a7:2a:1b:f4:97:d3:c5:46:41:ec:74:7f:c9:4d:
         93:82:07:39:fc:8b:3f:61:80:4c:0d:50:ea:dd:3d:10:cb:9e:
         47:a6:7f:22:14:c8:64:44:23:18:96:03:22:92:37:2f:3e:9c:
         e9:9f:79:15:98:96:aa:97:45:ba:92:aa:d2:c0:a8:53:ad:56:
         b5:26:d2:02:2c:85:c4:6f:ac:8e:4b:df:99:cd:fe:f6:f1:27:
         7f:83:f3:82:52:e5:e1:f7:79:49:3d:b2:4d:9f:6f:8b:ef:7e:
         40:bd:b2:d2:eb:d5:75:e4:ec:25:1d:62:e8:79:a6:48:fe:76:
         4f:39:4e:17:8c:5f:73:b0:56:ac:23:ea:4b:7b:d1:d4:cd:6c:
         e1:b0:fc:6a:02:ad:c0:de:09:ee:99:b4:b9:ce:1b:db:9f:f8:
         ad:7f:eb:23:cc:a5:75:eb:1b:67:b2:82:02:ff:4d:9b:e5:a6:
         42:1c:2f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:17 2026 by rpki-client